Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 17 May 2017 00:15:55 +0200
From: "Jason A. Donenfeld" <Jason@...c4.com>
To: oss-security <oss-security@...ts.openwall.com>
Cc: rxvt-unicode@...ts.schmorp.de, rxvt@...morp.de
Subject: Re: terminal emulators' processing of escape sequences

On Wed, May 17, 2017 at 12:03 AM, Solar Designer <solar@...nwall.com> wrote:
> Jason, Robert -
>
> On Tue, May 02, 2017 at 12:05:27AM +0200, Robert ??wi??cki wrote:
>> A harmless example from rxvt - pushing back the new-line character:
>>
>> $ echo -ne "\eGQ;"
>> ;$ 0
>> bash: 0: command not found
>
> Does this also affect rxvt-unicode?

It does, actually. I've CCd rxvt-unicode upstream on this in order to
hear their assessment.

Regards,
Jason

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.