Hello community, here is the log from the commit of package yast2-backup for openSUSE:Factory checked in at 2012-11-08 21:54:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/yast2-backup (Old) and /work/SRC/openSUSE:Factory/.yast2-backup.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "yast2-backup", Maintainer is "[email protected]" Changes: -------- --- /work/SRC/openSUSE:Factory/yast2-backup/yast2-backup.changes 2012-09-14 12:43:25.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.yast2-backup.new/yast2-backup.changes 2012-11-08 21:54:56.000000000 +0100 @@ -1,0 +2,7 @@ +Fri Nov 2 11:27:29 UTC 2012 - [email protected] + +- Escaping shell paths that might contain spaces or special + characters (BNC #776078) +- 2.23.1 + +------------------------------------------------------------------- Old: ---- yast2-backup-2.22.3.tar.bz2 New: ---- yast2-backup-2.23.1.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-backup.spec ++++++ --- /var/tmp/diff_new_pack.6xQHyu/_old 2012-11-08 21:54:57.000000000 +0100 +++ /var/tmp/diff_new_pack.6xQHyu/_new 2012-11-08 21:54:57.000000000 +0100 @@ -17,7 +17,7 @@ Name: yast2-backup -Version: 2.22.3 +Version: 2.23.1 Release: 0 BuildRoot: %{_tmppath}/%{name}-%{version}-build ++++++ yast2-backup-2.22.3.tar.bz2 -> yast2-backup-2.23.1.tar.bz2 ++++++ ++++ 4343 lines of diff (skipped) ++++ retrying with extended exclude list diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-backup-2.22.3/VERSION new/yast2-backup-2.23.1/VERSION --- old/yast2-backup-2.22.3/VERSION 2012-09-12 10:07:22.000000000 +0200 +++ new/yast2-backup-2.23.1/VERSION 2012-11-07 15:02:58.000000000 +0100 @@ -1 +1 @@ -2.22.3 +2.23.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-backup-2.22.3/configure.in new/yast2-backup-2.23.1/configure.in --- old/yast2-backup-2.22.3/configure.in 2012-09-12 10:02:19.000000000 +0200 +++ new/yast2-backup-2.23.1/configure.in 2012-11-07 17:44:03.000000000 +0100 @@ -3,7 +3,7 @@ dnl -- This file is generated by y2autoconf 2.23.0 - DO NOT EDIT! -- dnl (edit configure.in.in instead) -AC_INIT(yast2-backup, 2.22.2, http://bugs.opensuse.org/, yast2-backup) +AC_INIT(yast2-backup, 2.23.1, http://bugs.opensuse.org/, yast2-backup) dnl Check for presence of file 'RPMNAME' AC_CONFIG_SRCDIR([RPMNAME]) @@ -18,7 +18,7 @@ AM_INIT_AUTOMAKE(tar-ustar -Wno-portability) dnl Important YaST2 variables -VERSION="2.22.2" +VERSION="2.23.1" RPMNAME="yast2-backup" MAINTAINER="Lukas Ocilka <[email protected]>" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-backup-2.22.3/missing new/yast2-backup-2.23.1/missing --- old/yast2-backup-2.22.3/missing 2012-09-12 10:02:23.000000000 +0200 +++ new/yast2-backup-2.23.1/missing 2012-11-07 17:44:05.000000000 +0100 @@ -1,10 +1,9 @@ #! /bin/sh # Common stub for a few missing GNU programs while installing. -scriptversion=2009-04-28.21; # UTC +scriptversion=2012-01-06.18; # UTC -# Copyright (C) 1996, 1997, 1999, 2000, 2002, 2003, 2004, 2005, 2006, -# 2008, 2009 Free Software Foundation, Inc. +# Copyright (C) 1996-2012 Free Software Foundation, Inc. # Originally by Fran,cois Pinard <[email protected]>, 1996. # This program is free software; you can redistribute it and/or modify @@ -26,7 +25,7 @@ # the same distribution terms that you use for the rest of that program. if test $# -eq 0; then - echo 1>&2 "Try \`$0 --help' for more information" + echo 1>&2 "Try '$0 --help' for more information" exit 1 fi @@ -34,7 +33,7 @@ sed_output='s/.* --output[ =]\([^ ]*\).*/\1/p' sed_minuso='s/.* -o \([^ ]*\).*/\1/p' -# In the cases where this matters, `missing' is being run in the +# In the cases where this matters, 'missing' is being run in the # srcdir already. if test -f configure.ac; then configure_ac=configure.ac @@ -65,7 +64,7 @@ echo "\ $0 [OPTION]... PROGRAM [ARGUMENT]... -Handle \`PROGRAM [ARGUMENT]...' for when PROGRAM is missing, or return an +Handle 'PROGRAM [ARGUMENT]...' for when PROGRAM is missing, or return an error status if there is no known handling for PROGRAM. Options: @@ -74,21 +73,20 @@ --run try to run the given command, and emulate it if it fails Supported PROGRAM values: - aclocal touch file \`aclocal.m4' - autoconf touch file \`configure' - autoheader touch file \`config.h.in' + aclocal touch file 'aclocal.m4' + autoconf touch file 'configure' + autoheader touch file 'config.h.in' autom4te touch the output file, or create a stub one - automake touch all \`Makefile.in' files - bison create \`y.tab.