[Bug 3884] New: The SSH_AUTH_SOCK variable is not quoted
    bugzilla-daemon at mindrot.org 
    bugzilla-daemon at mindrot.org
       
    Thu Oct 23 03:27:24 AEDT 2025
    
    
  
https://bugzilla.mindrot.org/show_bug.cgi?id=3884
            Bug ID: 3884
           Summary: The SSH_AUTH_SOCK variable is not quoted
           Product: Portable OpenSSH
           Version: 10.2p1
          Hardware: ARM64
                OS: Mac OS X
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh-agent
          Assignee: unassigned-bugs at mindrot.org
          Reporter: me+mindrot at drbeat.li
Created attachment 3916
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3916&action=edit
Patch
See Debian bug #1118288 here:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118288
The Git test suite uses directory names with spaces to verify that the
code is safe to use in these directories.
The change that put the agent socket in $HOME/.ssh/agent instead of
$TMPDIR broke the Git tests.
The attached patch quotes the socket name when setting the environment
variable.
I'm not sure that my use of a struct sshbuf is correct here, but this
seems to be the automatically growing container in this project.
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
    
    
More information about the openssh-bugs
mailing list