|
From: | G. Branden Robinson |
Subject: | [bug #61423] [libgroff] allow paths in "name" directive of font description file, restoring historical groff behavior |
Date: | Thu, 4 Nov 2021 06:09:47 -0400 (EDT) |
User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0 |
Update of bug #61423 (project groff): Status: In Progress => Need Info _______________________________________________________ Follow-up Comment #4: Hmm, interestingly, the change being complained about made an _unintended_ directory traversal pretty unlikely. So in addressing bug #61324 I'll probably need to muck with the file opening logic for fonts. It would be _easier_ to characterize the scenario Dave describes as simply unsupported, and invite him to use a meaningless directive name or a '#' comment to store the qualified file name instead. What do you think, Dave? $ ./build/test-groff -Tutf8 EXPERIMENTS/the-word-is-evil.roff troff: /home/branden/src/GIT/groff/build/font/devutf8/../../../../../../../../../home/branden/bogusfont-1.23.0:1: error: font description file name '../../../../../../../../../home/branden/bogusfont-1.23.0' does not match 'name' argument 'bogusfont-1.23.0' troff:EXPERIMENTS/the-word-is-evil.roff:1: error: cannot load font '../../../../../../../../../home/branden/bogusfont-1.23.0' for mounting troff:EXPERIMENTS/the-word-is-evil.roff:2: warning: no font mounted at position 5 WORD _______________________________________________________ Reply to this item at: <https://savannah.gnu.org/bugs/?61423> _______________________________________________ Message sent via Savannah https://savannah.gnu.org/
[Prev in Thread] | Current Thread | [Next in Thread] |