bug-groff
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug #55557] gropdf can execute arbitrary commands


From: Deri James
Subject: [bug #55557] gropdf can execute arbitrary commands
Date: Wed, 23 Jan 2019 18:22:35 -0500 (EST)
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0

Follow-up Comment #1, bug #55557 (project groff):

It looks like putting this line in the program, after any command line flags
have been handled/removed from ARGV:-

map { $_="< ".$_."\0" } @ARGV;

This does a similar job to the code referenced by Colin at:-

https://metacpan.org/source/DAVIDNICO/ARGV-readonly-0.01/lib/ARGV/readonly.pm

Except that it does not add "./" before any space at the start of the
filename, because that will fail if a space is given before a full pathname,
it is only useful if a file in the current directory has embedded leading
spaces in its filename. Even with the gropdf code as it is currently you would
need to pass the filename as "./ filename" to avoid the spaces being ignored.

I believe this line can be added to gropdf, hyphenex, gpinyin, and gperl. I am
not sure about glilypond yet, I need a bit more thought on that, since it does
a lot of work with ARGV in the program args.pl.

Does anyone have a better idea?

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?55557>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]