Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 17 May 2017 00:16:28 +0200
From: Dominique Martinet <asmadeus@...ewreck.org>
To: oss-security@...ts.openwall.com
Subject: Re: terminal emulators' processing of escape sequences

Solar Designer wrote on Wed, May 17, 2017:
> On Tue, May 02, 2017 at 12:05:27AM +0200, Robert ??wi??cki wrote:
> > A harmless example from rxvt - pushing back the new-line character:
> > 
> > $ echo -ne "\eGQ;"
> > ;$ 0
> > bash: 0: command not found
> 
> Does this also affect rxvt-unicode?

Yes (at least on rxvt-unicode 9.21 and 9.22)

Actually, on rxvt 2.7.10 this will try to execute the command '1'
instead so I'd wager they meant urxvt from the start... But both are
similarily affected anyhow.

-- 
Dominique Martinet

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