>Number:         17751
>Category:       pkg
>Synopsis:       xv executes `filenames'
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jul 28 22:37:00 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     Christian Biere
>Release:        NetBSD 1.6D
>Organization:

        
>Environment:

NetBSD localhost 1.6D NetBSD 1.6D (DURON2) #0: Sat Jul 27 08:52:59 CEST
2002     root@localhost:/usr/src/sys/arch/i386/compile/DURON2 i386
Architecture: i386
Machine: i386

>Description:

Instead of opening the file xv executes the filename if it starts with "!". 
This looks like a feature and it is somehow used to pipe files through
e.g. bbgen internally. Though I doubt anyone expects this behaviour when
he double-clicks such a file. xv doesn't execute the filename when it's given
on the command line.

>How-To-Repeat:

touch '! xterm -T .jpg'
xv
*click on load and double-click the file*

The ".jpg" isn't necessary it's just there to blind the luser.

>Fix:

The code responsable for this should be removed from xv.c. I don't know whether
xv looses any functionality by this. At least the user should be asked to confirm
the execution if anyone really wants/needs that `feature'.

Regards,
Christian

>Release-Note:
>Audit-Trail:
>Unformatted: