hi,

On Mon, Sep 02, 2013 at 12:49:51AM -0500, guns wrote:
> mbsync currently assumes that all password inputs are double quote
> escaped¹. This is true for "Pass" config entries, the output of
> "PassCmd", and also for passwords entered at the terminal. [...]
> ¹ The following lines in src/compat/config.c illustrate this
> assumption: [...]
> 
this analysis is incomplete.
for one, the compat/ folder is irrelevant for mbsync - it's the isync
compatibility wrapper. it needs to be dealt with separately. it would be
probably easiest to leave the quotes in the strings and write them out
again without adding new quotes.
second, it is correct that the main config parser does not deal with
escaped qoutes. to not change the semantics of the backslash, i suggest
to employ this trick: two adjacent quotes in a quoted string expand to
one literal quote.
lastly, the PassCmd output is *not* treated in any way. the problem is
at the IMAP level: the spec does not define a means to escape quotes in
a quoted string, so every server is likely to do something else. the
solution would be sending (problematic) passwords as literals.
patches welcome.

regards

------------------------------------------------------------------------------
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
_______________________________________________
isync-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/isync-devel

Reply via email to