News for hackers. Stuff that matters.

A comment on GraphicsMagick and ImageMagick popen() shell vulnerability via filename. Parent comment

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by lloeki on Monday May 30, 2016 @04:57AM (#11800340)
Interestingly enough, Cocoa on OS X allows '/' but disallows ':', and maps them back and forth when going down to the Darwin layer, as ':' used to be the (always invisible in the UI) path separator pre-OS X.
[ Parent | on HN ]
Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by bigiain on Monday May 30, 2016 @06:32PM (#11803597)
I'm wondering now if you're as old as I am (old enough to have written code for OS9), or if you're younger but curious about archeological wierdnesses in modern OSs...
[ Parent | on HN ]