Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > gnu.bash.bug > #16176

Re: %q with truncating size loses safeness of %q

Path csiph.com!goblin3!goblin.stu.neva.ru!panix!usenet.stanford.edu!not-for-mail
From Chet Ramey <chet.ramey@case.edu>
Newsgroups gnu.bash.bug
Subject Re: %q with truncating size loses safeness of %q
Date Sun, 19 Apr 2020 15:36:39 -0400
Organization ITS, Case Western Reserve University
Lines 23
Approved bug-bash@gnu.org
Message-ID <mailman.716.1587325009.3066.bug-bash@gnu.org> (permalink)
References <CAOj-5WCqxqh=Gcda9k6y4orQaQYXPgsOgNEOVN1AdZQrkCVbtg@mail.gmail.com> <4bacf2f0-9802-67d3-f30b-80e37d058a4a@case.edu> <CAOj-5WAM4c38uJ4kWb-=_4qx_2umkHYVyWOGhPAac-ASNZqw4Q@mail.gmail.com> <695b7e4c-14b1-e625-831d-c1b053d573ad@case.edu>
Reply-To chet.ramey@case.edu
NNTP-Posting-Host lists.gnu.org
Mime-Version 1.0
Content-Type text/plain; charset=utf-8
Content-Transfer-Encoding 7bit
X-Trace usenet.stanford.edu 1587325010 26393 209.51.188.17 (19 Apr 2020 19:36:50 GMT)
X-Complaints-To action@cs.stanford.edu
Cc chet.ramey@case.edu, bug-bash@gnu.org, bash@packages.debian.org
To Sam Liddicott <sam@liddicott.com>
Envelope-to bug-bash@gnu.org
DKIM-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=case.edu; s=smtp-primary; t=1587325005; bh=cImOtPXj6jYibSPy4ISCKwqdrAIHxGFIvKDzkh4Nf1k=; h=Reply-To:Cc:Subject:To:References:From:Message-ID:Date: MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=zM5aufcbrrL1QjB9JBA00pGREMztrtUVd0lB9hklfsRPfynSwtclpGc1UgBVSFYdnt otj/maT+xMoyVesAj617Vf5CcLvgdqC5so3boOsGCxLALT75Wr0Z9PTILUXMmJdruCV VSl1D0cLEVJVEryUAigxFixAUZbcMyeq3oPHREaSIHxdHyvOlQqbfjVRvm/iKT7Ip0C nUBXtfhzdjYGYJD2kYrTOv3kv3yN/Cqn41EGnMiQ04J5/dBXQkl06dUbYRnnHJtL5oh sXFdjO4uP1AKtLfkAclqAzQPPDxNzkhRbxGDSf5wuYWBL28pTgLSpyqKi1SZexuE3Cs nIG/BwvQ==
DKIM-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=case.edu; s=smtp-primary; t=1587325003; bh=5srz/VzLxw2joUnT4vJxk6Hr7TsR3OLcdF1CxNmT7Yo=; h=Reply-To:Cc:Subject:To:References:From:Message-ID:Date: MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=i2s22LnEkmwt6AvViAXSBt9l0K9DAaNvL4xLENc5CXQYa7ZEYti3LazK+6VKw/ixlx IWbOqTNq/oH+sZATfAlVrgs77PKXg7dT3aUZ4OGfJxshD1WkAKPrj7UmbwjiMNiHunk aMoyQicOYlaCX7H4fcJHBxcc4DzFhf2UK5ewS4YByXCQRYcc6P0fwWWS/UUImDlIVGO aHywfvG3Ss8oNP7RQOl2HSJC06Fi1e+36ec3O9d7Yg9X8UDrYlylJUKGeaIuXfOjAJ6 kB7+5ghsMr9iG85lUOT8gzWvYN9bon3Np1zB5mlqaFNQhmuq1DQf84Ibfla3rbgdGiR /K/m47YA==
DKIM-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=case.edu; s=g-case; h=reply-to:cc:subject:to:references:from:autocrypt:organization :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=5srz/VzLxw2joUnT4vJxk6Hr7TsR3OLcdF1CxNmT7Yo=; b=TRFeNAs1Ui/6aDGPC8476dz2JNU8V+SPvBZGIXDzLVpNyDB/SP0hkYG0dl/wZfE2zk Sp/+Yha/hedqJ2oMRG+SXI1+rYqar5XUmz838NxCtb+/OiYKwQwo0pGO6ZneOSG1YFx0 GLB0cfmqkoKwe5mdZ5ZE8790gK+XeK18euQMaIo/cQaALDQuI927X61xD3msr7d50co6 pqKVFE8lUMhvkODxOfZvMLXvtS/ibLJ2YkynqIfIuc8PKKvaEva0GxkItUUNfczuVbwD nf9KehDkXncP1yb8PiqK52/tM+w9IjF4loRnETZc85hKvsBkRFeDGAZd1Ju2rNegYTN3 k2Sg==
