c121fd80b8
are later stripped with rmescapes() in expandarg(). If the filename has already been unescaped, doing it again in rmescapes() can walk off the end of the string, leading to memory corruption and eventually SIGSEGV. Noticed by: kris |
||
|---|---|---|
| .. | ||
| cat | ||
| chflags | ||
| chio | ||
| chmod | ||
| cp | ||
| csh | ||
| date | ||
| dd | ||
| df | ||
| domainname | ||
| echo | ||
| ed | ||
| expr | ||
| getfacl | ||
| hostname | ||
| kenv | ||
| kill | ||
| ln | ||
| ls | ||
| mkdir | ||
| mv | ||
| pax | ||
| ps | ||
| pwd | ||
| rcp | ||
| realpath | ||
| rm | ||
| rmail | ||
| rmdir | ||
| setfacl | ||
| sh | ||
| sleep | ||
| stty | ||
| sync | ||
| test | ||
| uuidgen | ||
| Makefile | ||
| Makefile.inc | ||