[tahoe-lafs-trac-stream] [Tahoe-LAFS] #1350: SFTP: clients may misparse directory listings with filenames containing unusual characters

Tahoe-LAFS trac at tahoe-lafs.org
Tue Dec 2 19:44:36 UTC 2014


#1350: SFTP: clients may misparse directory listings with filenames containing
unusual characters
----------------------------------------+------------------------
     Reporter:  davidsarah              |      Owner:  davidsarah
         Type:  defect                  |     Status:  assigned
     Priority:  major                   |  Milestone:  soon
    Component:  code-frontend-ftp-sftp  |    Version:  1.8.2
   Resolution:                          |   Keywords:  sftp names
Launchpad Bug:                          |
----------------------------------------+------------------------
Changes (by warner):

 * component:  code-frontend => code-frontend-ftp-sftp


Old description:

> For example, !FileZilla misparses filenames containing CR (U+000D), such
> as "blamp \r$(curl noncombatant.org)" currently in the public directory
> of the test grid. It appears to treat the characters after the \r as a
> separate line (judging from the Message log when 'Edit menu | Settings...
> | Debug | Show raw directory listing' is checked).
>
> I think we should be stripping out children with names containing
> characters below U+0020 when found in a directory, and rejecting attempts
> to create them. See also #731.

New description:

 For example, !FileZilla misparses filenames containing CR (U+000D), such
 as "blamp \r$(curl noncombatant.org)" currently in the public directory of
 the test grid. It appears to treat the characters after the \r as a
 separate line (judging from the Message log when 'Edit menu | Settings...
 | Debug | Show raw directory listing' is checked).

 I think we should be stripping out children with names containing
 characters below U+0020 when found in a directory, and rejecting attempts
 to create them. See also #731.

--

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1350#comment:3>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list