Re: Bug: ps2eps 1.70 generates incorrectly quoted Ghostscript -c argument on Windows

Karl Berry <[email protected]> Tue, 28 Jul 2026 15:10:20 -0600
Newsgroups gmane.comp.tex.live
Message-ID <[email protected]>
    -c '63 63 translate'
    On Windows, Ghostscript 10.07.1 interprets the single quotes incorrectly

Yes, that makes sense, as Windows only has "quotes" not 'quotes'.

The question is, what happens on Unix if the translate command ends up
containing (maliciously) backquotes?  Since "`some-command`" will
execute the command on Unix.

The same goes for every argument passed in $cmdline. I surmise every arg
needs to be sanitized and/or quoted. Anywhere there is `...`.

Do you feel like working on a patch for that? --thanks, karl.