News for hackers. Stuff that matters.

A comment on Arbitrary file write vulnerability in GNU gzip's zgrep utility. Parent comment

Re:Arbitrary file write vulnerability in GNU gzip's zgrep ut... by dataflow on Monday April 18, 2022 @11:32PM (#31079520)
I'm aware, but it nevertheless doesn't make any sense to have it in a file name.
[ Parent | on HN ]
Re:Arbitrary file write vulnerability in GNU gzip's zgrep ut... by gpvos on Tuesday April 19, 2022 @03:06AM (#31080376)
I'm just saying that it makes exactly as much sense as ctrl-E or any other control char, it has no special status.
[ Parent | on HN ]
Re:Arbitrary file write vulnerability in GNU gzip's zgrep ut... by dataflow on Tuesday April 19, 2022 @03:12AM (#31080410)
There are quite a few ASCII control characters [1] that could make more sense than EOT, e.g., \t, \n, \e, etc.

But yes, EOT is not the only nonsensical character that you could put in a file name, and I never claimed such.

[1] https://en.wikipedia.org/wiki/Control_character#In_ASCII

[ Parent | on HN ]