Package: xen-utils-common
Version: 4.0.0-1
Severity: minor
Tags: patch

/etc/xen/scripts/block doesn't properly enclose $file in quotes for two out
of three stat calls, which causes the script to fail on files which contain
special characters (i.e. spaces) in their filename or pathname.

See attached for patch.


-- System Information:
Debian Release: 6.0.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-xen-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages xen-utils-common depends on:
ii  gawk                    1:3.1.7.dfsg-5   GNU awk, a pattern scanning and pr
ii  lsb-base                3.2-23.2squeeze1 Linux Standard Base 3.2 init scrip
ii  udev                    164-3            /dev/ and hotplug management daemo
ii  xenstore-utils          4.0.1-5.8        Xenstore utilities for Xen

xen-utils-common recommends no packages.

xen-utils-common suggests no packages.

-- Configuration Files:
/etc/xen/scripts/block changed [not included]
/etc/xen/xend-config.sxp changed [not included]

-- no debconf information
--- /etc/xen/scripts/block.orig 2010-06-21 09:46:02.000000000 -0400
+++ /etc/xen/scripts/block      2013-03-20 13:03:29.846945047 -0400
@@ -272,8 +272,8 @@
 
         if [ "x$mode" != 'x!' ]
         then
-          inode=$(stat -c '%i' $file)
-          dev=$(stat -c '%D' $file)
+          inode=$(stat -c '%i' "$file")
+          dev=$(stat -c '%D' "$file")
           if [ -z "$inode" ] || [ -z "$dev" ]
           then
             fatal "Unable to lookup $file: dev: $dev inode: $inode"

Reply via email to