Date: Wed, 17 May 2017 00:16:28 +0200 From: Dominique Martinet <asmadeus@...ewreck.org> To: oss-security@...ts.openwall.com Subject: Re: terminal emulators' processing of escape sequences Solar Designer wrote on Wed, May 17, 2017: > On Tue, May 02, 2017 at 12:05:27AM +0200, Robert ??wi??cki wrote: > > A harmless example from rxvt - pushing back the new-line character: > > > > $ echo -ne "\eGQ;" > > ;$ 0 > > bash: 0: command not found > > Does this also affect rxvt-unicode? Yes (at least on rxvt-unicode 9.21 and 9.22) Actually, on rxvt 2.7.10 this will try to execute the command '1' instead so I'd wager they meant urxvt from the start... But both are similarily affected anyhow. -- Dominique Martinet
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