From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: [PATCH] Add shell-quasiquote. Date: Mon, 19 Oct 2015 08:15:13 +0300 Message-ID: <837fmjigm6.fsf@gnu.org> References: <87si59wj42.fsf@T420.taylan> <83eggt4esi.fsf@gnu.org> <87fv19wh7b.fsf@T420.taylan> <83bnbx4d7e.fsf@gnu.org> <87twppuzfu.fsf@T420.taylan> <83a8rh48if.fsf@gnu.org> <87io65utmt.fsf@T420.taylan> <5622B337.4050700@yandex.ru> <876125uqzw.fsf@T420.taylan> <5622BE84.8030209@yandex.ru> <87twpptato.fsf@T420.taylan> <87pp0cehly.fsf@gmx.de> <878u70trqz.fsf@T420.taylan> <87si58phte.fsf@gmx.de> <87io648h8r.fsf@fastmail.com> <83oafwhykw.fsf@gnu.org> <8737x87zq6.fsf@fastmail.com> <83fv18hs32.fsf@gnu.org> <22052.29299.917171.338544@turnbull.sk.tsukuba.ac.jp> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1445231751 2211 80.91.229.3 (19 Oct 2015 05:15:51 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 19 Oct 2015 05:15:51 +0000 (UTC) Cc: random832@fastmail.com, emacs-devel@gnu.org To: "Stephen J. Turnbull" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Oct 19 07:15:42 2015 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Zo2nO-0001hP-26 for ged-emacs-devel@m.gmane.org; Mon, 19 Oct 2015 07:15:42 +0200 Original-Received: from localhost ([::1]:36518 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zo2nN-0003u2-E6 for ged-emacs-devel@m.gmane.org; Mon, 19 Oct 2015 01:15:41 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:51901) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zo2nH-0003tv-Nb for emacs-devel@gnu.org; Mon, 19 Oct 2015 01:15:36 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Zo2nE-0002sf-Gg for emacs-devel@gnu.org; Mon, 19 Oct 2015 01:15:35 -0400 Original-Received: from mtaout27.012.net.il ([80.179.55.183]:49012) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zo2nE-0002sZ-3i for emacs-devel@gnu.org; Mon, 19 Oct 2015 01:15:32 -0400 Original-Received: from conversion-daemon.mtaout27.012.net.il by mtaout27.012.net.il (HyperSendmail v2007.08) id <0NWG00L00BPTKI00@mtaout27.012.net.il> for emacs-devel@gnu.org; Mon, 19 Oct 2015 08:11:02 +0300 (IDT) Original-Received: from HOME-C4E4A596F7 ([84.94.185.246]) by mtaout27.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0NWG00KWQBQEOX00@mtaout27.012.net.il>; Mon, 19 Oct 2015 08:11:02 +0300 (IDT) In-reply-to: <22052.29299.917171.338544@turnbull.sk.tsukuba.ac.jp> X-012-Sender: halo1@inter.net.il X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 80.179.55.183 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:192030 Archived-At: > Date: Mon, 19 Oct 2015 13:32:51 +0900 > From: "Stephen J. Turnbull" > Cc: Random832 , > emacs-devel@gnu.org > > Eli Zaretskii writes: > > Random832 writes: > > > > Yes, sorry. A typical Windows program (at least, one compiled with > > > MSVC's setargv.obj) will try to interpret wildcards in any part of > > > CommandLineToArgv's result which contains a ? or * character, with > > > no provision to prevent it from doing so. (In particular, double > > > quotes have no effect). > > > > This actually depends on the startup code. The latest release of > > mingw.org's MinGW runtime does allow you to quote wildcard characters. > > And on Windows XP and older even the other runtimes allow that. > > > > In any case, this is not an Emacs problem. > > Of course it is, in a security context. I don't think it matters > anywhere near as much as code injection, but if Emacs is built with > one of those runtimes that doesn't allow wildcards to be disabled, its > users will be affected. > > I think it probably can be immediately judged irrelevant (and perhaps > that's what you meant) if Emacs is normally built with a runtime that > doesn't interpret quoted wildcards, and the runtimes that always > interpret wildcards are not supported. That's a misunderstanding: the runtime in question is the one used with the program that Emacs invokes, not the one used to run Emacs itself. On MS-Windows, the expansion of wildcards on the command line is done by the application which accepts the command line (in its startup code, before the main function is invoked), so that's what determines whether a quoted "*" will or will not be expanded. The invoking Emacs cannot control or affect that in any way.