[ch]', if possible, from existing .[ch] - flex create \`lex.yy.c', if possible, from existing .c + automake touch all 'Makefile.in' files + bison create 'y.tab.[ch]', if possible, from existing .[ch] + flex create 'lex.yy.c', if possible, from existing .c help2man touch the output file - lex create \`lex.yy.c', if possible, from existing .c + lex create 'lex.yy.c', if possible, from existing .c makeinfo touch the output file - tar try tar, gnutar, gtar, then tar without non-portable flags - yacc create \`y.tab.[ch]', if possible, from existing .[ch] + yacc create 'y.tab.[ch]', if possible, from existing .[ch] -Version suffixes to PROGRAM as well as the prefixes \`gnu-', \`gnu', and -\`g' are ignored when checking the name. +Version suffixes to PROGRAM as well as the prefixes 'gnu-', 'gnu', and +'g' are ignored when checking the name. Send bug reports to <[email protected]>." exit $? @@ -100,8 +98,8 @@ ;; -*) - echo 1>&2 "$0: Unknown \`$1' option" - echo 1>&2 "Try \`$0 --help' for more information" + echo 1>&2 "$0: Unknown '$1' option" + echo 1>&2 "Try '$0 --help' for more information" exit 1 ;; @@ -122,22 +120,13 @@ # Not GNU programs, they don't have --version. ;; - tar*) - if test -n "$run"; then - echo 1>&2 "ERROR: \`tar' requires --run" - exit 1 - elif test "x$2" = "x--version" || test "x$2" = "x--help"; then - exit 1 - fi - ;; - *) if test -z "$run" && ($1 --version) > /dev/null 2>&1; then # We have it, but it failed. exit 1 elif test "x$2" = "x--version" || test "x$2" = "x--help"; then # Could not run --version or --help. This is probably someone - # running `$TOOL --version' or `$TOOL --help' to check whether + # running '$TOOL --version' or '$TOOL --help' to check whether # $TOOL exists and not knowing $TOOL uses missing. exit 1 fi @@ -149,27 +138,27 @@ case $program in aclocal*) echo 1>&2 "\ -WARNING: \`$1' is $msg. You should only need it if - you modified \`acinclude.m4' or \`${configure_ac}'. You might want - to install the \`Automake' and \`Perl' packages. Grab them from +WARNING: '$1' is $msg. You should only need it if + you modified 'acinclude.m4' or '${configure_ac}'. You might want + to install the Automake and Perl packages. Grab them from any GNU archive site." touch aclocal.m4 ;; autoconf*) echo 1>&2 "\ -WARNING: \`$1' is $msg. You should only need it if - you modified \`${configure_ac}'. You might want to install the - \`Autoconf' and \`GNU m4' packages. Grab them from any GNU +WARNING: '$1' is $msg. You should only need it if + you modified '${configure_ac}'. You might want to install the + Autoconf and GNU m4 packages. Grab them from any GNU archive site." touch configure ;; autoheader*) echo 1>&2 "\ -WARNING: \`$1' is $msg. You should only need it if - you modified \`acconfig.h' or \`${configure_ac}'. You might want - to install the \`Autoconf' and \`GNU m4' packages. Grab them +WARNING: '$1' is $msg. You should only need it if + you modified 'acconfig.h' or '${configure_ac}'. You might want + to install the Autoconf and GNU m4 packages. Grab them from any GNU archive site." files=`sed -n 's/^[ ]*A[CM]_CONFIG_HEADER(\([^)]*\)).*/\1/p' ${configure_ac}` test -z "$files" && files="config.h" @@ -186,9 +175,9 @@ automake*) echo 1>&2 "\ -WARNING: \`$1' is $msg. You should only need it if - you modified \`Makefile.am', \`acinclude.m4' or \`${configure_ac}'. - You might want to install the \`Automake' and \`Perl' packages. +WARNING: '$1' is $msg. You should only need it if + you modified 'Makefile.am', 'acinclude.m4' or '${configure_ac}'. + You might want to install the Automake and Perl packages. Grab them from any GNU archive site." find . -type f -name Makefile.am -print | sed 's/\.am$/.in/' | @@ -197,10 +186,10 @@ autom4te*) echo 1>&2 "\ -WARNING: \`$1' is needed, but is $msg. +WARNING: '$1' is