[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#312605: marked as done (percent sign in debian package names)



Your message dated Thu, 9 Jun 2005 12:21:41 -0500 (CDT)
with message-id <Pine.LNX.4.58.0506091219490.1607@gradall.private.brainfood.com>
and subject line Bug#312605: percent sign in debian package names
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 9 Jun 2005 06:22:06 +0000
>From info@klawitter.de Wed Jun 08 23:22:06 2005
Return-path: <info@klawitter.de>
Received: from moutng.kundenserver.de [212.227.126.188] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DgGQY-0000lF-00; Wed, 08 Jun 2005 23:22:06 -0700
Received: from dialin-145-254-179-097.arcor-ip.net [145.254.179.97] (helo=puck.klawitter.local)
	by mrelayeu.kundenserver.de with ESMTP (Nemesis),
	id 0ML21M-1DgGQS1D22-0007fo; Thu, 09 Jun 2005 08:22:00 +0200
From: Holger Klawitter <info@klawitter.de>
To: submit@bugs.debian.org
Subject: percent sign in debian package names
Date: Wed, 8 Jun 2005 22:54:25 +0200
User-Agent: KMail/1.7.2
MIME-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Message-Id: <[🔎] 200506082254.25741.info@klawitter.de>
X-Provags-ID: kundenserver.de abuse@kundenserver.de login:c3f09bf0911098d231c83d2978ee4594
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-4.5 required=4.0 tests=BAYES_44,DATE_IN_PAST_06_12,
	HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: apt
Package: general package management
Version: up to 0.5.28.5

Hi there,

I tried to put a collection of debian packages on a tomcat webserver along=
=20
with a Packages.gz for easy retrieval via apt-get. However the retrieval do=
es=20
not work whenever a percent sign is part of the filename (and the follwing=
=20
two characters indicate a valid hex number) as tomcat interprets the escape=
=20
sequence and retrieves the wrong file name.
 http://oberon/apt/./g++_4%3a3.3.5-3_i386.deb
becomes:
 http://oberon/apt/./g++_4:3.3.5-3_i386.deb

According to rfc1630 percent signs are reserved for quoting and hence=20
forbidden as (literal) part of a URI. So tomcat is doing nothing wrong.

Most other webservers do the percent expansion only in the query part of a =
URL=20
so this problem does not occur there. Tweaking apt-get to send properly=20
quoted URLs would break on other servers. Not desirable :-)

So I'd suggest to avoid the percent sign as part of a package file name.

=2D-=20
Mit freundlichem Gru=C3=9F / With kind regards
	Holger Klawitter
=2D-
info@klawitter.de

---------------------------------------
Received: (at 312605-done) by bugs.debian.org; 9 Jun 2005 17:21:43 +0000
>From doogie@debian.org Thu Jun 09 10:21:43 2005
Return-path: <doogie@debian.org>
Received: from newmail.brainfood.com [146.82.138.14] (Debian-exim)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DgQit-0007GC-00; Thu, 09 Jun 2005 10:21:43 -0700
Received: from brown.brainfood.com ([146.82.138.61] helo=gradall.private.brainfood.com)
	by newmail.brainfood.com with esmtp (TLS-1.0:DHE_RSA_3DES_EDE_CBC_SHA:24)
	(Exim 4.31)
	id 1DgQiO-0003vs-2A; Thu, 09 Jun 2005 12:21:12 -0500
Date: Thu, 9 Jun 2005 12:21:41 -0500 (CDT)
From: Adam Heath <doogie@debian.org>
X-X-Sender: adam@gradall.private.brainfood.com
To: Holger Klawitter <info@klawitter.de>, 312605-done@bugs.debian.org
Subject: Re: Bug#312605: percent sign in debian package names
In-Reply-To: <[🔎] 200506082254.25741.info@klawitter.de>
Message-ID: <Pine.LNX.4.58.0506091219490.1607@gradall.private.brainfood.com>
References: <[🔎] 200506082254.25741.info@klawitter.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Delivered-To: 312605-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER,
	VALID_BTS_CONTROL autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 2

reassign 312605 general
thanks

On Wed, 8 Jun 2005, Holger Klawitter wrote:

> Package: apt
> Package: general package management
> Version: up to 0.5.28.5
>
> Hi there,
>
> I tried to put a collection of debian packages on a tomcat webserver along
> with a Packages.gz for easy retrieval via apt-get. However the retrieval does
> not work whenever a percent sign is part of the filename (and the follwing
> two characters indicate a valid hex number) as tomcat interprets the escape
> sequence and retrieves the wrong file name.
>  http://oberon/apt/./g++_4%3a3.3.5-3_i386.deb
> becomes:
>  http://oberon/apt/./g++_4:3.3.5-3_i386.deb
>
> According to rfc1630 percent signs are reserved for quoting and hence
> forbidden as (literal) part of a URI. So tomcat is doing nothing wrong.
>
> Most other webservers do the percent expansion only in the query part of a URL
> so this problem does not occur there. Tweaking apt-get to send properly
> quoted URLs would break on other servers. Not desirable :-)

Of course not.  Don't escape the filename when placing it into Packages.gz.
Use the unescaped form.

Some access methods aren't done over http, and are done with raw file access.
Such escaping will break.

In other words, the escaping is a function of the transport medium, not the
storage medium.



Reply to: