Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 17 May 2017 00:16:28 +0200
From: Dominique Martinet <asmadeus@...ewreck.org>
To: oss-security@...ts.openwall.com
Subject: Re: terminal emulators' processing of escape sequences

Solar Designer wrote on Wed, May 17, 2017:
> On Tue, May 02, 2017 at 12:05:27AM +0200, Robert ??wi??cki wrote:
> > A harmless example from rxvt - pushing back the new-line character:
> > 
> > $ echo -ne "\eGQ;"
> > ;$ 0
> > bash: 0: command not found
> 
> Does this also affect rxvt-unicode?

Yes (at least on rxvt-unicode 9.21 and 9.22)

Actually, on rxvt 2.7.10 this will try to execute the command '1'
instead so I'd wager they meant urxvt from the start... But both are
similarily affected anyhow.

-- 
Dominique Martinet

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.