dput misses some quotes to verify signature on special paths

[Thomas]

On my Upload you can see whats happens:

thomas@nbtxc:~/Downloads/Linux/Commercial/Debian & Ubuntu/tk-suite$ LANG=C dput ppa:thomas-creutz/agfeo-tksuite tksuite-client_4.3.44-1_source.changes
Checking signature on .changes
sh: Ubuntu/tk-suite/tksuite-client_4.3.44-1_source.changes: No such file or directory
gpg: can't open `/pool/Downloads/Linux/Commercial/Debian'
gpg: verify signatures failed: file open error
Error in finding signature verification status.
Checking signature on .dsc
sh: Ubuntu/tk-suite/tksuite-client_4.3.44-1.dsc: No such file or directory
gpg: can't open `/pool/Downloads/Linux/Commercial/Debian'
gpg: verify signatures failed: file open error
Error in finding signature verification status.
Uploading to ppa (via ftp to ppa.launchpad.net):

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: devscripts 2.11.6ubuntu1.3
ProcVersionSignature: Ubuntu 3.2.0-27.43-generic 3.2.21
Uname: Linux 3.2.0-27-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.0.1-0ubuntu11
Architecture: amd64
Date: Sun Jul 22 23:39:22 2012
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425)
ProcEnviron:
 SHELL=/bin/bash
 TERM=xterm
 PATH=(custom, user)
 LANG=de_DE.UTF-8
SourcePackage: devscripts
UpgradeStatus: No upgrade log present (probably fresh install)

[Jason Conti (jconti)]

Thanks for the bug report. This bug has been reported at bug #995521 , so I am going to mark this as a duplicate of that bug. There is a patch there which adds proper quoting to the check_signature function. (Tested and it works here so someone just needs to prepare an upload).