You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@spamassassin.apache.org on 2022/08/12 23:52:38 UTC

[Bug 8025] New: Taint failure handling Windows short path

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8025

            Bug ID: 8025
           Summary: Taint failure handling Windows short path
           Product: Spamassassin
           Version: 4.0.0
          Hardware: PC
                OS: Windows
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Regression Tests
          Assignee: dev@spamassassin.apache.org
          Reporter: sidney@sidney.com
  Target Milestone: Undefined

The fix for bug 8010 does not handle the '~' character in Windows short paths.
This is showing up as the same test failures as in bug 8010 when a test
encounters the short form of a directory name.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8025] Taint failure handling Windows short path

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8025

Sidney Markowitz <si...@sidney.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sidney@sidney.com
   Target Milestone|Undefined                   |4.0.0
           Severity|minor                       |normal

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8025] Taint failure handling Windows short path

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8025

Sidney Markowitz <si...@sidney.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Sidney Markowitz <si...@sidney.com> ---
The problem of untainting Windows file paths was already properly solved in
Mail::SpamAssassin::Utils::untaint_file_path() but it couldn't be called
directly in this case. Fix was to copy/paste to use the same pattern as that
sub uses.

trunk % svn ci -m "bug 8025 - Use better untaint pattern for Windows file paths
than the incomplete fix for bug 8010" lib/Mail/SpamAssassin.pm 
Sending        lib/Mail/SpamAssassin.pm
Transmitting file data .done
Committing transaction...
Committed revision 1903383.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8025] Taint failure handling Windows short path

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8025

--- Comment #2 from Sidney Markowitz <si...@sidney.com> ---
trunk % svn ci -m "bug 8025 - Add a comment referencing this issue to the fix
already committed"  
Sending        lib/Mail/SpamAssassin.pm
Transmitting file data .done
Committing transaction...
Committed revision 1903595.

-- 
You are receiving this mail because:
You are the assignee for the bug.