Opened at 2011-02-02T01:05:51Z
Last modified at 2014-12-02T19:44:36Z
#1350 assigned defect
SFTP: clients may misparse directory listings with filenames containing unusual characters — at Version 3
| Reported by: | davidsarah | Owned by: | davidsarah |
|---|---|---|---|
| Priority: | major | Milestone: | soon |
| Component: | code-frontend-ftp-sftp | Version: | 1.8.2 |
| Keywords: | sftp names | Cc: | |
| Launchpad Bug: |
Description (last modified by warner)
For example, FileZilla misparses filenames containing CR (U+000D), such as "blamp \r$(curl noncombatant.org)" currently in the public directory of the test grid. It appears to treat the characters after the \r as a separate line (judging from the Message log when 'Edit menu | Settings... | Debug | Show raw directory listing' is checked).
I think we should be stripping out children with names containing characters below U+0020 when found in a directory, and rejecting attempts to create them. See also #731.
Change History (3)
comment:1 Changed at 2011-02-02T22:02:58Z by zooko
comment:2 Changed at 2011-08-16T03:56:07Z by davidsarah
- Milestone changed from undecided to 1.10.0
- Owner set to davidsarah
- Status changed from new to assigned
comment:3 Changed at 2014-12-02T19:44:36Z by warner
- Component changed from code-frontend to code-frontend-ftp-sftp
- Description modified (diff)
Note: See
TracTickets for help on using
tickets.
This would be consistent with David A. Wheeler's suggestionL: http://www.dwheeler.com/essays/fixing-unix-linux-filenames.html .