Re: [PATCH] Make LyX find its localized messages without hardcoding

2004-02-06 Thread Lars Gullik Bjønnes
Ronald Florence <[EMAIL PROTECTED]> writes: | Jean-Marc Lasgouttes wrote: > >> Lars> Is it weird to use the documented configure switces to their >> Lars> intended purpose? >> OK, I guess I will let this patch gather some dust in my home dir. >> Maybe I'll get a good idea to make it work... > | Do

Re: Counters in latex8.layout

2004-02-06 Thread Lars Gullik Bjønnes
Jean-Marc Lasgouttes <[EMAIL PROTECTED]> writes: >> "Ling" == Ling Li <[EMAIL PROTECTED]> writes: > | Ling> The standard counters (stdcounters.inc) don't work in | Ling> latex8.layout. I couldn't figure out how to define a layout | Ling> counter so I am not sure what the reason is. Here're wha

Vacation -

2004-02-06 Thread Lars Gullik Bjønnes
I'll be gone for the next two weeks. Anything urgent should be sent to me by SMS (+4790858203) I'll try to read email occasionally. -- Lgb

Re: Lyx core dumps

2004-02-06 Thread David Raymond
Jean-Marc Lasgouttes writes: > > "David" == David Raymond <[EMAIL PROTECTED]> writes: > > David> Hi, > > David> I have had lyx 1.3.3 using the libqt3 toolkit dump core a > David> couple of times while I am messing with displayed equations. I > David> am operating on debian linux on an

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Kuba Ober
> Can I filter the latex-code somehow to make it safe enough, i.e. so safe > that we feel it can be left running on wiki.lyx.org? just chroot jail it under a dedicated user. There's no way to filter the latex code to make it safe. Somebody will always invent an obscure construct that will go aro

Re: Lyx is overrideing Layout-Preferences

2004-02-06 Thread Georg Baum
Jean-Marc Lasgouttes wrote: > Juergen> I have glibc 2.3.2 (shipped with SuSE, probably updated by > Juergen> SuSE online update once or more). No idea. Maybe I'll try > Juergen> with SuSE 9.0 (which I have on my laptop). > > Might be nice. I just tried on SuSE 9.0 with packages: glibc-2.3.2-88

Re: [patch] don't let clicks in math crash...

2004-02-06 Thread Alfredo Braunstein
Alfredo Braunstein wrote: > qt only, xforms is ok. This cures it. Puzzling that it doesn't crash in xforms though. Alfredo Index: lyxfunc.C === RCS file: /usr/local/lyx/cvsroot/lyx-devel/src/lyxfunc.C,v retrieving revision 1.570 di

Re: [PATCH] Make LyX find its localized messages without hardcoding

2004-02-06 Thread Ronald Florence
Jean-Marc Lasgouttes wrote: Lars> Is it weird to use the documented configure switces to their Lars> intended purpose? OK, I guess I will let this patch gather some dust in my home dir. Maybe I'll get a good idea to make it work... Does this mean holding off on releasing 1.3.4? The relocatability

Re: qt3/win noncommercial

2004-02-06 Thread Kuba Ober
On Friday 06 February 2004 09:26 am, Jose' Matos wrote: > On Friday 06 February 2004 13:59, Jean-Marc Lasgouttes wrote: > > I wonder how far the cygwin-based qt3/win32 port that is developed > > here > > http://kde-cygwin.sourceforge.net/qt3-win32/ > > could go when compiling LyX... Actually, I a

Re: [PATCH] Make LyX find its localized messages without hardcoding

2004-02-06 Thread Jean-Marc Lasgouttes
> "Lars" == Lars Gullik Bjønnes <[EMAIL PROTECTED]> writes: Lars> | Do it the easy way. If people configure weirdly, then they've Lars> moved | beyond your ability to help them. Lars> Is it weird to use the documented configure switces to their Lars> intended purpose? OK, I guess I will let

Re: xfonts and builds --without-x

2004-02-06 Thread Jean-Marc Lasgouttes
> "Ronald" == Ronald Florence <[EMAIL PROTECTED]> writes: Ronald> If LyX is built --without-x, for example for LyX/Mac, should Ronald> it install xfonts? LyX-1.3.4cvs does, and it isn't clear to me Ronald> what use the xfonts are on a non-X11 installation. -- They are indeed useless, but lib/

