[Bug 3884] The SSH_AUTH_SOCK variable is not quoted

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Oct 23 10:07:09 AEDT 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3884

--- Comment #2 from Beat Bolli <me+mindrot at drbeat.li> ---
(In reply to Damien Miller from comment #1)
> I think you could use misc.c:argv_assemble() to do the quoting with
> less new code

Thanks for the hint, this makes the patch quite a bit smaller. But
is it good enough? argv_assemble() does not protect against all shell
metacharacters.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list