[Lilypond-auto] [LilyIssues-auto] [testlilyissues:issues] Re: #5334 Use

From:

Auto mailings of changes to Lily Issues via Testlilyissues-auto

Subject:

[Lilypond-auto] [LilyIssues-auto] [testlilyissues:issues] Re: #5334 Use system* instead of system when invoking browser

Date:

Sun, 03 Jun 2018 13:07:45 -0000

See The Secure BROWSER Specification for some analysis on how the BROWSER variable could/should work.

The BROWSER variable is not really specified and at least 3 different behaviors exist:

some programs use the BROWSER variable as a program to invoke;
some programs use the BROWSER variable as a colon-separated list of candidate programs to invoke;
some additionaly have support for %s-expansion.

Some programs some don't expand the program in several argument, some do expand the program in different arguments based on spaces, some pass the result to system (alowing shell commands in the BROWSER variable).

In contract, the .desktop spec clearly defines how the string should be split in different arguments.

[issues:#5334] Use system* instead of system when invoking browser

Status: Started
Created: Sat Jun 02, 2018 06:03 PM UTC by pkx166h
Last Updated: Sun Jun 03, 2018 10:35 AM UTC
Owner: pkx166h
Attachments:

0001-use-system-instead-of-system.patch (1.3 kB; text/x-patch)

Don Armstrong - 2018-05-11

I have just uploaded a fix to Debian which switches to using system* instead of system:
https://salsa.debian.org/debian/lilypond/commit/788b56e4b7f62637481af65b4b2929649c30fe78

Not sure if this is cross-platform enough, but it solves the issue for systems with a working system* call.

Sent from sourceforge.net because address@hidden is subscribed to https://sourceforge.net/p/testlilyissues/issues/

To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/testlilyissues/admin/issues/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.

------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot