* Terje Bless wrote: >Bjoern Hoehrmann <derhoermi@gmx.net> wrote: > >>+ || dir[j] == '\\' > >I've not really parsed this code so it may be irrelevant, but my first concern >at allowing the backslash character to appear anywhere is that it might allow >escape sequences to get passed through (to the shell, or interpreted in C++ >land). Can you confirm that the current code is not susceptible to that? It is only allowed if the list of search paths includes a backslash or slash on the same position (the user is responsible to ensure this does not cause any problem) or if the path starts with something that is a complete allowed search path (for which the user is responsible, too). I do not know of any problem this introduces on up-to-date systems that are affected by the change.Received on Saturday, 11 September 2004 22:13:18 GMT
This archive was generated by hypermail 2.2.0+W3C-0.50 : Thursday, 19 August 2010 18:12:44 GMT