Re: Counters in latex8.layout

2004-02-06 Thread Jean-Marc Lasgouttes
> "Ling" == Ling Li <[EMAIL PROTECTED]> writes: Ling> The standard counters (stdcounters.inc) don't work in Ling> latex8.layout. I couldn't figure out how to define a layout Ling> counter so I am not sure what the reason is. Here're what i know Ling> 1) latex8 uses "\Section" instead of "\sec

edit

2004-02-06 Thread Alfredo Braunstein
right now button insets don't get any dispatch, but a single edit call (that is not implemented in insetcommand, so nothing happends). question: why is the inset::edit call needed at all (even for collapsables/tables), why don't we just dispatch to the inset_hit first? Am I misinterpreting somet

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Alfredo Braunstein
On Friday 06 February 2004 18:17, Andre Poenitz wrote: > I think the possible harm is even restricted to places below the .tex > doc in the directory tree, but I am not entirely sure... Depends on the installation (chrooted or not). Dunno in this case. Alfredo

Re: [patch] don't let clicks in math crash...

2004-02-06 Thread Alfredo Braunstein
Andre Poenitz wrote: > Not here, at least not on the first click... qt only, xforms is ok. Alfredo

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Christian Ridderström
On Fri, 6 Feb 2004, Alfredo Braunstein wrote: > Andre Poenitz wrote: > > > The LaTeX can't do anything worse than to read and write files with the > > permissions of the user. So it can't do anymore harm than > > > > 'su user; rm -rf /' > > Note that wiki does *not* allow that, obviously. You

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 06:05:14PM +0100, Alfredo Braunstein wrote: > Andre Poenitz wrote: > > > The LaTeX can't do anything worse than to read and write files with the > > permissions of the user. So it can't do anymore harm than > > > > 'su user; rm -rf /' > > Note that wiki does *not* allow

Re: [patch] don't let clicks in math crash...

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 06:07:24PM +0100, Alfredo Braunstein wrote: > Andre Poenitz wrote: > > > > > Plus some beautification in LyXFunc::getStatus (which should be > > split into insetspecific parts...) > > Not to be critic, but > > C-m still crashes Not here, at least not on the first click.

Re: [patch] don't let clicks in math crash...

2004-02-06 Thread Alfredo Braunstein
Andre Poenitz wrote: > > Plus some beautification in LyXFunc::getStatus (which should be > split into insetspecific parts...) Not to be critic, but C-m still crashes Alfredo

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Alfredo Braunstein
Andre Poenitz wrote: > The LaTeX can't do anything worse than to read and write files with the > permissions of the user. So it can't do anymore harm than > > 'su user; rm -rf /' Note that wiki does *not* allow that, obviously. You can delete thing under revision tracking only. Alfredo

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 05:56:12PM +0100, Christian Ridderström wrote: > On Fri, 6 Feb 2004, Angus Leeming wrote: > > > Christian Ridderström wrote: > > > This is for the wiki pages, so the users are *anyone*... > > > > Sure, but you keep a back-up don't you? I seem to remember some > > disgrunt

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Jean-Marc Lasgouttes
> "Christian" == Christian Ridderström <[EMAIL PROTECTED]> writes: >> I tend to second Angus' (?) opinion: do we really need that? Christian> Maybe not, but it was fun hacking it :-) Which is definitely a good enough reason. JMarc

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Christian Ridderström
On Fri, 6 Feb 2004, Angus Leeming wrote: > Christian Ridderström wrote: > > This is for the wiki pages, so the users are *anyone*... > > Sure, but you keep a back-up don't you? I seem to remember some > disgruntled vandal some time back... The wiki pages are under revision control, so that's no

[patch] bring selection back

2004-02-06 Thread Andre Poenitz
This should bring basck basic selection outside mathed. Andre' -- Those who desire to give up Freedom in order to gain Security, will not have, nor do they deserve, either one. (T. Jefferson or B. Franklin or both...) ? support/1.diff Index: BufferView_pimpl.C ==

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Christian Ridderström
On Fri, 6 Feb 2004, Jan-Åke Larsson wrote: > Christian Ridderström wrote: > > http://www.lyx.org/~chr/wiki/pmwiki.php?pagename=MathTest.MathTest > > I'd agree. Full stop. Obviously, I'd argue for dvipng8^) You would... > If you're interested in what you can do with dvipng web-wise, ha

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Christian Ridderström
On Fri, 6 Feb 2004, Jean-Marc Lasgouttes wrote: > > "Christian" == Christian Ridderström <[EMAIL PROTECTED]> writes: > > Christian> On Fri, 6 Feb 2004, Jean-Marc Lasgouttes wrote: > >> What about something like mimetex: > >> http://www.forkosh.com/mimetex.html > > Christian> Thanks, I could

