From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Max Nikulin Newsgroups: gmane.emacs.bugs Subject: bug#57752: 28.1.91; emacsclient-mail.desktop doesn't work for me Date: Wed, 26 Jul 2023 12:14:02 +0700 Message-ID: <181fbbea-6b64-3e6e-c61e-369b6ec1742e@gmail.com> References: <87r10gcum8.fsf@cassou.me> <87bkrj31r0.fsf@gnus.org> <87y1unxv15.fsf@cassou.me> <2da5b5aa-d42c-1df2-3a4c-af7532893d1c@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="19750"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.13.0 Cc: Jim Porter , Peter Oliver , 57752@debbugs.gnu.org To: Damien Cassou , Lars Ingebrigtsen Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Wed Jul 26 07:15:20 2023 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1qOWrn-0004tX-UZ for geb-bug-gnu-emacs@m.gmane-mx.org; Wed, 26 Jul 2023 07:15:19 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qOWrd-0006cH-KJ; Wed, 26 Jul 2023 01:15:09 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qOWrX-0006c0-9x for bug-gnu-emacs@gnu.org; Wed, 26 Jul 2023 01:15:03 -0400 Original-Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qOWrW-00019J-Vi for bug-gnu-emacs@gnu.org; Wed, 26 Jul 2023 01:15:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qOWrW-0000qZ-ET for bug-gnu-emacs@gnu.org; Wed, 26 Jul 2023 01:15:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Max Nikulin Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 26 Jul 2023 05:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 57752 X-GNU-PR-Package: emacs Original-Received: via spool by 57752-submit@debbugs.gnu.org id=B57752.16903484533182 (code B ref 57752); Wed, 26 Jul 2023 05:15:02 +0000 Original-Received: (at 57752) by debbugs.gnu.org; 26 Jul 2023 05:14:13 +0000 Original-Received: from localhost ([127.0.0.1]:47378 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qOWqi-0000pF-N0 for submit@debbugs.gnu.org; Wed, 26 Jul 2023 01:14:12 -0400 Original-Received: from mail-lj1-x22b.google.com ([2a00:1450:4864:20::22b]:44212) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qOWqg-0000p3-W4 for 57752@debbugs.gnu.org; Wed, 26 Jul 2023 01:14:11 -0400 Original-Received: by mail-lj1-x22b.google.com with SMTP id 38308e7fff4ca-2b974031aeaso73364101fa.0 for <57752@debbugs.gnu.org>; Tue, 25 Jul 2023 22:14:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1690348445; x=1690953245; h=content-transfer-encoding:in-reply-to:content-language:references :cc:to:from:subject:user-agent:mime-version:date:message-id:sender :from:to:cc:subject:date:message-id:reply-to; bh=gzAp3P7CTU7nHs6I3CQgvvAXJDFQ9A4lXH6oEIrOP0Y=; b=RO3E0CdnZST59GhHHCTZUj8+W0PWzd/puloTQkNsq+KRl7GNIDNb30mjx0eCgFl7QN fhzfIl3rljZDNnUnuXIiSkkyMuKIIa/3Hqe9Q1pZ65+T3iV4HykIzXlpJsPZg6DfIy09 FubAiVBJP87qG5bolfDNQYOh7AzvZ+4spChvO7G5KJpObg3ZnoQ3dYc7fl82yU75MoEN w0QJfykA/9aSL6tmrROybY7oZ0cFTplDZ8/cyv6O85JuhL8mq7ngJESXoVudo1SXGtVe mDpNz/hhMWz36Sz8AzWZR/qOEo/n6tbt0wY0JIBdyznxxHJccxQJsab5QbM9DNwjzxCB OKcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1690348445; x=1690953245; h=content-transfer-encoding:in-reply-to:content-language:references :cc:to:from:subject:user-agent:mime-version:date:message-id:sender :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=gzAp3P7CTU7nHs6I3CQgvvAXJDFQ9A4lXH6oEIrOP0Y=; b=GjQs1GwZ1vgCw8cuO0+WSzmCI1v0oWI2hLsMxYNGvd9X7S/s61XpNUs53PkmDh2uPh Oub+SO6G640lAkg0Xjl6mau7tsrRi4tX4I9rb8M39uo/bUzN0FW1fv+XxAp6zQOU9zzl 1TPE906RoKaX8XA65pLO5vXjU14ZBlN3AbGoq4/Sk3AjDAgt0tKetjg7pDYMRSeT29OW voocrfEEK09kohBSk2+DKXCdgr/HBCVVkGL74VBGtAKvGcD/9GlrL3KrWEyId2lmBEBj EGiAQZwubqbXlXkut+OB3vkq1iqK7fRFcoMc1KFOTvxTl+41wANm6z7pwHYbfxS1QKfF TpJQ== X-Gm-Message-State: ABy/qLbEeSlzFGxfqFL9BtyuPFOmZjaLrgaJPg72aUMWRQ1Tw2txm16d Tt7HtvLLh34EvgWL3P+XStk= X-Google-Smtp-Source: APBJJlGN0KulO06HHnd8hgiP4/uTdQ7abgMPf7X0vGv3tkbm/hTfZ1feHRiDFDxfC0BUGMX1zL8inQ== X-Received: by 2002:a2e:a403:0:b0:2b6:f21a:3dae with SMTP id p3-20020a2ea403000000b002b6f21a3daemr546066ljn.44.1690348444688; Tue, 25 Jul 2023 22:14:04 -0700 (PDT) Original-Received: from [192.168.0.101] (nat-0-0.nsk.sibset.net. [5.44.169.188]) by smtp.googlemail.com with ESMTPSA id r19-20020a2eb613000000b002b9af8422a8sm429754ljn.130.2023.07.25.22.14.03 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 25 Jul 2023 22:14:04 -0700 (PDT) Content-Language: en-US, ru-RU In-Reply-To: <2da5b5aa-d42c-1df2-3a4c-af7532893d1c@gmail.com> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:266103 Archived-At: On 02/12/2022 21:52, Max Nikulin wrote: > > bash -c 'e=${1//\\/\\\\}; e=${e///\"/\\\"}; emacsclient > --alternate-editor= --display="$DISPLAY" --eval=\(message-mailto\ > "\"$e\""\)' emacsclient-mailto %u A similar approach has been applied in the following commits: - c8ec0017cb9 2023-03-08 19:37:27 +0100 Ulrich Müller: Avoid using bash in the emacsclient desktop file - 3c1693d08b0 2023-03-07 18:25:37 +0100 Ulrich Müller: Fix Elisp code injection vulnerability in emacsclient-mail.desktop - d32091199ae 2022-12-19 16:51:20 +0100 Ulrich Müller: Fix quoted argument in emacsclient-mail.desktop Exec key See - (#60204) - Gabriel Corona. Shell command and Emacs Lisp code injection in emacsclient-mail.desktop. Wed, 8 Mar 2023 12:37:29 +0100 https://www.openwall.com/lists/oss-security/2023/03/08/2 So the specific reported issue has been fixed. I am unsure if this bug should be closed or it should be left open to continue discussion how to implement passing literal arguments through emacsclient.