Opened at 2011-02-02T01:05:51Z

Last modified at 2014-12-02T19:44:36Z

#1350 assigned defect

SFTP: clients may misparse directory listings with filenames containing unusual characters

Reported by: davidsarah Owned by: davidsarah
Priority: major Milestone: soon
Component: code-frontend-ftp-sftp Version: 1.8.2
Keywords: sftp names Cc:
Launchpad Bug:

Description (last modified by warner)

For example, FileZilla misparses filenames containing CR (U+000D), such as "blamp \r$(curl noncombatant.org)" currently in the public directory of the test grid. It appears to treat the characters after the \r as a separate line (judging from the Message log when 'Edit menu | Settings... | Debug | Show raw directory listing' is checked).

I think we should be stripping out children with names containing characters below U+0020 when found in a directory, and rejecting attempts to create them. See also #731.

Change History (3)

comment:1 Changed at 2011-02-02T22:02:58Z by zooko

This would be consistent with David A. Wheeler's suggestionL: ​http://www.dwheeler.com/essays/fixing-unix-linux-filenames.html .

comment:2 Changed at 2011-08-16T03:56:07Z by davidsarah

  • Milestone changed from undecided to 1.10.0
  • Owner set to davidsarah
  • Status changed from new to assigned

comment:3 Changed at 2014-12-02T19:44:36Z by warner

  • Component changed from code-frontend to code-frontend-ftp-sftp
  • Description modified (diff)
Note: See TracTickets for help on using tickets.