Bug#438909: [debfile] DebControl.md5sums(): unsafe parsing of md5sums file

[Stefano Zacchiroli]

On Mon, Aug 20, 2007 at 07:15:40PM +0200, Romain Francoise wrote:
>          for line in md5_file.readlines():
> -            md5, fname = line.split()
> +            md5, fname = line.rstrip("\n").split(None, 1)
>              sums[fname] = md5

I went for .rstrip('\r\n'), but thanks for the report and the patch!

Fixed in our repo, updated package at
http://people.debian.org/~zack/stalla/python-debian_0.1.6_all.deb.

Cheers.

-- 
Stefano Zacchiroli -*- PhD in Computer Science ............... now what?
zack@{cs.unibo.it,debian.org,bononia.it} -%- http://www.bononia.it/zack/
(15:56:48)  Zack: e la demo dema ?    /\    All one has to do is hit the
(15:57:15)  Bac: no, la demo scema    \/    right keys at the right time
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-python-debian-maint/attachments/20070820/4d46ed41/attachment.pgp