From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Daniel Colascione Newsgroups: gmane.emacs.devel Subject: Re: [PATCH] Add shell-quasiquote. Date: Sun, 18 Oct 2015 22:19:51 -0700 Message-ID: <56247D77.1010305@dancol.org> References: <87si59wj42.fsf@T420.taylan> <83eggt4esi.fsf@gnu.org> <87fv19wh7b.fsf@T420.taylan> <83bnbx4d7e.fsf@gnu.org> <87twppuzfu.fsf@T420.taylan> <83a8rh48if.fsf@gnu.org> <87io65utmt.fsf@T420.taylan> <5622B337.4050700@yandex.ru> <876125uqzw.fsf@T420.taylan> <5622BE84.8030209@yandex.ru> <87twpptato.fsf@T420.taylan> <87pp0cehly.fsf@gmx.de> <878u70trqz.fsf@T420.taylan> <87si58phte.fsf@gmx.de> <87io648h8r.fsf@fastmail.com> <83oafwhykw.fsf@gnu.org> <8737x87zq6.fsf@fastmail.com> <83fv18hs32.fsf@gnu.org> <22052.29299.917171.338544@turnbull.sk.tsukuba.ac.jp> <837fmjigm6.fsf@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="L9xwSlhwaA7kGtCvFFAk6uMj1kAIrmJXR" X-Trace: ger.gmane.org 1445232009 6243 80.91.229.3 (19 Oct 2015 05:20:09 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 19 Oct 2015 05:20:09 +0000 (UTC) Cc: random832@fastmail.com, emacs-devel@gnu.org To: Eli Zaretskii , "Stephen J. Turnbull" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Oct 19 07:20:08 2015 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Zo2re-00059K-FP for ged-emacs-devel@m.gmane.org; Mon, 19 Oct 2015 07:20:06 +0200 Original-Received: from localhost ([::1]:36523 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zo2rd-0004QV-LV for ged-emacs-devel@m.gmane.org; Mon, 19 Oct 2015 01:20:05 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:52937) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zo2rZ-0004QF-Mf for emacs-devel@gnu.org; Mon, 19 Oct 2015 01:20:02 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Zo2rY-0003zW-Q0 for emacs-devel@gnu.org; Mon, 19 Oct 2015 01:20:01 -0400 Original-Received: from dancol.org ([2600:3c01::f03c:91ff:fedf:adf3]:55798) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zo2rY-0003zS-GA; Mon, 19 Oct 2015 01:20:00 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dancol.org; s=x; h=Content-Type:In-Reply-To:MIME-Version:Date:Message-ID:From:Cc:References:To:Subject; bh=ljVvDX9oXX8DGgvt1uhAOSKrf12m5Vh/MU5Svuo0/KU=; b=jrEAledxqi+ewif+84xfsi3+BZ9HxoGsmR8A0xHPEbxBGZGQxX+cFtJXkM7hUYC/dgxiXpujFFFjz6etswkFSDbNi75HxYMATaJKxRvXE2nmd3qham1GZNHIf5UeA9TN4AiJh0MigVTzHFX0RwTq3VcDyN9upxI/40ckPdzQSbIxtwrIOpi1JWbtRpkLjt2NZRk3u+CS3xAMY1nQGoJvO7pJAlKvT+yKinErP6HntUBVRzrtQdmCBHUCPPfQvXOjDLSsW5Kt+/7znuQczH2PrVJ33h01HEIF5ewLBT0I2EtuWWITYZiWliPRLlN/v0OCraz/TkThjmsw10F8vpu7TA==; Original-Received: from [2620:10d:c090:180::1eb0] (helo=[IPv6:2620:10d:c081:1101:2ab2:bdff:fe1c:db58]) by dancol.