The preflight script for MacFuse Core contains lines such as

  /bin/rm -rf $INSTALL_VOLUME/Library/Extensions/fusefs.kext

If INSTALL_VOLUME contains spaces (e.g., "/Volumes/MyDisk 2"), the
script will execute

   /bin/rm -rf "/Volumes/MyDisk" "2/Library/Extensions/fusefs.kext"

(quotes added for clarity) which is potentially disastrous (e.g., if
someone also has a disk /Volmes/MyDisk).  In shell scripts, if you
have variables that may contain spaces, you *must* put them in quotes.

I don't know whether this script would cause the catastrophic damage
shown above (I suspect it wouldn't, in fact), but I'm not about to try
my luck -- when I see a script that contains both "rm -rf" lines and
has issues with quoting, I back carefully away.

Please fix.  Thanks.

    M.E.O.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"MacFUSE" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/macfuse?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to