So, the consensus is NOT hardcode the path.
I only applied the changes regarding string overflow and the likes.
New version at:
http://studwww.ugent.be/~pfaes/debian/
grtz
PhF
On Mon, 2003-09-15 at 18:17, Steve Kemp wrote:
[...]
> OK I'm convinced - hardcoding paths like this is a bad plan.
>
On Mon, Sep 15, 2003 at 04:21:39PM +0100, Steve Kemp wrote:
> On Mon, Sep 15, 2003 at 11:00:35AM -0400, Matt Zimmerman wrote:
>
> > $PATH is almost always trusted; the exception is setuid programs which
> > should sanitize PATH. xspringies is not setuid, is it?
>
> It is not setuid/setgid no,
On Mon, Sep 15, 2003 at 11:00:35AM -0400, Matt Zimmerman wrote:
> $PATH is almost always trusted; the exception is setuid programs which
> should sanitize PATH. xspringies is not setuid, is it?
It is not setuid/setgid no, but I still think it's best to not trust
the PATH - sure it's not criti
On Mon, Sep 15, 2003 at 03:47:42PM +0100, Steve Kemp wrote:
> On Mon, Sep 15, 2003 at 10:45:48AM -0400, Matt Zimmerman wrote:
>
> > > +#define COMPRESS "/bin/gzip"
> > > +#define UNCOMPRESS "/bin/gunzip -c"
>
> > I've never been a proponent of hardcoding paths to programs. This will
> > i
On Mon, Sep 15, 2003 at 10:45:48AM -0400, Matt Zimmerman wrote:
> > +#define COMPRESS "/bin/gzip"
> > +#define UNCOMPRESS "/bin/gunzip -c"
> I've never been a proponent of hardcoding paths to programs. This will
> immediately make the program non-portable to basically any non-GNU type
> system
On Mon, Sep 15, 2003 at 03:21:30PM +0100, Steve Kemp wrote:
> #ifndef COMPRESS
> -#define COMPRESS "gzip"
> -#define UNCOMPRESS "gunzip -c"
> +#define COMPRESS "/bin/gzip"
> +#define UNCOMPRESS "/bin/gunzip -c"
> #endif
I've never been a proponent of hardcoding paths to programs. T
On Mon, Sep 15, 2003 at 04:08:28PM +0200, Philippe Faes wrote:
> This package is now ready to be (checked and) uploaded. It is at:
> http://studwww.UGent.be/~pfaes/debian/xspringies
> I've also included a screenshot. I'd appreciate any DD can upload it.
Please apply the enclosed patch.
Steve
-
This package is now ready to be (checked and) uploaded. It is at:
http://studwww.UGent.be/~pfaes/debian/xspringies
I've also included a screenshot. I'd appreciate any DD can upload it.
grtz
PhF
On Wed, 2003-09-10 at 08:58, Philippe Faes wrote:
> Package: wnpp
> Version: none; reported 2003-09-10
Package: wnpp
Version: none; reported 2003-09-10
Severity: wishlist
* Package name: xspringies
Version : 1.12
Upstream Author : Douglas DeCarlo <[EMAIL PROTECTED]>
* URL :
http://athos.rutgers.edu/~decarlo/software/xspringies-1.12.tar.Z
* License : GPL
Descri
9 matches
Mail list logo
