[Ecls-list] SI:SYSTEM vs. quoting and maliciously chosen values of $HOME

Samium Gromoff _deepfire at feelingofgreen.ru
Mon Apr 5 15:19:09 UTC 2010


When one has a somewhat unconvenient choice of $HOME on win32, coupled
with the mingw shell, which interprets certain characters in an
unconvenient way, certain unconvenient behaviors begin to surface:

;;; Note:
;;;   Invoking external command:
;;;   ar cr C:/D&S/Fooish Bar/Local Settings/Temporary Internet Files/common-lisp/usr/src/mcoredb/li
bmcoredb-imodel3.a C:/TEMP/ECL201.o C:/D&S/Fooish Bar/Local Settings/Temporary Internet Files/common-
lisp/usr/src/mcoredb/apps/imodel3.o
;;; "S" is not recognized as an internal or external command, operable program or batch file.
"S" is not recognized as an internal or external command, operable program or batch file.

This, essentially, implies that we need to do escaping within
COMPILER:SAFE-SYSTEM, at least on mingw, and at least with regard
to the #\& character.


-- 
regards,
  Samium Gromoff
--
"Actually I made up the term 'object-oriented', and I can tell you I
did not have C++ in mind." - Alan Kay (OOPSLA 1997 Keynote)




More information about the ecl-devel mailing list