oss-sec mailing list archives
Re: terminal emulators' processing of escape sequences
From: Daniel Kahn Gillmor <dkg () fifthhorseman net>
Date: Wed, 17 May 2017 09:56:27 -0400
On Wed 2017-05-17 12:51:57 +0200, Robert Święcki wrote:
Please consider the following example: $ tail -n1 /etc/hosts | xxd 00000000: 3132 372e 302e 302e 3309 1b47 513b 205a 127.0.0.3..GQ; Z 00000010: 5a5a 0a ZZ. $ ping ZZZ PING ; (127.0.0.3) 56(84) bytes of data. ^[G0 64 bytes from ; (127.0.0.3): icmp_seq=1 ttl=64 time=0.039 ms ^[G0 64 bytes from ; (127.0.0.3): icmp_seq=2 ttl=64 time=0.032 ms ^[G0 ^C --- ; ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1014ms rtt min/avg/max/mdev = 0.032/0.035/0.039/0.006 ms ^[G0 $ 0 bash: 0: command not found
what version of ping are you using? I was unable to replicate this with
either the debian iputils-ping package version 3:20161105-1, or with
debian inetutils-ping package version 2:1.9.4-2+b1. neither of them seem to
do a getnameinfo() at all if it is initially supplied with an IP
address.
That said, with the same last line of /etc/hosts, getent is willing
to pass along the garbage chars:
0 test@host:~$ getent hosts 127.0.0.3
127.0.0.3 ; ZZZ
^[G0
0 test@host:~$ 0
bash: 0: command not found
127 test@host:~$
--dkg
Attachment:
signature.asc
Description:
Current thread:
- Re: terminal emulators' processing of escape sequences, (continued)
- Re: terminal emulators' processing of escape sequences Michal Zalewski (May 01)
- Re: terminal emulators' processing of escape sequences Robert Święcki (May 01)
- Re: terminal emulators' processing of escape sequences Robert Święcki (May 03)
- Re: terminal emulators' processing of escape sequences Solar Designer (May 16)
- Re: terminal emulators' processing of escape sequences Robert Święcki (May 16)
- Re: terminal emulators' processing of escape sequences Yui Hirasawa (May 19)
- Re: terminal emulators' processing of escape sequences Jason A. Donenfeld (May 17)
- Re: terminal emulators' processing of escape sequences Marc Lehmann (May 16)
- Re: terminal emulators' processing of escape sequences Robert Święcki (May 17)
- AW: terminal emulators' processing of escape sequences Fiedler Roman (May 17)
- Re: terminal emulators' processing of escape sequences Daniel Kahn Gillmor (May 17)
- Re: terminal emulators' processing of escape sequences Robert Święcki (May 17)
- Re: terminal emulators' processing of escape sequences Robert Święcki (May 17)
- Re: terminal emulators' processing of escape sequences Daniel Kahn Gillmor (May 18)
- Re: terminal emulators' processing of escape sequences Tavis Ormandy (May 19)
- Re: terminal emulators' processing of escape sequences Robert Święcki (May 01)
- Re: terminal emulators' processing of escape sequences Michal Zalewski (May 01)
- Re: terminal emulators' processing of escape sequences Solar Designer (May 17)
- Re: terminal emulators' processing of escape sequences Marc Lehmann (May 17)
- rxvt-unicode "insecure" setting [Was: terminal emulators' processing of escape sequences] Ian Zimmerman (May 17)
- Re: terminal emulators' processing of escape sequences Dominique Martinet (May 17)