X-Google-DKIM-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:reply-to:cc:subject:to:references:from:autocrypt :organization:message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=5srz/VzLxw2joUnT4vJxk6Hr7TsR3OLcdF1CxNmT7Yo=; b=o/6jA96FhFqMe5Nkmk3hSuv5IO7Y8lE03Q7r23Fuzc3crBzUcJglkiROhT4UnYAGKn eYFMR75N/gvIV/rDcmvwyesol+9iXyVqzyldaqPOJLpRd2kemnmn7KGcgdvv4B4rpe4g FnHkODL/Glp4hypjZhuPxvUxzjIfFPPsbndR/Nzl3nE/jsu2b2z04L8bhlf07ziFuo4Y lPIP9SMYgSbg9txqhZS9/TohEHoKiBZbpdK3uOxz7ZgIW363jo5rrAZJR5qFwdFFhGh4 9r9+uFsmDMHhPeW6lj1ETKki4Qx6oJVMO054FYqLyYVnDPE6gu/sKeXMoGooEFtwpl7E 0i1Q==
X-Gm-Message-State AGi0PuZIy8IAl9CyV8jiuGraOxAQgEah/o7+Dfq4ZlznxNg/UHaNMKll IFRKaY7U7W+vzwPrKbNNEmqFCz9gMcYCrDRrjJkvk388f/OykZhfR1H2i4k/eA054bx3OR65NKv UZWbspOgHTjg=
X-Received by 2002:a37:b941:: with SMTP id j62mr13289729qkf.353.1587325002113; Sun, 19 Apr 2020 12:36:42 -0700 (PDT)
X-Google-Smtp-Source APiQypIKHrvfiq6+a9+KgRdHbo6ihaSRb4b2gSQe2R+4SD7q5mkMJc+ToFvTnYLfW1YsBP1K6X+PVA==
X-Received by 2002:a37:b941:: with SMTP id j62mr13289716qkf.353.1587325001860; Sun, 19 Apr 2020 12:36:41 -0700 (PDT)
Autocrypt addr=chet.ramey@case.edu; prefer-encrypt=mutual; keydata= mQGiBEEOsGwRBACFa0A1oa71HSZLWxAx0svXzhOZNQZOzqHmSuGOG92jIpQpr8DpvgRh40Yp AwdcXb8QG1J5yGAKeevNE1zCFaA725vGSdHUyypHouV0xoWwukYO6qlyyX+2BZU+okBUqoWQ koWxiYaCSfzB2Ln7pmdys1fJhcgBKf3VjWCjd2XJTwCgoFJOwyBFJdugjfwjSoRSwDOIMf0D /iQKqlWhIO1LGpMrGX0il0/x4zj0NAcSwAk7LaPZbN4UPjn5pqGEHBlf1+xDDQCkAoZ/VqES GZragl4VqJfxBr29Ag0UDvNbUbXoxQsARdero1M8GiAIRc50hj7HXFoERwenbNDJL86GPLAQ OTGOCa4W2o29nFfFjQrsrrYHzVtyA/9oyKvTeEMJ7NA3VJdWcmn7gOu0FxEmSNhSoV1T4vP2 1Wf7f5niCCRKQLNyUy0wEApQi4tSysdz+AbgAc0b/bHYVzIf2uO2lIEZQNNt+3g2bmXgloWm W5fsm/di50Gm1l1Na63d3RZ00SeFQos6WEwLUHEB0yp6KXluXLLIZitEJLQwQ2hldCBSYW1l eSAoQ2FzZSBzdGFuZGFyZCkgPGNoZXQucmFtZXlAY2FzZS5lZHU+iF8EExECAB8FAkPi19EC GwMHCwkIBwMCAQMVAgMDFgIBAh4BAheAAAoJELtYafBk6nSrelkAn31Gsuib7GcCZHbv5L5t VKYR9LklAJ4hzUHKA49Z0QXR+qCb80osIcmPSbkBDQRBDrBvEAQAkK6TAOKBEM+EC4j6V/7o /riVZqcgU5cid2qG9TXdwNtD9a3kvA/ObZBO93sX59wc6Bnwo4VJxsOmMlpGrAjJsxNwg3QH akEtf8LXRbVpj5xStdmBdQZUhIQyalo/2/TZq5OijtddUQcL5cs70hTv/FpT3wUvr2Xr8rjF 41IFEz8AAwcD/A0CZEGlzIrT5WCBnl6xBog/8vKiUCbarByat3d1mL6DbizvKNXQRTC9E/vE dENAWCQCjr75Bu55xT8n3SXGtWdDC5xmZ/P3OBYORP8yl8H8I1FIosWOFirbIeYdZPq8SPD1 HL+EXo9zSiHVrrZRJ19ooCKKbSdXHFCY+aJG+0KZiEkEGBECAAkFAkEOsG8CGwwACgkQu1hp 8GTqdKvjcACfZlkVCDwaz/NTO9cy3t69oWpVPNwAnRwe0qk/WL/gfhH346xh5B3HFbFN
User-Agent Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:68.0) Gecko/20100101 Thunderbird/68.7.0
In-Reply-To <CAOj-5WAM4c38uJ4kWb-=_4qx_2umkHYVyWOGhPAac-ASNZqw4Q@mail.gmail.com>
Content-Language en-US
X-Mirapoint-IP-Reputation reputation=Good-1, source=Queried, refid=tid=0001.0A020303.5E9C9A5A.0035, actions=tag
X-Mirapoint-IP-Reputation reputation=good-1, source=Fixed, refid=n/a, actions=tag
X-Junkmail-Status score=8/80, host=mpv4-2015.case.edu
