[MinGW-notify] [ mingw-Bugs-3482704 ] MSYS bash: quoting does not prevent globbing

[SF/projects/mingw n. l. <min...@li...>]

Bugs item #3482704, was opened at 2012-02-01 05:22
Message generated for change (Tracker Item Submitted) made by keithmarshall
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=102435&aid=3482704&group_id=2435

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: MSYS
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Keith Marshall (keithmarshall)
Assigned to: Cesar Strauss (cstrauss)
Summary: MSYS bash: quoting does not prevent globbing

Initial Comment:
Originally reported by Eli Zaretskii; see http://thread.gmane.org/gmane.comp.gnu.mingw.user/38302

When a globbing character appears within a quoted shell command argument, then glob expansion should not occur.  This behaviour may be correctly observed when passing such arguments to shell built-in commands, or MSYS-aware applications, (i.e. those linked with msys-1.0.dll).  However, when passing such arguments to MinGW applications, the protective quotes are not preserved, and the globbing characters are inappropriately expanded by the MSVCRT startup code.

There are two issues identified in the original mail thread:

1) When passing arguments to MinGW applications, quoting is correctly applied to ensure that embedded white-space, escapes and double quotes are preserved.  The same courtesy needs to be accorded to globbing characters which have not been expanded by the shell itself; the current implementation neglects this requirement.  The remedy for this defect is entirely within MSYS remit.

2) Recent versions of MSVCRT itself, apparently by Microsoft design, may not honour quoting as protection from glob expansion.  It further appears that Microsoft have refused to correct this regression; thus it may be necessary to develop an augmented MinGW startup capability, eschewing the MSVCRT startup code in favour of our own -- perhaps as a user selectable option -- which will DTRT.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=102435&aid=3482704&group_id=2435