Skip Menu |

This queue is for tickets about the String-ShellQuote CPAN distribution.

Report information
The Basics
Id: 9486
Status: resolved
Priority: 0/
Queue: String-ShellQuote

People
Owner: ROSCH [...] cpan.org
Requestors: dean [...] cs.serenevy.net
Cc:
AdminCc:

Bug Information
Severity: Critical
Broken in: 1.00
Fixed in: 1.01



Subject: NULL character not filtered
A useful module, however, passing the NULL character to a shell, even in single quotes, causes problems (see this permonks node: http://www.perlmonks.org/index.pl?node_id=38548). Would permitting only print characters be too strict? Examples: perl -le 'print qx| echo -n '\''Hello World'\'' |' perl -le 'print qx| echo -n '\''Hello \0 World'\'' |' Good Day, Dean ------------------------------------- String-ShellQuote-1.00 This is perl, v5.8.4 built for i386-linux-thread-multi GNU bash, version 2.05b.0(1)-release (i386-pc-linux-gnu)
To: bug-String-ShellQuote [...] rt.cpan.org
From: Roderick Schertler <roderick [...] argon.org>
Subject: Re: [cpan #9486] NULL character not filtered
Date: Wed, 09 Feb 2005 21:02:56 -0500
RT-Send-Cc:
On Thu, 6 Jan 2005 23:39:51 -0500 (EST), "Guest via RT" <bug-String-ShellQuote@rt.cpan.org> said: Show quoted text
> > A useful module, however, passing the NULL character to a shell, > even in single quotes, causes problems [...]
Oops! In 1.01, just uploaded, a NUL will cause shell_quote to croak(). There's a new function, shell_quote_best_effort(), which will strip the NULs and return what it can. Thanks. -- Roderick Schertler roderick@argon.org