patchGNU TeXmacs - Patches: patch #5601, Fix for Bibtex plugin when paths...


You are not allowed to post comments on this tracker with your current authentication level.

patch #5601: Fix for Bibtex plugin when paths have spaces/quotes/dollars in them

Submitted by:  Tom Hinton <hinton>
Submitted on:  Wed 29 Nov 2006 06:06:21 PM UTC  
Category: PluginsAction: Apply
Privacy: PublicAssigned to: Denis Raux <denisraux>
Open/Closed: OpenRelease: current
Fixed Release: Stable: 

Wed 29 Nov 2006 06:06:21 PM UTC, original submission:

When there are space in the path to a texmacs document the Bibtex plugin invokes bibtex without quoting or escaping the path, so this breaks texmacs files contained in directories with spaces in their names (or bibliography files in similar places).

Patch fixes this by
(a) quoting the strings passed to system and
(b) escaping quotes and $ within said strings

In theory I guess this fixes a security flaw as well, in that a malicious texmacs document could specify a bibliography file path
"/some/path; rm -rf /" or whatever, and then bibliography updates would go badly.

The substring replace code in the Classes/Atomic/string is fairly awful, for which I apologise. This patch is fit only for my purposes which don't include optimality on the small scale.

Tom Hinton <hinton>


Attached Files
file #11404:  spaces.patch added by hinton (2KiB - application/octet-stream)


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by vdhoeven (Updated the item)
  • -unavailable- added by hinton (Submitted the item)

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.


    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon 03 Mar 2014 09:54:38 PM UTCvdhoevenAssigned toNone=>denisraux
    Wed 29 Nov 2006 06:06:21 PM UTChintonAttached File-=>Added spaces.patch, #11404

    Back to the top

    Powered by Savane 3.1-cleanup1