Re: Bug: ps2eps 1.70 generates incorrectly quoted Ghostscript -c argument on Windows
Karl Berry <[email protected]> Tue, 28 Jul 2026 15:10:20 -0600
| Newsgroups | gmane.comp.tex.live |
|---|---|
| Message-ID | <[email protected]> |
-c '63 63 translate'
On Windows, Ghostscript 10.07.1 interprets the single quotes incorrectly
Yes, that makes sense, as Windows only has "quotes" not 'quotes'.
The question is, what happens on Unix if the translate command ends up
containing (maliciously) backquotes? Since "`some-command`" will
execute the command on Unix.
The same goes for every argument passed in $cmdline. I surmise every arg
needs to be sanitized and/or quoted. Anywhere there is `...`.
Do you feel like working on a patch for that? --thanks, karl.