[mgp-users-jp 00678] Forward: Bug#52112: mgp: %filter does not allow quoting

[Fumitoshi UKAI <ukai@debian.or.jp>]

これは security のためにわざとこうしているんだったと思いますが
その理解で正しいでしょうか?

-- 
鵜飼文敏

--- Begin Message ---

• To: submit@bugs.debian.org
• Subject: Bug#52112: mgp: %filter does not allow quoting
• From: Yann Dirson - LOGATIQUE <Yann.Dirson@France.Sun.COM>
• Date: Tue, 7 Dec 1999 10:13:00 +0100 (MET)
• Reply-to: Yann Dirson - LOGATIQUE <Yann.Dirson@France.Sun.COM>, 52112@bugs.debian.org
• Resent-cc: Fumitoshi UKAI <ukai@debian.or.jp>
• Resent-date: Tue, 07 Dec 1999 09:18:03 GMT
• Resent-from: Yann Dirson - LOGATIQUE <Yann.Dirson@France.Sun.COM>
• Resent-message-id: <handler.52112.B.9445579882171@bugs.debian.org>
• Resent-sender: owner@bugs.debian.org
• Resent-to: debian-bugs-dist@lists.debian.org

Package: mgp
Version: 1.06a.19991129-1

%filter does not call the shell, as system() does in C.  Thus "sh -c
'...'" must be called to get shell functionalities (stderr
redirection, pipe, etc.).

However, mgp does not take ' into account when word-splitting %filter
command-line.  Hence the following ends with sh complaining about a
syntax error:

%filter "sh -c 'ls -l /'"
%endfilter

--- End Message ---