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Angus Leeming
Christian Ridderström wrote: > This is for the wiki pages, so the users are *anyone*... Sure, but you keep a back-up don't you? I seem to remember some disgruntled vandal some time back... -- Angus

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Christian Ridderström
On Fri, 6 Feb 2004, Angus Leeming wrote: > Christian Ridderström wrote: > > > Hi > > > > I thought it might be nice to be able to insert formulas in the wiki > > pages, so I've hacked together something here: > > > > http://www.lyx.org/~chr/wiki/pmwiki.php?pagename=Math.Math > > > > which does

[patch] don't let clicks in math crash...

2004-02-06 Thread Andre Poenitz
Plus some beautification in LyXFunc::getStatus (which should be split into insetspecific parts...) See attached. Andre' Index: cursor.C === RCS file: /usr/local/lyx/cvsroot/lyx-devel/src/cursor.C,v retrieving revision 1.51 diff -u -

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Jan-Åke Larsson
Christian Ridderström wrote: > On Fri, 6 Feb 2004, Jean-Marc Lasgouttes wrote: > > > What about something like mimetex: > > http://www.forkosh.com/mimetex.html > > Thanks, I could just plug in mimetex instead of the latex-bit and it > works, although the result looks less nice IMO. Anyway, there

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Jean-Marc Lasgouttes
> "Christian" == Christian Ridderström <[EMAIL PROTECTED]> writes: Christian> On Fri, 6 Feb 2004, Jean-Marc Lasgouttes wrote: >> What about something like mimetex: >> http://www.forkosh.com/mimetex.html Christian> Thanks, I could just plug in mimetex instead of the Christian> latex-bit and it

Re: Lyx is overrideing Layout-Preferences

2004-02-06 Thread Jean-Marc Lasgouttes
> "Juergen" == Juergen Spitzmueller <[EMAIL PROTECTED]> writes: Juergen> Jean-Marc Lasgouttes wrote: >> That's very strange... Using your patch, I get a german interface >> with the following command and correct debug output: >> >> schuss: LC_ALL=de_DE LC_NUMERIC=de_DE src/lyx locale (Numeric

Re: Lyx is overrideing Layout-Preferences

2004-02-06 Thread Juergen Spitzmueller
Jean-Marc Lasgouttes wrote: > That's very strange... Using your patch, I get a german interface with > the following command and correct debug output: > > schuss: LC_ALL=de_DE LC_NUMERIC=de_DE src/lyx > locale (Numeric): C > locale (Numeric): C > locale (Numeric): C > locale (Numeric): C > locale (

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Christian Ridderström
On Fri, 6 Feb 2004, Jean-Marc Lasgouttes wrote: > What about something like mimetex: > http://www.forkosh.com/mimetex.html Thanks, I could just plug in mimetex instead of the latex-bit and it works, although the result looks less nice IMO. Anyway, there is a test-installation here http:

Re: Lyx is overrideing Layout-Preferences

2004-02-06 Thread Jean-Marc Lasgouttes
> "Juergen" == Juergen Spitzmueller <[EMAIL PROTECTED]> writes: Juergen> OK, I have added a debug message to xforms_helpers which Juergen> outputs the current LC_NUMERIC setting (setlocale Juergen> (LC_NUMERIC,NULL)) while running LyX. This is indeeed Juergen> [EMAIL PROTECTED], so the setloca

Re: [patch] security fix for 1.3

2004-02-06 Thread Jean-Marc Lasgouttes
> "Alfredo" == Alfredo Braunstein <[EMAIL PROTECTED]> writes: Alfredo> Done. Should I update also some of status/ANNOUNCE or would Alfredo> you do it (my english sux big time)? I'll do it. JMarc

Re: qt3/win noncommercial

2004-02-06 Thread Jose' Matos
On Friday 06 February 2004 13:59, Jean-Marc Lasgouttes wrote: > > I wonder how far the cygwin-based qt3/win32 port that is developed > here > http://kde-cygwin.sourceforge.net/qt3-win32/ > could go when compiling LyX... Actually, I am not sure whether only > windows painting work, or the whole de

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Angus Leeming
Christian Ridderström wrote: > Hi > > I thought it might be nice to be able to insert formulas in the wiki > pages, so I've hacked together something here: > > http://www.lyx.org/~chr/wiki/pmwiki.php?pagename=Math.Math > > which does something similar to what latex-preview, i.e. this markup >

