Bug#781091: clamav-freshclam: illegal characters in init script

2015-03-24 Thread Gabor Kiss
Package: clamav-freshclam
Version: 0.98.6+dfsg-0+deb7u1
Severity: normal

Dear Maintainer,

Please check pathfind() function in /etc/init.d/clamav-freshclam.

All double quotes (, ASCII 34, 0x22) are replaced by strange UTF-8
byte sequences e2 80 9d (U+201D, RIGHT DOUBLE QUOTATION MARK).

The latest 0.98.6+dfsg-1 also suffers from this.

Gabor

-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav

Platform information

uname: Linux 3.2.0-4-amd64 #1 SMP Debian 3.2.65-1+deb7u2 x86_64
OS: linux-gnu, ARCH: x86_64, CPU: x86_64
zlib version: 1.2.7 (1.2.7), compile flags: a9
Triple: x86_64-pc-linux-gnu
CPU: i686, Little-endian
platform id: 0x0a214f4f0804070201040702

-- System Information:
Debian Release: 7.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#781091: [Pkg-clamav-devel] Bug#781091: clamav-freshclam: illegal characters in init script

2015-03-24 Thread Sebastian Andrzej Siewior
merge 781088 781091
thanks

* Gabor Kiss | 2015-03-24 12:29:00 [+0100]:

Please check pathfind() function in /etc/init.d/clamav-freshclam.

All double quotes (, ASCII 34, 0x22) are replaced by strange UTF-8
byte sequences e2 80 9d (U+201D, RIGHT DOUBLE QUOTATION MARK).

aside from the fact that this should not be there, do you have
limitations / problems with this? I'm going to fix this but I just
wanted to know what problems this causes.

Gabor

Sebastian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#781091: [Pkg-clamav-devel] Bug#781091: clamav-freshclam: illegal characters in init script

2015-03-24 Thread Kiss Gabor (Bitman)
Dear Sebastian,

 Please check pathfind() function in /etc/init.d/clamav-freshclam.
 
 All double quotes (, ASCII 34, 0x22) are replaced by strange UTF-8
 byte sequences e2 80 9d (U+201D, RIGHT DOUBLE QUOTATION MARK).
 
 aside from the fact that this should not be there, do you have
 limitations / problems with this? I'm going to fix this but I just
 wanted to know what problems this causes.

Do you mean beyond confusing the user with no UTF-8 capable terminal? :-)
Probably no functional error is expected.

But after the two make_dir function call in line 278, 279
special variable IFS contains unwanted chars too
that may - in theory - cause problems in word splitting later.

Look this for example:
chown $DatabaseOwner $PidFile
If unquoted $DatabaseOwner (that may be be overridden by config file)
- accidentally - contains any of the above bytes the command will
be applied to more than one file. (Errr... $PidFile is also vulnerable.)

Gabor
-- 
A mug of beer, please. Shaken, not stirred.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org