Re: RFC: Illegal Characters in File Names

[Jan Hudec <bulb@ucw.cz>]

[-- Attachment #1: Type: text/plain, Size: 1718 bytes --]

On Tue, Jul 20, 2004 at 23:13:28 +0100, viro@parcelfarce.linux.theplanet.co.uk wrote:
> On Tue, Jul 20, 2004 at 05:09:41PM -0400, Guy wrote:
> > -----Original Message-----
> > Cut---
> > >> BTW, if your terminal is misconfigured badly enough to feed program
> > output
> > >> back as input, you really ought to fix it, and not just because of
> > ls(1)...
> > 
> > >That means, that the terminal should never respond to any escape
> > >sequences sent to it.
> 
> No, it does not.

Xterm does.

> > So, I guess using a screen editor is out!  No cursor control!  Can't use vi
> > anymore.  Everyone must hack their terminals and/or terminal emulators to
> > play safe with Linux!  You got to be kidding!!!!!!  Wait until Microsoft
> > finds out about this!  Bill will laugh so hard he will shit!
> 
> I'm not quite sure why the last one is of any interest for anybody except
> aforementioned Bill and maybe his proctologist, but anyway.
> 
> You claimed the following:
> 
> "If someone used the above method, they may be able to cause a simple "ll"
> command to cause another program to be run!"
> 
> Mind showing the sequence that would achieve that?

Xterm seems to have several escape sequences that cause data to be sent
back to the program. Only one that seems capable of sending data
affected by user seems to be 'get cursor position' though (\e[6n) and it
will only return an "\e[%i;%iR" (where %i get substitued by the cursor
position -- as decimal numbers).

If any terminal had "get title" sequence, it would be a problem. I think
none has, though.

-------------------------------------------------------------------------------
						 Jan 'Bulb' Hudec <bulb@ucw.cz>

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]