needed, but is $msg. You might have modified some files without having the proper tools for further handling them. - You can get \`$1' as part of \`Autoconf' from any GNU + You can get '$1' as part of Autoconf from any GNU archive site." file=`echo "$*" | sed -n "$sed_output"` @@ -220,13 +209,13 @@ bison*|yacc*) echo 1>&2 "\ -WARNING: \`$1' $msg. You should only need it if - you modified a \`.y' file. You may need the \`Bison' package +WARNING: '$1' $msg. You should only need it if + you modified a '.y' file. You may need the Bison package in order for those modifications to take effect. You can get - \`Bison' from any GNU archive site." + Bison from any GNU archive site." rm -f y.tab.c y.tab.h if test $# -ne 1; then - eval LASTARG="\${$#}" + eval LASTARG=\${$#} case $LASTARG in *.y) SRCFILE=`echo "$LASTARG" | sed 's/y$/c/'` @@ -250,13 +239,13 @@ lex*|flex*) echo 1>&2 "\ -WARNING: \`$1' is $msg. You should only need it if - you modified a \`.l' file. You may need the \`Flex' package +WARNING: '$1' is $msg. You should only need it if + you modified a '.l' file. You may need the Flex package in order for those modifications to take effect. You can get - \`Flex' from any GNU archive site." + Flex from any GNU archive site." rm -f lex.yy.c if test $# -ne 1; then - eval LASTARG="\${$#}" + eval LASTARG=\${$#} case $LASTARG in *.l) SRCFILE=`echo "$LASTARG" | sed 's/l$/c/'` @@ -273,10 +262,10 @@ help2man*) echo 1>&2 "\ -WARNING: \`$1' is $msg. You should only need it if +WARNING: '$1' is $msg. You should only need it if you modified a dependency of a manual page. You may need the - \`Help2man' package in order for those modifications to take - effect. You can get \`Help2man' from any GNU archive site." + Help2man package in order for those modifications to take + effect. You can get Help2man from any GNU archive site." file=`echo "$*" | sed -n "$sed_output"` test -z "$file" && file=`echo "$*" | sed -n "$sed_minuso"` @@ -291,12 +280,12 @@ makeinfo*) echo 1>&2 "\ -WARNING: \`$1' is $msg. You should only need it if - you modified a \`.texi' or \`.texinfo' file, or any other file +WARNING: '$1' is $msg. You should only need it if + you modified a '.texi' or '.texinfo' file, or any other file indirectly affecting the aspect of the manual. The spurious - call might also be the consequence of using a buggy \`make' (AIX, - DU, IRIX). You might want to install the \`Texinfo' package or - the \`GNU make' package. Grab either from any GNU archive site." + call might also be the consequence of using a buggy 'make' (AIX, + DU, IRIX). You might want to install the Texinfo package or + the GNU make package. Grab either from any GNU archive site." # The file to touch is that specified with -o ... file=`echo "$*" | sed -n "$sed_output"` test -z "$file" && file=`echo "$*" | sed -n "$sed_minuso"` @@ -318,49 +307,14 @@ touch $file ;; - tar*) - shift - - # We have already tried tar in the generic part. - # Look for gnutar/gtar before invocation to avoid ugly error - # messages. - if (gnutar --version > /dev/null 2>&1); then - gnutar "$@" && exit 0 - fi - if (gtar --version > /dev/null 2>&1); then - gtar "$@" && exit 0 - fi - firstarg="$1" - if shift; then - case $firstarg in - *o*) - firstarg=`echo "$firstarg" | sed s/o//` - tar "$firstarg" "$@" && exit 0 - ;; - esac - case $firstarg in - *h*) - firstarg=`echo "$firstarg" | sed s/h//` - tar "$firstarg" "$@" && exit 0 - ;; - esac - fi - - echo 1>&2 "\ -WARNING: I can't seem to be able to run \`tar' with the given arguments. - You may want to install GNU tar or Free paxutils, or check the - command line arguments." - exit 1 - ;; - *) echo 1>&2 "\ -WARNING: \`$1' is needed, and is $msg. +WARNING: '$1' is needed, and is $msg. You might have modified some files without having the - proper tools for further handling them. Check the \`README' file, + proper tools for further handling them. Check the 'README' file, it often tells you about the needed prerequisites for installing this package. You may also peek at any GNU archive site, in case - some other package would contain this missing \`$1' program." + some other package