[Bug 2434] scp can send arbitrary control characters / escape sequences to the terminal

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Jul 28 01:47:08 AEST 2015


https://bugzilla.mindrot.org/show_bug.cgi?id=2434

Jakub Jelen <jjelen at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jjelen at redhat.com

--- Comment #1 from Jakub Jelen <jjelen at redhat.com> ---
Created attachment 2678
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2678&action=edit
similar fix as escaping banner message

Just fast note. This is evaluated only in progressmeter, where it is
printed out not-escaped, but only control characters for terminal.

The issue can be fixed by this simple patch, quite similar way as the
banner is printed out. Patch may require some more handling of
allocated memory. But here is the basic idea.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list