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Jean-Marc Lasgouttes
> "Christian" == Christian Ridderström <[EMAIL PROTECTED]> writes: Christian> Now to my question. I'm guessing that letting arbitrary Christian> latex code be executed using this mechanism is a *huge* Christian> security problem. (Well, assuming that the hacker also Christian> knows his latex

Re: Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 03:07:34PM +0100, Christian Ridderström wrote: > Now to my question. I'm guessing that letting arbitrary latex code be > executed using this mechanism is a *huge* security problem. > (Well, assuming that the hacker also knows his latex). TeX has only very limited abilitys

Latex-formulas in the wiki (slightly off-topic)

2004-02-06 Thread Christian Ridderström
Hi I thought it might be nice to be able to insert formulas in the wiki pages, so I've hacked together something here: http://www.lyx.org/~chr/wiki/pmwiki.php?pagename=Math.Math which does something similar to what latex-preview, i.e. this markup [[$ x = y + z $]] causes a .te

Re: qt3/win noncommercial

2004-02-06 Thread Jean-Marc Lasgouttes
> "Angus" == Angus Leeming <[EMAIL PROTECTED]> writes: Angus> Juergen Spitzmueller wrote: >> FYI: there's a special noncommercial version of qt 3.2 for windows >> available, shipped with the book "C++ GUI Programming with Qt 3" >> ($29). >> http://developers.slashdot.org/comments.pl?sid=95499&

Re: slowness

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 02:53:36PM +0100, Alfredo Braunstein wrote: > Alfredo Braunstein wrote: > > >> there's some horrible slowness in the dispatch process near the end of > >> the UserGuide. > >> Some O(n^2) somewhere? > > > >I'd rather expect some getPar() business or similar. > > Humm... ho

Re: slowness

2004-02-06 Thread Alfredo Braunstein
Alfredo Braunstein wrote: >> there's some horrible slowness in the dispatch process near the end of >> the UserGuide. >> Some O(n^2) somewhere? > >I'd rather expect some getPar() business or similar. Humm... how many getPar()s on a row you need to actually *wait* for them to finish on a 2Ghz pro

Re: qt3/win noncommercial

2004-02-06 Thread Angus Leeming
Juergen Spitzmueller wrote: > FYI: there's a special noncommercial version of qt 3.2 for windows > available, shipped with the book "C++ GUI Programming with Qt 3" > ($29). > http://developers.slashdot.org/comments.pl?sid=95499&cid=8181832 > > Jürgen Maybe you should inform Ruurd? The Non-Comme

[patch]

2004-02-06 Thread Andre Poenitz
Move text related stuff to LyXText::dispatch Has anybody noticed the accent-foo stuff is not working (with or without this patch)? Andre' ? .text3.C.swp ? 1.diff ? 2.diff ? 3.diff ? fullredraw.diff ? par-row.diff ? qfont_loader.tar.bz2 ? search.diff ? tabular-il.diff ? textcache.diff ? tmp.diff

slowness

2004-02-06 Thread Alfredo Braunstein
ughh wrong list... here it is again: there's some horrible slowness in the dispatch process near the end of the UserGuide. Some O(n^2) somewhere? Alfredo

qt3/win noncommercial

2004-02-06 Thread Juergen Spitzmueller
FYI: there's a special noncommercial version of qt 3.2 for windows available, shipped with the book "C++ GUI Programming with Qt 3" ($29). http://developers.slashdot.org/comments.pl?sid=95499&cid=8181832 Jürgen

Re: [patch] coords2.diff

2004-02-06 Thread Alfredo Braunstein
Andre Poenitz wrote: > Good.. you've found the cheap + bv_top() 'hook' in setCache() ;-) Yes, I had a bright moment. ;-) > Just commit and I'll have a look at mathed later. Done. Alfredo

Re: [patch] security fix for 1.3

2004-02-06 Thread Alfredo Braunstein
Jean-Marc Lasgouttes wrote: > Alfredo> I don't know what's better. I'm inclined to apply only the > Alfredo> first patch I've sent (solving only the external inset > Alfredo> problem - which is the most urgent) because it's less likely > Alfredo> it will brake anything else. > > Yes, I suggest th

Re: [patch] coords2.diff

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 01:39:43PM +0100, Alfredo Braunstein wrote: Good.. you've found the cheap + bv_top() 'hook' in setCache() ;-) [I meant telling you about it when I changed the individual assignments to xo_, yo_ but forgot...] Just commit and I'll have a look at mathed later. Andre' --

