Index | Thread | Search

From:
Theo Buehler <tb@theobuehler.org>
Subject:
Re: less: fix escaping of newlines in paths
To:
Philip Guenther <guenther@gmail.com>
Cc:
"Todd C. Miller" <Todd.Miller@sudo.ws>, Theo de Raadt <deraadt@openbsd.org>, Tech-OpenBSD <tech@openbsd.org>
Date:
Sun, 14 Apr 2024 09:35:02 +0100

Download raw body.

Thread
On Sun, Apr 14, 2024 at 12:53:31AM -0700, Philip Guenther wrote:
> On Sun, 14 Apr 2024, Theo Buehler wrote:
> > On Sat, Apr 13, 2024 at 05:50:32PM -0600, Todd C. Miller wrote:
> > > On Sat, 13 Apr 2024 17:14:21 -0600, "Theo de Raadt" wrote:
> > > 
> > > > Philip Guenther <guenther@gmail.com> wrote:
> > > >
> > > > > Huh, I'm surprised we didn't delete LESSOPEN support, given how it's histor
> > > > ically been
> > > > > a great source of security issues from argument passing and bad handling by
> > > >  the
> > > > > programs the common lessopen scripts invoke.
> > > >
> > > > No kidding.
> > > >
> > > > I'll say the same: can we delete it?
> > > 
> > > Our zless doesn't rely on it so I'm all for nuking it.
> > 
> > So go ahead
> 
> I think the diff looks like this.  This silenty ignores the -L
> (--no-lessopen) option so that paranoids aren't punished.

Thanks.

ok tb