CVSROOT:        /cvs
Module name:    src
Changes by:     d...@cvs.openbsd.org    2022/05/08 16:32:36

Modified files:
        usr.bin/ssh    : sftp.c 

Log message:
When performing operations that glob(3) a remote path, ensure that the
implicit working directory used to construct that path escapes glob(3)
characters.

This prevents glob characters from being processed in places they
shouldn't, e.g. "cd /tmp/a*/", "get *.txt" should have the get operation
treat the path "/tmp/a*" literally and not attempt to expand it.

Reported by Lusia Kundel; ok markus@

Reply via email to