would contain this missing '$1' program." exit 1 ;; esac diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-backup-2.22.3/src/Backup.ycp new/yast2-backup-2.23.1/src/Backup.ycp --- old/yast2-backup-2.22.3/src/Backup.ycp 2012-09-12 09:55:31.000000000 +0200 +++ new/yast2-backup-2.23.1/src/Backup.ycp 2012-11-05 16:28:26.000000000 +0100 @@ -578,7 +578,7 @@ */ global define string get_archive_script_parameters(string file_list, string file_comment) ``{ - string archive_options = " --verbose --files-info " + file_list + " --comment-file " + file_comment; + string archive_options = " --verbose --files-info '" + String::Quote(file_list) + "' --comment-file '" + String::Quote(file_comment) + "'"; if (size(complete_backup) > 0) { @@ -596,8 +596,8 @@ y2debug("nfsmount: %1, archive_name: %2", nfsmount, archive_name); - archive_options = archive_options + " --archive-name " + ((target_type == `file) ? archive_name : - sformat("%1/%2", nfsmount, archive_name)); + archive_options = archive_options + " --archive-name '" + String::Quote((target_type == `file) ? archive_name : + sformat("%1/%2", nfsmount, archive_name)) + "'"; if (system) { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-backup-2.22.3/src/functions.ycp new/yast2-backup-2.23.1/src/functions.ycp --- old/yast2-backup-2.22.3/src/functions.ycp 2012-09-12 09:55:31.000000000 +0200 +++ new/yast2-backup-2.23.1/src/functions.ycp 2012-11-05 16:28:26.000000000 +0100 @@ -25,6 +25,7 @@ import "Mode"; import "FileUtils"; import "Directory"; +import "String"; textdomain "backup"; @@ -944,7 +945,6 @@ return server + ":" + share + slash + filename; } - /** * Get available space in the directory * @param directory selected directory @@ -960,12 +960,13 @@ return $[]; } - map result = (map)SCR::Execute(.target.bash_output, "/bin/df -P " + directory); + string cmd = sformat("/bin/df -P '%1'", String::Quote(directory)); + map result = (map)SCR::Execute(.target.bash_output, cmd); integer exit = result["exit"]:-1; if (exit != 0) { - y2warning("Command df failed, exit: %1", exit); + y2warning("Command %1 failed, exit: %2", cmd, exit); return $[]; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-backup-2.22.3/src/scripts/backup_archive.pl new/yast2-backup-2.23.1/src/scripts/backup_archive.pl --- old/yast2-backup-2.22.3/src/scripts/backup_archive.pl 2012-09-12 09:55:31.000000000 +0200 +++ new/yast2-backup-2.23.1/src/scripts/backup_archive.pl 2012-11-05 16:28:26.000000000 +0100 @@ -22,6 +22,7 @@ use File::Temp qw( tempdir ); use POSIX qw( strftime ); +use File::Path qw(make_path); # command line options my $archive_name = ''; @@ -75,9 +76,9 @@ { my $dirs = substr($f, 0, $ix); if ($verbose) { - print "Running: /bin/mkdir -p $dirs 2> /dev/null\n"; + print "Running: make_path $dirs\n"; } - system("/bin/mkdir -p $dirs 2> /dev/null"); # create directory with parents + make_path($dirs); } } @@ -736,7 +737,8 @@ } my $num_string = sprintf("%02d", $volume_num); - $tar_command .= " -M -V 'YaST2 backup:' -f $output_directory/${num_string}_$output_filename"; + my $out_filename = "$output_directory/${num_string}_$output_filename"; + $tar_command .= " -M -V 'YaST2 backup:' -f '".qq($out_filename)."'"; if ($multi_volume > 0) { @@ -803,16 +805,16 @@ else { # create standard (no multi volume) archive - $tar_command .= " -f $archive_name 2> /dev/null)"; - + $archive_name =~ s/\'/\'\\\'\'/g; + $tar_command .= " -f '$archive_name')"; print "Tar command: $tar_command\n"; + system($tar_command); } +print STDERR $!."\n"; if ($verbose) { print "/Tar result: $?\n"; } - - diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-backup-2.22.3/src/ui.ycp new/yast2-backup-2.23.1/src/ui.ycp --- old/yast2-backup-2.22.3/src/ui.ycp 2012-09-12 10:06:50.000000000 +0200 +++ new/yast2-backup-2.23.1/src/ui.ycp 2012-11-07 15:02:58.000000000 +0100 @@ -2827,6 +2827,8 @@ { if (substring(line, 0, size(id_tar_exit)) == id_tar_exit) { + y2milestone ("Tar exit: %1\nErr: %2", line, SCR::Read (.process.read_stderr, backup_PID)); + tar_result = tointeger(substring(line, size(id_tar_exit))); } else -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
