desktop.eclass: Sanitize filename of desktop entry.
authorUlrich Müller <ulm@gentoo.org>
Wed, 25 Mar 2020 07:50:42 +0000 (08:50 +0100)
committerUlrich Müller <ulm@gentoo.org>
Fri, 27 Mar 2020 07:27:28 +0000 (08:27 +0100)
make_desktop_entry() extracts the first component of the filename from
the Exec key in the desktop entry. This can however include arguments
which will end up in the filename. For example, www-client/links has
"Exec=links -g %u", resulting in links_-g_%u-links-2.desktop as the
name of the file.

The current extraction pattern originates from this CVS commit:
https://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/eclass/eutils.eclass?r1=1.271&r2=1.272
with the commit message "scrub exec filename in case someone does
something silly like pass the fullpath to a binary".

Before that commit, anything after a space in Exec would have been
removed. Restore that behaviour, and in addition use only the
executable's basename.

While at it, get rid of the sed call and handle everything in bash.

Signed-off-by: Ulrich Müller <ulm@gentoo.org>
eclass/desktop.eclass

index 6fc72ab8ec0357351530a0067983720a016682cf..f310f210dfba1d1b939171ef4e455fb2432d803a 100644 (file)
@@ -1,4 +1,4 @@
-# Copyright 1999-2018 Gentoo Foundation
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # @ECLASS: desktop.eclass
@@ -162,8 +162,8 @@ make_desktop_entry() {
        else
                local desktop_name="${PN}-${slot}"
        fi
-       local desktop="${T}/$(echo ${exec} | sed 's:[[:space:]/:]:_:g')-${desktop_name}.desktop"
-       #local desktop=${T}/${exec%% *:-${desktop_name}}.desktop
+       local desktop="${exec%%[[:space:]]*}"
+       desktop="${T}/${desktop##*/}-${desktop_name}.desktop"
 
        # Don't append another ";" when a valid category value is provided.
        type=${type%;}${type:+;}