X-Junkmail-PrAS-Raw score=8/80, refid=2.7.2:2020.4.19.182717:17:8.317, ip=, rules=__YOUTUBE_RCVD, DKIM_SIGNATURE, __X_GOOGLE_DKIM_SIGNATURE, __HAS_REPLYTO, __HAS_CC_HDR, __MULTIPLE_RCPTS_CC_X2, __SUBJ_REPLY, __BOUNCE_CHALLENGE_SUBJ, __BOUNCE_NDR_SUBJ_EXEMPT, __TO_MALFORMED_2, __TO_NAME, __TO_NAME_DIFF_FROM_ACC, __HAS_REFERENCES, __REFERENCES, __HAS_FROM, FROM_EDU_TLD, __HAS_MSGID, __SANE_MSGID, DATE_TZ_NA, __USER_AGENT, __MOZILLA_USER_AGENT, __MIME_VERSION, __IN_REP_TO, __CT, __CT_TEXT_PLAIN, __CTE, __REPLYTO_SAMEAS_FROM_ADDY, __REPLYTO_SAMEAS_FROM_ACC, __FROM_DOMAIN_IN_ANY_CC2, __REPLYTO_SAMEAS_FROM_DOMAIN, __DKIM_ALIGNS_1, __DKIM_ALIGNS_2, __ANY_URI, __URI_MAILTO, __URI_WITH_PATH, __URI_ENDS_IN_SLASH, __URI_NO_WWW, __CP_URI_IN_BODY, __SUBJ_ALPHA_NEGATE, __URI_IN_BODY, __URI_NOT_IMG, __MAIL_CHAIN, __BODY_NO_MAILTO, __NO_HTML_TAG_RAW, BODYTEXTP_SIZE_3000_LESS, BODY_SIZE_900_999, __MIME_TEXT_P1, __MIME_TEXT_ONLY, __URI_NS, [TRUNCATED], so=2010-03-03 19:42:08, dmn=2016-08-03-0138
Received-SPF pass client-ip=129.22.103.195; envelope-from=chet.ramey@case.edu; helo=mpv4-2015.case.edu
X-detected-operating-system by eggs1p.gnu.org: Linux 2.4.x-2.6.x [generic] [fuzzy]
X-Received-From 129.22.103.195
X-BeenThere bug-bash@gnu.org
X-Mailman-Version 2.1.23
Precedence list
List-Id Bug reports for the GNU Bourne Again SHell <bug-bash.gnu.org>
List-Unsubscribe <https://lists.gnu.org/mailman/options/bug-bash>, <mailto:bug-bash-request@gnu.org?subject=unsubscribe>
List-Archive <https://lists.gnu.org/archive/html/bug-bash>
List-Post <mailto:bug-bash@gnu.org>
List-Help <mailto:bug-bash-request@gnu.org?subject=help>
List-Subscribe <https://lists.gnu.org/mailman/listinfo/bug-bash>, <mailto:bug-bash-request@gnu.org?subject=subscribe>
X-Mailman-Original-Message-ID <695b7e4c-14b1-e625-831d-c1b053d573ad@case.edu>
X-Mailman-Original-References <CAOj-5WCqxqh=Gcda9k6y4orQaQYXPgsOgNEOVN1AdZQrkCVbtg@mail.gmail.com> <4bacf2f0-9802-67d3-f30b-80e37d058a4a@case.edu> <CAOj-5WAM4c38uJ4kWb-=_4qx_2umkHYVyWOGhPAac-ASNZqw4Q@mail.gmail.com>
Xref csiph.com gnu.bash.bug:16176

Show key headers only | View raw


On 4/17/20 4:38 PM, Sam Liddicott wrote:
> So is it to be "fixed" in the documentation with a warning that
> truncating-size specifiers for %q may nullify the safety benefits for which
> it is used?

Probably something more general, along the lines of the POSIX language for
the %b directive:

"Bytes from the converted string shall be written until the end of the
string or the number of bytes indicated by the precision specification is
reached. If the precision is omitted, it shall be taken to be infinite, so
all bytes up to the end of the converted string shall be written."

The %b, %()T, and %q (and %s) directives all behave the same way: generate
the argument and print it according to the supplied fieldwidth and
precision.

Chet
-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
		 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    chet@case.edu    http://tiswww.cwru.edu/~chet/

Back to gnu.bash.bug | Previous | Next | Find similar


Thread

Re: %q with truncating size loses safeness of %q Chet Ramey <chet.ramey@case.edu> - 2020-04-19 15:36 -0400

csiph-web