[patch] coords2.diff

2004-02-06 Thread Alfredo Braunstein
This is the previous patch + use absolute coords in the inset coord cache - insetcollapsable / insettext seems to work ok. - didn't touch tabular yet (to be done) - cannot test math insets because they crash on mouse clicks. Alfredo ? DviOut-1.4.0.lyx ? Markers.C ? Markers.h ? PosIterator.C-bold

Re: Lyx is overrideing Layout-Preferences

2004-02-06 Thread Jean-Marc Lasgouttes
> "Angus" == Angus Leeming <[EMAIL PROTECTED]> writes: Angus> However, not changing the existing default behaviour is always Angus> a good thing, no? Except that this was introduced in 0.89.5 to support input methods, and I think that it was a bad decision at the time. >> What kind of flag d

Re: Lyx core dumps

2004-02-06 Thread Jean-Marc Lasgouttes
> "David" == David Raymond <[EMAIL PROTECTED]> writes: David> Hi, David> I have had lyx 1.3.3 using the libqt3 toolkit dump core a David> couple of times while I am messing with displayed equations. I David> am operating on debian linux on an i686 laptop from ibm. I am David> saving a core du

Re: [patch] security fix for 1.3

2004-02-06 Thread Jean-Marc Lasgouttes
> "Alfredo" == Alfredo Braunstein <[EMAIL PROTECTED]> writes: Alfredo> Of course, this can brake a lot of manually-defined Alfredo> converters (using > and < for instance). Note that we have a general_command_wrapper.py script for these kind of things. I do not know how useful it is here, tho

[patch] fix two warnings

2004-02-06 Thread Andre Poenitz
Small simple stuff. -- Those who desire to give up Freedom in order to gain Security, will not have, nor do they deserve, either one. (T. Jefferson or B. Franklin or both...) Index: cursor.C === RCS file: /usr/local/lyx/cvsroot/

Re: AGUplus fix

2004-02-06 Thread Jean-Marc Lasgouttes
> "Martin" == Martin Vermeer <[EMAIL PROTECTED]> writes: Martin> Like this. Based on user feedback (thanks Tim!) - Martin Feel free to apply this to HEAD and 1.3.x. JMarc

Re: [patch] Iterator stuff.

2004-02-06 Thread Christian Ridderström
On Fri, 6 Feb 2004, Angus Leeming wrote: > Christian Ridderström wrote: > > Um... I don't understand it... OTOH I've never used Boost Spirit, > > but that means it's not obvious if you're unfamiliar with that. > > Could you give a link for Boost Spirit? (and maybe a few comments?) > > http://www.

Re: [patch] Iterator stuff.

2004-02-06 Thread Angus Leeming
Christian Ridderström wrote: > Um... I don't understand it... OTOH I've never used Boost Spirit, > but that means it's not obvious if you're unfamiliar with that. > Could you give a link for Boost Spirit? (and maybe a few comments?) http://www.boost.org/libs/spirit/index.html http://www.boost.org/

Re: [patch] Iterator stuff.

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 11:14:26AM +0100, Christian Ridderström wrote: > Um... I don't understand it... OTOH I've never used Boost Spirit, > but that means it's not obvious if you're unfamiliar with that. > Could you give a link for Boost Spirit? (and maybe a few comments?) http://www.boost.org/li

Re: [patch] Iterator stuff.

2004-02-06 Thread Christian Ridderström
On Fri, 6 Feb 2004, Angus Leeming wrote: > Andre Poenitz wrote: > > > On Thu, Feb 05, 2004 at 05:36:03PM +, Angus Leeming wrote: > >> I've been using Boost.Spirit a lot at work recently and so have > >> become quite comfortable with Spirit's phoenix library (a better > >> lambda?) > > > > I'

Re: [patch] Iterator stuff.

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 10:14:07AM +, Angus Leeming wrote: > Andre Poenitz wrote: > >> expression = > >> f_str_p(var(self.field_name)) >> > >> str_p("NNODES") >> > >> > >> uint_p[resize(var(field), arg1)] >> > >> > >> for

Re: [patch] Iterator stuff.

2004-02-06 Thread Angus Leeming
Andre Poenitz wrote: >> expression = >> f_str_p(var(self.field_name)) >> >> str_p("NNODES") >> >> >> uint_p[resize(var(field), arg1)] >> >> >> for_p(var(index) = 1, >> var(index) <= size(var(field)), >>

Re: [patch] Iterator stuff.

