Le 23 avr. 07 ? 10:03, Hussein Shafie a ?crit : > lejeune wrote: >> >> here is my env >> >> PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin >> DESTINATION=/private/var/tmp/folders.501/TemporaryItems/ >> 66077CC6-92D5-4BA7-8DF4-52AFCF0204F6-15384-0000038B4BD6E6AC >> PWD=/Users/lejeune/Documents/referentiel/source >> SHLVL=3 >> HOME=/Users/lejeune >> LOGNAME=lejeune > > Your env does not tell me where you have installed Ghostscript. > Please open a Terminal and type "gs" then press ENTER.
macnapcc3:~ lejeune$ gs GPL Ghostscript 8.54 (2006-05-17) Copyright (C) 2006 artofcode LLC, Benicia, CA. All rights reserved. This software comes with NO WARRANTY: see the file PUBLIC for details. GS> > > If this works, please type "type gs", then press ENTER. This should > tell > you where the executable file called "gs" has been installed. macnapcc3:~ lejeune$ type gs gs is hashed (/usr/local/bin/gs) > >> and I'm trying to add /usr/local/bin in the sell command of >> imagetoolkits.incl > > Please open a Terminal and type "ls -als /usr/local/bin/gs" and then > press ENTER. What does this print? macnapcc3:~ lejeune$ ls -als /usr/local/bin/gs 8 lrwxr-xr-x 1 root wheel 8 Mar 2 16:18 /usr/local/bin/gs -> gs- noX11 it's a link ! > >> but the result is the same... > > I hope that you got the idea. As long as the XML-declared Image > toolkit > for PosctScript and PDF cannot invoke "gs" (for *any* reason), this > will > not work. And no, XXE has no bug here.
