develooper Front page | perl.perl5.porters | Postings from June 2011

Re: [perl #93638] Incorrect entry in =?utf-8?b?JExTX0NPTE9SUw==?= causes glob() failures

From:
Ed Avis
Date:
June 29, 2011 06:34
Subject:
Re: [perl #93638] Incorrect entry in =?utf-8?b?JExTX0NPTE9SUw==?= causes glob() failures
Message ID:
loom.20110629T152857-23@post.gmane.org
Nicholas Clark <nick <at> ccl4.org> writes:

>[Sadly, I can't find reference to the far more "fun" bug, whereby at
>csh start time, the current directory's name could end up being subject to
>string evaluation, *with interpolation*, meaning that a nicely crafted
>directory pathname could exploit any setuid script that happened to call
>glob.

Another bug caused by csh is that globbing doesn't work with filenames containing
a space.  That particular misfeature was preserved when the code was moved into
perl itself.

-- 
Ed Avis <eda@waniasset.com>




nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About