On Fri, 14 Mar 2014, SF Markus Elfring wrote:

> > The string in question is the file name from a position variable.  A file
> > name does not contain a quote character.
>
> I would prefer to handle also the general case that such strings contain
> quotation marks eventually.

Why would a file name contain a quote character.  And if it does, what
good will adding exxtra ones do you.  If the name is

foo\"bar

you will have

"foo\""bar"

and your string will be misparsed by your database.

julia

> It depends on the analysis area if corresponding safety checks for special
> characters will matter, doesn't it?
>
> Other example:
> https://github.com/coccinelle/coccinelle/issues/5
>
> Regards,
> Markus
>
_______________________________________________
Cocci mailing list
[email protected]
https://systeme.lip6.fr/mailman/listinfo/cocci

Reply via email to