CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2022/05/08 16:32:36
Modified files: usr.bin/ssh : sftp.c Log message: When performing operations that glob(3) a remote path, ensure that the implicit working directory used to construct that path escapes glob(3) characters. This prevents glob characters from being processed in places they shouldn't, e.g. "cd /tmp/a*/", "get *.txt" should have the get operation treat the path "/tmp/a*" literally and not attempt to expand it. Reported by Lusia Kundel; ok markus@