Re: Bug: ps2eps 1.70 generates incorrectly quoted Ghostscript -c argument on Windows

Hi Karl,

I just pushed the changes for v1.71 to 
https://github.com/roland-bless/ps2eps/
There is IMHO no problem with backquotes in the quotes as the content 
for the translatecmd
is generated by ps2eps itself. The rotatecmd had it already with correct 
quotes BTW.
Thanks Shyam for reporting this.

Regards,
  Roland

On 28.07.26 at 23:10 Karl Berry wrote:
>      -c '63 63 translate'
>      On Windows, Ghostscript 10.07.1 interprets the single quotes incorrectly
>
> Yes, that makes sense, as Windows only has "quotes" not 'quotes'.
>
> The question is, what happens on Unix if the translate command ends up
> containing (maliciously) backquotes?  Since "`some-command`" will
> execute the command on Unix.
>
> The same goes for every argument passed in $cmdline. I surmise every arg
> needs to be sanitized and/or quoted. Anywhere there is `...`.
>
> Do you feel like working on a patch for that? --thanks, karl.