From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp-out-so.shaw.ca (smtp-out-so.shaw.ca [64.59.136.138]) by sourceware.org (Postfix) with ESMTPS id 1FE84386F82D for ; Sat, 2 May 2020 14:53:27 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 1FE84386F82D Received: from [192.168.1.104] ([24.64.172.44]) by shaw.ca with ESMTP id UtW8josRe7t92UtW9jW0nB; Sat, 02 May 2020 08:53:26 -0600 X-Authority-Analysis: v=2.3 cv=Os7UNx3t c=1 sm=1 tr=0 a=kiZT5GMN3KAWqtYcXc+/4Q==:117 a=kiZT5GMN3KAWqtYcXc+/4Q==:17 a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=fjDFcf429ns8VtWUCqQA:9 a=QEXdDO2ut3YA:10 a=sRI3_1zDfAgwuvI8zelB:22 Reply-To: cygwin@cygwin.com Subject: Re: changed behaviour for "cygcheck -p " To: cygwin@cygwin.com, overseers@sourceware.org References: From: Brian Inglis Autocrypt: addr=Brian.Inglis@SystematicSw.ab.ca; prefer-encrypt=mutual; keydata= mDMEXopx8xYJKwYBBAHaRw8BAQdAnCK0qv/xwUCCZQoA9BHRYpstERrspfT0NkUWQVuoePa0 LkJyaWFuIEluZ2xpcyA8QnJpYW4uSW5nbGlzQFN5c3RlbWF0aWNTdy5hYi5jYT6IlgQTFggA PhYhBMM5/lbU970GBS2bZB62lxu92I8YBQJeinHzAhsDBQkJZgGABQsJCAcCBhUKCQgLAgQW AgMBAh4BAheAAAoJEB62lxu92I8Y0ioBAI8xrggNxziAVmr+Xm6nnyjoujMqWcq3oEhlYGAO WacZAQDFtdDx2koSVSoOmfaOyRTbIWSf9/Cjai29060fsmdsDLg4BF6KcfMSCisGAQQBl1UB BQEBB0Awv8kHI2PaEgViDqzbnoe8B9KMHoBZLS92HdC7ZPh8HQMBCAeIfgQYFggAJhYhBMM5 /lbU970GBS2bZB62lxu92I8YBQJeinHzAhsMBQkJZgGAAAoJEB62lxu92I8YZwUBAJw/74rF IyaSsGI7ewCdCy88Lce/kdwX7zGwid+f8NZ3AQC/ezTFFi5obXnyMxZJN464nPXiggtT9gN5 RSyTY8X+AQ== Organization: Systematic Software Message-ID: <5969fad0-6055-4a5c-bbde-813f916c185f@SystematicSw.ab.ca> Date: Sat, 2 May 2020 08:53:23 -0600 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-CA Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4wfAOaBWkJCQpnpZcbhDyfoEsDs1dXM/uEuRDj6/InekdYM+j0sYA0g14f5LnREyW1lxL8kQHAUKjNJzIvd8Uhg2M7ljDh5ywDUl9pTiLOjJ7Q78egjvtK QpxTjsHr/r1kkl7xfDrEmabiISyoitiOfYjTLhFnWsn8IyyHzfOUDcRLorOlkkNTAXc4QAG0v+uHmZxzLSdKlihmJIoLwZhB1PJxK94f1F7avHhxjxUu8qdn X-Spam-Status: No, score=-6.3 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS, KAM_LAZY_DOMAIN_SECURITY, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_NONE, TXREP autolearn=no autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: overseers@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Overseers mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 May 2020 14:53:28 -0000 On 2020-05-02 04:11, Marco Atzeri via Cygwin wrote: > It seems there is a new escape system that is fooling > the search engine > > $ cygcheck -p 'bin/mutt' > Found 0 matches for binx2fmutt > > same on the Web e.g. Cygwin Packag Search https://cygwin.com/packages/ enter: "... [ bin/cpuid.exe ] [Go] ( ) x86 (o) x86_64 ..." https://cygwin.com/cgi-bin2/package-grep.cgi?grep=bin%2Fcpuid.exe&arch=x86_64 result: "... Cygwin Package Search Search package contents for a grep basic regular expression pattern [ binx2Fcpuid.exe ] [Go] ( ) x86 (o) x86_64 Search Results Found 0 matches for x2Fusrx2Fbinx2Fcpuid.exe " but tweak the browser URL directly: https://cygwin.com/cgi-bin2/package-grep.cgi?grep=bin/cpuid.exe&arch=x86_64 "... Cygwin Package Search Search package contents for a grep basic regular expression pattern [ bin/cpuid.exe ] [Go] ( ) x86 (o) x86_64 Search Results Found 2 matches for bin/cpuid.exe cpuid-20200211-1 - cpuid: dumps CPUID information about the CPU(s) cpuid-20200427-1 - cpuid: dumps CPUID information about the CPU(s) " and curl and wget also work with the above non-urlencoded URL, so it looks like the new server CGI borks handling urlencoded parameter values e.g. / -> %2F, from either cygcheck -p or the web form, possibly from trying to pass thru some urldecode filter converting %2F -> \x2F -> /, but with inadequate escaping \\x2F, quoting '\x2F', or format (perhaps needs 0x2F?) to pass thru enough layers to get converted, resulting in just converting "\x" to "x". -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada This email may be disturbing to some readers as it contains too much technical detail. Reader discretion is advised.