Bug 16428 – Fehlerträchtiges Quoting in /usr/sbin/jitter

Bug 16428 - Fehlerträchtiges Quoting in /usr/sbin/jitter


Summary:	Fehlerträchtiges Quoting in /usr/sbin/jitter

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	UDM - CLI
Version:	UNSTABLE
Hardware:	All Linux

Importance:	P5 enhancement (vote)
Target Milestone:	UCS 3.1
Assigned To:	Philipp Hahn
QA Contact:	Lukas Walter

URL:
Keywords:	interim-2

Duplicates:	22684 (view as bug list)
Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2009-11-16 12:50 CET by Philipp Hahn
Modified:	2012-12-12 21:08 CET (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Flags:	hahn: Patch_Available+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philipp Hahn

2009-11-16 12:50:51 CET

Das funktioniert nur, solange keine Leerzeichen, Hochkommata oder Anführungszeichen als Parameter übergeben werden. Einfacher und sicherer mit "$@".

--- /usr/sbin/jitter~   2009-11-15 23:39:59.000000000 +0100
+++ /usr/sbin/jitter    2009-11-15 23:42:29.000000000 +0100
@@ -43,12 +43,4 @@
 sleep $sec

 shift
-EXEC=''
-
-while [ $# -gt 0 ]
-  do
-   EXEC="${EXEC} $1"
-  shift
-done
-
-exec $EXEC
+exec "$@"

Comment 1 Philipp Hahn

2011-06-08 19:26:30 CEST

*** Bug 22684 has been marked as a duplicate of this bug. ***

Comment 2 Philipp Hahn

2012-08-03 22:21:38 CEST

Umgesetzt.
svn34608, univention-config-registry_8.0.1-1.389.201208032206

Comment 3 Lukas Walter

2012-10-17 16:07:18 CEST

jitter funktioniert mit den Änderungen immernoch tadellos.

Changelogeintrag sieht gut aus,
Verified.

Comment 4 Stefan Gohmann

2012-12-12 21:08:31 CET

UCS 3.1-0 has been released: 
 http://forum.univention.de/viewtopic.php?f=54&t=2125

If this error occurs again, please use "Clone This Bug".