[Bug 3884] New: The SSH_AUTH_SOCK variable is not quoted

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Oct 23 03:27:24 AEDT 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3884

            Bug ID: 3884
           Summary: The SSH_AUTH_SOCK variable is not quoted
           Product: Portable OpenSSH
           Version: 10.2p1
          Hardware: ARM64
                OS: Mac OS X
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh-agent
          Assignee: unassigned-bugs at mindrot.org
          Reporter: me+mindrot at drbeat.li

Created attachment 3916
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3916&action=edit
Patch

See Debian bug #1118288 here:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118288

The Git test suite uses directory names with spaces to verify that the
code is safe to use in these directories.

The change that put the agent socket in $HOME/.ssh/agent instead of
$TMPDIR broke the Git tests.

The attached patch quotes the socket name when setting the environment
variable.

I'm not sure that my use of a struct sshbuf is correct here, but this
seems to be the automatically growing container in this project.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list