Issue 87965

Summary: OOo XSystemShellExecute treats all parameters as one
Product: General Reporter: ccheney <ccheney>
Component: codeAssignee: nospam4obr
Status: CLOSED DUPLICATE QA Contact: issues@framework <issues>
Severity: Trivial    
Priority: P3 CC: issues
Version: OOo 2.4.0   
Target Milestone: ---   
Hardware: All   
OS: Linux, all   
URL: https://bugs.edge.launchpad.net/ubuntu/+source/openoffice.org/+bug/213052
Issue Type: DEFECT Latest Confirmation in: ---
Developer Difficulty: ---

Description ccheney 2008-04-06 22:09:14 UTC 
From the Ubuntu bug report:

http://lxr.go-oo.org/source/api/offapi/com/sun/star/system/XSystemShellExecute.idl

offapi/com/sun/star/system/XSystemShellExecute.idl

"
@param aParameter
Specifies a list of space separated parameters. The method does not
validate the given parameters, but only passes it as a parameter to the
specified command.
"

This should be a list of parameters not a space separated string. Otherwise
calling a shell script that prints its args (which will break running real code)
will return something like this:

arg 1 - $1 = "foo bar baz"
arg 2 - $2 = ""
arg 3 - $3 = ""
all args - $@ = "foo bar baz"

instead of what it should:

arg 1 - $1 = "foo"
arg 2 - $2 = "bar"
arg 3 - $3 = "baz"
all args - $@ = "foo bar baz"
Comment 1 thorsten.martens 2008-04-07 10:27:53 UTC 
TM->MBA: please have a look, thanks !
Comment 2 Mathias_Bauer 2008-04-07 15:36:03 UTC 
Oliver, please take over
Comment 3 nospam4obr 2008-04-07 18:31:53 UTC 
Unfortunately a security problem forced us to change the implementation to no
longer comply to the specification. We first need a secure replacement for
opening URLs from documents before we can fix this. See issue 84718 for progress
updates.

*** This issue has been marked as a duplicate of 84718 ***
Comment 4 nospam4obr 2008-04-07 18:32:21 UTC 
.