bugGNU gv - Bugs: bug #11561, Bug when printing files with...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #11561: Bug when printing files with spaces in their filenames

Submitter:  None
Submitted:  Tue 11 Jan 2005 10:23:09 AM UTC
   
 
Category:  None Severity:  4 - Important
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  jemarch
Open/Closed:  Closed Release:  None

Thu 31 Mar 2005 09:20:23 PM UTC, comment #2: 

This bug has been fixed with the application of the 0000a-unchecked.diff patch.

So i close the bug.

Anonymous
Wed 02 Mar 2005 09:01:13 PM UTC, comment #1: 

Note: Why is the system() call still used?  It's a security leak in almost all cases.  Using a function of the exec() family is a much better idea, since you are guaranteed that no `free-form' strings are passed to the shell.

Example:
$ cp blah.gz foo\;ls\;
$ gv foo\;ls\;
<click `print', select lpr and ok>
lpr: cannot access foo
<current working directory's contents>

Of course, this is an accedent waiting to happen; suppose someone opens a file from the web by use of a browser plugin that downloads the file and starts gv.  That person is vulnerable to an attack without knowing it.

Anonymous
Tue 11 Jan 2005 10:23:09 AM UTC, original submission:  

When you open a file with a space in the filename, the new gv works ok.  But when you print one, you get the following error:

Printing via 'lpr /tmp/gv_41e3a8b2_1_File with spaces in its name.pdf' failed.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 4 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2005-04-01 jemarch StatusNone Fixed
    Open/ClosedOpen Closed
2005-01-11 jemarch Severity3 - Normal 4 - Important
    Assigned toNone jemarch

Back to the top

Powered by Savane 3.13-02a9.
Corresponding source code