Your message dated Sun, 17 Jan 2010 20:47:53 +0000 (GMT)
with message-id <[email protected]>
and subject line Fixed
has caused the Debian Bug report #262688,
regarding gnome-commander won't execute commands on files with double-quotes in
their name
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
262688: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=262688
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gnome-commander
Version: 1.0.1-1
Severity: important
The problem seems to be that the entire command line is passed as a
string; the double-quotes simply get stripped out by bash. Example:
sh foo"bar" --> sh foobar
There's potential security issues for nastily named files too, for
example:
touch 'foo"; echo bar".jpg'
Double clicking this starts GIMP which complains that it can't find
"foo", and also echoes "bar.jpg" to the terminal that gnome-commander
runs in.
I tried to hunt down where the command line is generated, but I just got
lost in a maze of call after call after call.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-rc2
Locale: LANG=C, LC_CTYPE=C
Versions of packages gnome-commander depends on:
ii fam 2.7.0-5 File Alteration Monitor
ii gdk-imlib1 1.9.14-14 imaging library for use with gtk (
ii libart2 1.4.2-18 The GNOME canvas widget - runtime
ii libaudiofile0 0.2.6-4 Open-source version of SGI's audio
ii libc6 2.3.2.ds1-13 GNU C Library: Shared libraries an
ii libdb3 3.2.9-20 Berkeley v3 Database Libraries [ru
ii libesd0 0.2.29-1 Enlightened Sound Daemon - Shared
ii libfam0c102 2.7.0-5 client library to control the FAM
ii libgconf11 1.0.9-6 GNOME configuration database syste
ii libgdk-pixbuf2 0.22.0-4 The GdkPixBuf image library, gtk+
ii libglib1.2 1.2.10-9 The GLib library of C routines
ii libgnome-vfs0 1.0.5-5 The GNOME virtual file-system libr
ii libgnome32 1.4.2-18 The GNOME libraries
ii libgnomesupport0 1.4.2-18 The GNOME libraries (Support libra
ii libgnomeui32 1.4.2-18 The GNOME libraries (User Interfac
ii libgtk1.2 1.2.10-17 The GIMP Toolkit set of widgets fo
ii liboaf0 0.6.10-3 The GNOME Object Activation Framew
ii liborbit0 0.5.17-9 Libraries for ORBit - a CORBA ORB
ii libpopt0 1.7-4 lib for parsing cmdline parameters
ii libstdc++5 1:3.3.4-6 The GNU Standard C++ Library v3
ii libwrap0 7.6.dbs-5 Wietse Venema's TCP wrappers libra
ii libxml1 1:1.8.17-8 GNOME XML library
ii oaf 0.6.10-3 The GNOME Object Activation Framew
ii xlibs 4.3.0.dfsg.1-6 X Window System client libraries m
ii zlib1g 1:1.2.1.1-5 compression library - runtime
-- no debconf information
--- End Message ---
--- Begin Message ---
This bug seems to be fixed. Apologies for the delay. :)
--
David Buckley
--- End Message ---
