[Pkg-shadow-devel] [Git][debian/adduser][wip/bug-1109329] correctly sanitize names in deluser

[Marc Haber (@zugschlus)]

Marc Haber pushed to branch wip/bug-1109329 at Debian / adduser


Commits:
7a5c7cd1 by Marc Haber at 2025-09-18T10:15:01+02:00
correctly sanitize names in deluser

Thanks: Dagfinn Ilmari Mannsåker
Closes: #1109329

- - - - -


1 changed file:

- deluser


Changes:

=====================================
deluser
=====================================
@@ -214,13 +214,13 @@ if ( (! defined $names[0]) || length($names[0]) == 0 || @names > 2) {
 
 if(@names == 2) {      # must be deluserfromgroup
     $action = "deluserfromgroup";
-    $user = sanitize_string( shift(@names) );
-    $group = sanitize_string( shift(@names) );
+    $user = sanitize_string( shift(@names), anynamere );
+    $group = sanitize_string( shift(@names), anynamere );
 } else { # 1 parameter, must be delgroup
     if($action eq "delgroup") {
-        $group = shift(@names);
+        $group = sanitize_string( shift(@names), anynamere );
     } else {
-        $user = shift(@names);
+        $user = sanitize_string( shift(@names), anynamere );
     }
 }
 



View it on GitLab: https://salsa.debian.org/debian/adduser/-/commit/7a5c7cd158b369ae31773f39b7d2afd7ad9b3bbd

-- 
View it on GitLab: https://salsa.debian.org/debian/adduser/-/commit/7a5c7cd158b369ae31773f39b7d2afd7ad9b3bbd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-shadow-devel/attachments/20250918/d6931a0b/attachment-0001.htm>