GNU bug report logs - #17820
sha1sum bug: bad reporting on filenames with "\"

Previous Next

Package: coreutils;

Reported by: Morhold <freebsd-security <at> morhold.ru>

Date: Fri, 20 Jun 2014 17:10:02 UTC

Severity: normal

Tags: notabug

Done: Pádraig Brady <P <at> draigBrady.com>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 17820 in the body.
You can then email your comments to 17820 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-coreutils <at> gnu.org:
bug#17820; Package coreutils. (Fri, 20 Jun 2014 17:10:02 GMT) Full text and rfc822 format available.
Acknowledgement sent to Morhold <freebsd-security <at> morhold.ru>:
New bug report received and forwarded. Copy sent to bug-coreutils <at> gnu.org. (Fri, 20 Jun 2014 17:10:03 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Morhold <freebsd-security <at> morhold.ru>
To: bug-coreutils <at> gnu.org
Subject: sha1sum bug: bad reporting on filenames with "\"
Date: Fri, 20 Jun 2014 14:48:08 +0400

How to reproduce:

~> touch "a\b"

~> ls "a\b"
a\b

~> sha1sum "a\b"
\da39a3ee5e6b4b0d3255bfef95601890afd80709  a\\b

~> sha1sum --version
sha1sum (GNU coreutils) 8.13

~> lsb_release -ds
Ubuntu 12.04.4 LTS
Information forwarded to bug-coreutils <at> gnu.org:
bug#17820; Package coreutils. (Fri, 20 Jun 2014 17:53:01 GMT) Full text and rfc822 format available.

Message #8 received at 17820 <at> debbugs.gnu.org (full text, mbox):

From: Pádraig Brady <P <at> draigBrady.com>
To: Morhold <freebsd-security <at> morhold.ru>
Cc: 17820 <at> debbugs.gnu.org
Subject: Re: bug#17820: sha1sum bug: bad reporting on filenames with "\"
Date: Fri, 20 Jun 2014 18:52:31 +0100

tag 17820 notabug
close 17820
stop

On 06/20/2014 11:48 AM, Morhold wrote:
> How to reproduce:
> 
> ~> touch "a\b"
> 
> ~> ls "a\b"
> a\b
> 
> ~> sha1sum "a\b"
> \da39a3ee5e6b4b0d3255bfef95601890afd80709  a\\b
> 
> ~> sha1sum --version
> sha1sum (GNU coreutils) 8.13

This is expected and is there to escape file names containing '\n'
We don't strictly need to also escape file names with '\' in them,
and we considered not doing that in this thread, but decided to leave as is:
  http://lists.gnu.org/archive/html/coreutils/2013-11/msg00017.html

thanks,
Pádraig.
Added tag(s) notabug. Request was from Pádraig Brady <P <at> draigBrady.com> to control <at> debbugs.gnu.org. (Fri, 20 Jun 2014 17:53:02 GMT) Full text and rfc822 format available.
bug closed, send any further explanations to 17820 <at> debbugs.gnu.org and Morhold <freebsd-security <at> morhold.ru> Request was from Pádraig Brady <P <at> draigBrady.com> to control <at> debbugs.gnu.org. (Fri, 20 Jun 2014 17:53:02 GMT) Full text and rfc822 format available.
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sat, 19 Jul 2014 11:24:04 GMT) Full text and rfc822 format available.
This bug report was last modified 10 years and 339 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.