[Bug 3884] New: The SSH_AUTH_SOCK variable is not quoted
bugzilla-daemon at mindrot.org
bugzilla-daemon at mindrot.org
Thu Oct 23 03:27:24 AEDT 2025
https://bugzilla.mindrot.org/show_bug.cgi?id=3884
Bug ID: 3884
Summary: The SSH_AUTH_SOCK variable is not quoted
Product: Portable OpenSSH
Version: 10.2p1
Hardware: ARM64
OS: Mac OS X
Status: NEW
Severity: enhancement
Priority: P5
Component: ssh-agent
Assignee: unassigned-bugs at mindrot.org
Reporter: me+mindrot at drbeat.li
Created attachment 3916
--> https://bugzilla.mindrot.org/attachment.cgi?id=3916&action=edit
Patch
See Debian bug #1118288 here:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118288
The Git test suite uses directory names with spaces to verify that the
code is safe to use in these directories.
The change that put the agent socket in $HOME/.ssh/agent instead of
$TMPDIR broke the Git tests.
The attached patch quotes the socket name when setting the environment
variable.
I'm not sure that my use of a struct sshbuf is correct here, but this
seems to be the automatically growing container in this project.
--
You are receiving this mail because:
You are watching the assignee of the bug.
More information about the openssh-bugs
mailing list