Bug 183686

Summary: Clicks in dolphin can complete commands in attached terminal
Product: [Applications] dolphin Reporter: Oliver Putz <Regnaron>
Component: generalAssignee: Peter Penz <peter.penz19>
Status: RESOLVED DUPLICATE    
Severity: major CC: andresbajotierra
Priority: NOR    
Version: 16.12.2   
Target Milestone: ---   
Platform: unspecified   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Oliver Putz 2009-02-08 14:51:47 UTC
Version:           1.2 (using 4.2.00 (KDE 4.2.0), Gentoo)
Compiler:          x86_64-pc-linux-gnu-gcc
OS:                Linux (x86_64) release 2.6.28-gentoo

If you have a console open in dolphin with split view, whenever do some operation in dolphin (go to some folder, etc) the corresponding operation gets shown in the console. This in itself is an annoyance, but it can have severe effects. Create for example the following directory structure:

~/test/
~/test/important/
~/test/cleanup/
~/test/cleanup/toBeDeleted/

Now open dolpin in split view with a console attached. In the left pane show ~/test/ and in the other show some other directory.
Activate the right pane by clicking on it.
Type "rm -rf " (note the trailing space) in the console but DO NOT COMPLETE OR EXECUTE THE COMMAND
Click on the left pane in dolphin and watch the whole test directory get wiped out

The problem seems to be that the command rm -rf gets "completed" by clicking on the left pane by adding the string cd /home/oliver/test to it.
This makes the command rm -rf cd /home/oliver/test and it gets executed.

Thus, a simple click in dolphin could theoretically complete and execute any command on the attached console and therefore modify or even delete any directory you just happened to click on.

Note: This can of course also happen if you use non-split view mode. Just go up one level (guys, don't try this on a folder that is only one level below your home folder!)
Comment 1 Oliver Putz 2009-02-08 14:52:54 UTC
Changing severity due to possible data loss
Comment 2 Pino Toscano 2009-02-08 15:40:56 UTC
(Possible data loss -> major.)
Comment 3 Dario Andres 2009-02-09 00:10:56 UTC
Bug 161637
Comment 4 Peter Penz 2009-02-09 05:45:04 UTC

*** This bug has been marked as a duplicate of bug 161637 ***