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84) (envelope-from ) id 1Zo2rV-0005Nv-Ry; Sun, 18 Oct 2015 22:19:57 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 In-Reply-To: <837fmjigm6.fsf@gnu.org> X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2600:3c01::f03c:91ff:fedf:adf3 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:192031 Archived-At: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --L9xwSlhwaA7kGtCvFFAk6uMj1kAIrmJXR Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 10/18/2015 10:15 PM, Eli Zaretskii wrote: >> Date: Mon, 19 Oct 2015 13:32:51 +0900 >> From: "Stephen J. Turnbull" >> Cc: Random832 , >> emacs-devel@gnu.org >> >> Eli Zaretskii writes: >> > Random832 writes: >> >> > > Yes, sorry. A typical Windows program (at least, one compiled wit= h >> > > MSVC's setargv.obj) will try to interpret wildcards in any part o= f >> > > CommandLineToArgv's result which contains a ? or * character, wit= h >> > > no provision to prevent it from doing so. (In particular, double >> > > quotes have no effect). >> >=20 >> > This actually depends on the startup code. The latest release of >> > mingw.org's MinGW runtime does allow you to quote wildcard characte= rs. >> > And on Windows XP and older even the other runtimes allow that. >> >=20 >> > In any case, this is not an Emacs problem. >> >> Of course it is, in a security context. I don't think it matters >> anywhere near as much as code injection, but if Emacs is built with >> one of those runtimes that doesn't allow wildcards to be disabled, its= >> users will be affected. >> >> I think it probably can be immediately judged irrelevant (and perhaps >> that's what you meant) if Emacs is normally built with a runtime that >> doesn't interpret quoted wildcards, and the runtimes that always >> interpret wildcards are not supported. >=20 > That's a misunderstanding: the runtime in question is the one used > with the program that Emacs invokes, not the one used to run Emacs > itself. On MS-Windows, the expansion of wildcards on the command line > is done by the application which accepts the command line (in its > startup code, before the main function is invoked), so that's what > determines whether a quoted "*" will or will not be expanded. The > invoking Emacs cannot control or affect that in any way. But maybe we can make the argument-quoting style a particular program expects a user-customizable variable. --L9xwSlhwaA7kGtCvFFAk6uMj1kAIrmJXR Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWJH14AAoJEN4WImmbpWBl49gQAIni56FL5m/yNj8Kk7+evF+o Xg4pIZiYTVN7E+MCEaC8jv2y5vQQs3M2DB8q8iqv6I31Iz6uRPghzEk9LRcgFWHw atx9UhtPHWD0V2aiQRKM5aybLSi4KoPvmpefMeLgHHV6jUHZtWVr9BKVD7wHnGUW /SIbMRfT9CP8rB82CsAuNWteUm/4ItGQs8sN5rkOFrrhc3OqFLvnPWb8rexY9P0b NvAf1TW0Ho6QVDsyJgS/ThbqadxGPmrdXRXsCF+0fnP3NVDlZdkEW4tmZn37kBWX m+kUIK+j7/EYj5A4D+r4L93a1SvByF5d2RFv5a1PpQzzFLkZdm9iROR2SWsiVVBu JnOa/IurLkHRi0po4kAljtdNx9DDqfvijjIBS0BR0Rapc/o2u2Vn0uXo4JFtnxEs lNM9bwi6x8k2dwKaCqqqoEaJcim4kmMyymdc+IRFvC7yVXT5BHbI3e7+Fr5vAzEH HNgwnmHTbz9L8EqHcSK+SwCs3BmZI1KjIK93jUXMfdTZVMrcwmbZYtBOsW/7Kqci XD5TtPB9xoZqzAxxSaRq7MwjhUCTUxoQCsB3UjOW34T1KV/Rk3XY5O0bVWDGPu35 vWhtta3vmFyMvW1kOmBWRZcifq+FgozWtYgkz8pJrkp8wfjTZBGhddEzcJZ+RsS4 L61c16c5/QY2ftZbwzt3 =Ewnr -----END PGP SIGNATURE----- --L9xwSlhwaA7kGtCvFFAk6uMj1kAIrmJXR--