Skip to main content.
home | support | download

Back to List Archive

Re: New version: swish-e-1.3.2-PHRASEp.tar.gz

From: <Rainer.Scherg(at)not-real.rexroth.de>
Date: Fri Jun 16 2000 - 22:13:34 GMT
Mhh,

found a small bug, again:

file fs.c:

             sprintf(filtercmd, "%s \'%s\'",filterprog,e->filename);
             fp = popen (filtercmd,"r");  


%s in sprintf has to be quoted, so filenames like
"file with blanks.doc" (Samba-ounts, PC/windows) will be indexed correctly.

This fix should als be applied to http.c. There may be no blanks, but
other harmful/meta- characters to a shell. It may be a security hole.

             sprintf(filtercmd,"%s \'%s\'
\'%s\'",filterprog,buffer,item->url);                           


cu - rainer


----------------------------------------------------------------------
This Mail has been checked for Viruses
Attention: Encrypted Mails can NOT be checked !

* * *

Diese Mail wurde auf Viren ueberprueft
Hinweis: Verschluesselte Mails koennen NICHT geprueft werden !
----------------------------------------------------------------------
Received on Fri Jun 16 18:16:24 2000