Date: Wed, 17 May 2017 00:15:55 +0200 From: "Jason A. Donenfeld" <Jason@...c4.com> To: oss-security <oss-security@...ts.openwall.com> Cc: rxvt-unicode@...ts.schmorp.de, rxvt@...morp.de Subject: Re: terminal emulators' processing of escape sequences On Wed, May 17, 2017 at 12:03 AM, Solar Designer <solar@...nwall.com> wrote: > Jason, Robert - > > On Tue, May 02, 2017 at 12:05:27AM +0200, Robert ??wi??cki wrote: >> A harmless example from rxvt - pushing back the new-line character: >> >> $ echo -ne "\eGQ;" >> ;$ 0 >> bash: 0: command not found > > Does this also affect rxvt-unicode? It does, actually. I've CCd rxvt-unicode upstream on this in order to hear their assessment. Regards, Jason
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.