netbsd-bugs: bin/34740: usr.sbin/user/user.c:asystem hides bugs

Subject: bin/34740: usr.sbin/user/user.c:asystem hides bugs
To: None <gnats-admin@netbsd.org, netbsd-bugs@netbsd.org>
From: None <rillig@NetBSD.org>
List: netbsd-bugs
Date: 10/07/2006 11:55:00

>Number:         34740
>Category:       bin
>Synopsis:       usr.sbin/user/user.c:asystem hides bugs
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Oct 07 11:55:00 +0000 2006
>Originator:     Roland Illig
>Release:        NetBSD-current
>Organization:
>Environment:
>Description:

The asystem() function does not handle directories containing
white-space. It also does not have error checking to prevent the command
from being truncated.

>How-To-Repeat:
	useradd -d "/home/Roland Illig" roland

>Fix:

Integrate sysfmt(3) into user.c, which is available from

    http://www.schlechte-software.de/sysfmt/