6.0.0-alpha14
7/3/25

[#7301] fix bug: sftp operations in VFS/ssh2.php do not work due to escapeshellarg
Summary fix bug: sftp operations in VFS/ssh2.php do not work due to escapeshellarg
Queue Horde Framework Packages
Queue Version FRAMEWORK_3
Type Bug
State Resolved
Priority 1. Low
Owners
Requester odie (at) cs (dot) aau (dot) dk
Created 09/08/2008 (6142 days ago)
Due
Updated 09/08/2008 (6142 days ago)
Assigned
Resolved 09/08/2008 (6142 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch Yes

History
09/08/2008 04:07:54 PM Chuck Hagenbuch State ⇒ Resolved
 
09/08/2008 04:07:40 PM CVS Commit Comment #3 Reply to this comment
09/08/2008 12:56:12 PM odie (at) cs (dot) aau (dot) dk Comment #2 Reply to this comment
Since I'm not able to CC anyone using this bugtracker, I'm (ab)using 
the Watch feature in an attempt to get directly in touch with the 
people involved in

[#6756] ssh2_scp_recv fails if pathnames contain special characters



Chuck Hagenbuch and "herde", please see

Ticket URL: http://bugs.horde.org/ticket/7301



Thanks,

Simon Holm Thøgersen
09/08/2008 08:42:21 AM odie (at) cs (dot) aau (dot) dk Comment #1
Priority ⇒ 1. Low
New Attachment: horde-ssh2.php.diff Download
Patch ⇒ Yes
Milestone ⇒
Queue ⇒ Horde Framework Packages
Summary ⇒ fix bug: sftp operations in VFS/ssh2.php do not work due to escapeshellarg
Type ⇒ Bug
State ⇒ Unconfirmed
Reply to this comment
The filename argument for the ssh2_sftp_* functions should not be 
escapeshellarg'ed, white spaces and other special characters are 
already handled fine by these functions. This is opposed to the 
ssh_scp_* functions that do require them.



The escapeshellarg was introduced when trying to fix a problem where 
the ssh_scp_* functions did not use escapeshellarg (bug #6756). Chuck 
Hagenbuch must have guessed that the ssh2_sftp_* functions required 
them too, but neither he nor the reporter of the bug seemed to have 
actually tested any codepaths that uses the ssh2_sftp_* functions.



Attached is a patch that reverts the code for the ssh_sftp_* functions 
to the state before the 'fix'.



I'm CC'ing the people involved in bug #6756 to get their statement.

Saved Queries