bugGNU gv - Bugs: bug #11561, Bug when printing files with...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #11561: Bug when printing files with spaces in their filenames

Submitted by:  None
Submitted on:  Tue 11 Jan 2005 10:23:09 AM UTC  
 
Category: NoneSeverity: 4 - Important
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: Jose E. Marchesi <jemarch>
Open/Closed: ClosedRelease: None

Thu 31 Mar 2005 09:20:23 PM UTC, comment #2:

This bug has been fixed with the application of the 0000a-unchecked.diff patch.

So i close the bug.

Anonymous
Wed 02 Mar 2005 09:01:13 PM UTC, comment #1:

Note: Why is the system() call still used? It's a security leak in almost all cases. Using a function of the exec() family is a much better idea, since you are guaranteed that no `free-form' strings are passed to the shell.

Example:
$ cp blah.gz foo\;ls\;
$ gv foo\;ls\;
<click `print', select lpr and ok>
lpr: cannot access foo
<current working directory's contents>

Of course, this is an accedent waiting to happen; suppose someone opens a file from the web by use of a browser plugin that downloads the file and starts gv. That person is vulnerable to an attack without knowing it.

Anonymous
Tue 11 Jan 2005 10:23:09 AM UTC, original submission:

When you open a file with a space in the filename, the new gv works ok. But when you print one, you get the following error:

Printing via 'lpr /tmp/gv_41e3a8b2_1_File with spaces in its name.pdf' failed.

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 4 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Fri 01 Apr 2005 07:27:18 AM UTCjemarchStatusNone=>Fixed
  Open/ClosedOpen=>Closed
Tue 11 Jan 2005 05:39:15 PM UTCjemarchSeverity3 - Normal=>4 - Important
  Assigned toNone=>jemarch

Back to the top


Powered by Savane 3.1-cleanup1