News for hackers. Stuff that matters.

A comment on GraphicsMagick and ImageMagick popen() shell vulnerability via filename. Parent comment

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by AgentME on Sunday May 29, 2016 @06:54PM (#11798597)
Linux allows any byte to be a part of a filename except for the null byte and '/'. It's not the kernel or filesystem's fault if some program like sh treats some characters like '|' specially.
[ Parent | on HN ]
Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by rtpg on Sunday May 29, 2016 @08:12PM (#11798868)
But I don't get why you need to use the shell to get your file?

If you have a filename maybe you should manipulate the file directly instead of delegating to the shell.

[ Parent | on HN ]
Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by lloeki on Monday May 30, 2016 @04:57AM (#11800340)
Interestingly enough, Cocoa on OS X allows '/' but disallows ':', and maps them back and forth when going down to the Darwin layer, as ':' used to be the (always invisible in the UI) path separator pre-OS X.
[ Parent | on HN ]
Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by bigiain on Monday May 30, 2016 @06:32PM (#11803597)
I'm wondering now if you're as old as I am (old enough to have written code for OS9), or if you're younger but curious about archeological wierdnesses in modern OSs...
[ Parent | on HN ]