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 09:48:28AM +, Angus Leeming wrote: > Here's an example of a simple parser written using Boost Spirit to > read the data set below and assign the values using phoenix's lambda > facility. It's extremely understandable IMO and has all the error > handling power of a ful

Re: [patch] Iterator stuff.

2004-02-06 Thread Angus Leeming
Andre Poenitz wrote: > On Thu, Feb 05, 2004 at 05:36:03PM +, Angus Leeming wrote: >> I've been using Boost.Spirit a lot at work recently and so have >> become quite comfortable with Spirit's phoenix library (a better >> lambda?) > > I've been using plain old for loops for ages and have become

[patch] remove a few messages

2004-02-06 Thread Andre Poenitz
Noise not needed anymore -- Those who desire to give up Freedom in order to gain Security, will not have, nor do they deserve, either one. (T. Jefferson or B. Franklin or both...) ? 1.diff ? 2.diff ? 3.diff ? fullredraw.diff ? par-row.diff ? qfont_loader.tar.bz2 ? search.diff ? tabular-il.diff

Re: [patch] security fix for 1.3

2004-02-06 Thread Alfredo Braunstein
Angus Leeming wrote: >> I don't know if playing with the file name to be converted you can >> also execute arbitrary code. Tried a bit and didn't work... but it >> would be nicer/safer to use execvp anyways? > > Agreed. There is no need to retain systemcall at all. Kill it. This would be it, exc

Re: [patch] Iterator stuff.

2004-02-06 Thread Lars Gullik Bjønnes
Andre Poenitz <[EMAIL PROTECTED]> writes: | On Thu, Feb 05, 2004 at 05:36:03PM +, Angus Leeming wrote: >> I've been using Boost.Spirit a lot at work recently and so have >> become quite comfortable with Spirit's phoenix library (a better >> lambda?) > | I've been using plain old for loops fo

Re: [patch] Iterator stuff.

2004-02-06 Thread Lars Gullik Bjønnes
Angus Leeming <[EMAIL PROTECTED]> writes: | Angus Leeming wrote: >> - vector nvec; >> - std::copy(bstore.begin(), bstore.end(), >> - lyx::back_inserter_fun(nvec, &Buffer::fileName)); >> + vector nvec( >> + make_transform_iterator(bstore.begin(), >> +

suggestions?

2004-02-06 Thread Alfredo Braunstein
On how to get rid of Systemcall here? It seems hard to use gunzip without -c (decompress to sdout) and get the temp files correctly. Maybe using some script trick as Angus's? string const unzipFile(string const & zipped_file) { string const file = ChangeExtension(zipped_file, string());

Re: [patch] security fix for 1.3

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 08:42:47AM +0100, Alfredo Braunstein wrote: > Andre Poenitz wrote: > > >> $ cat redirect.sh > >> #! /bin/sh > >> exec $1 > $2 > >> > >> > >> \converter tiff eps "sh $$s/redirect.sh('tiff2ps $$i' $$o)" "" > > > > That's as insecure as the original solution, isn't it? > >

Re: 2.95 compile fix remainder (trivial)

2004-02-06 Thread Andre Poenitz
On Fri, Feb 06, 2004 at 08:58:40AM +0200, Martin Vermeer wrote: > I'll check this in too if nobody objects. That's ok. Andre'

Re: [patch] security fix for 1.3

2004-02-06 Thread Alfredo Braunstein
Andre Poenitz wrote: >> $ cat redirect.sh >> #! /bin/sh >> exec $1 > $2 >> >> >> \converter tiff eps "sh $$s/redirect.sh('tiff2ps $$i' $$o)" "" > > That's as insecure as the original solution, isn't it? It doesn't seem so... for instance a && in $1 or $2 won't be interpreted if I'm not mistak

Re: [patch] Iterator stuff.

2004-02-06 Thread Andre Poenitz
On Thu, Feb 05, 2004 at 05:36:03PM +, Angus Leeming wrote: > I've been using Boost.Spirit a lot at work recently and so have > become quite comfortable with Spirit's phoenix library (a better > lambda?) I've been using plain old for loops for ages and have become quite comfortable with them.

Re: [patch] security fix for 1.3

2004-02-06 Thread Andre Poenitz
On Thu, Feb 05, 2004 at 06:06:28PM +, Angus Leeming wrote: > Alfredo Braunstein wrote: > > There's one default converter that won't work: > > > > \converter tiff eps "tiff2ps $$i > $$o" "" > > > > Should we provide a script or do we just nuke it? > > > > Alfredo > > Would this work and, if