From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jan Hudec Subject: Re: RFC: Illegal Characters in File Names Date: Wed, 21 Jul 2004 00:44:46 +0200 Sender: linux-fsdevel-owner@vger.kernel.org Message-ID: <20040720224446.GS3227@vagabond> References: <20040720205733.GN3227@vagabond> <200407202109.i6KL9f318138@watkins-home.com> <20040720221328.GH12308@parcelfarce.linux.theplanet.co.uk> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="Bi+HF1AHjw0mn3zx" Cc: Guy , 'Bryan Henderson' , linux-fsdevel@vger.kernel.org, "'Joseph D. Wagner'" Return-path: Received: from cimice4.lam.cz ([212.71.168.94]:26280 "EHLO vagabond.light.src") by vger.kernel.org with ESMTP id S266358AbUGTWo5 (ORCPT ); Tue, 20 Jul 2004 18:44:57 -0400 To: viro@parcelfarce.linux.theplanet.co.uk Content-Disposition: inline In-Reply-To: <20040720221328.GH12308@parcelfarce.linux.theplanet.co.uk> List-Id: linux-fsdevel.vger.kernel.org --Bi+HF1AHjw0mn3zx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jul 20, 2004 at 23:13:28 +0100, viro@parcelfarce.linux.theplanet.co= =2Euk wrote: > On Tue, Jul 20, 2004 at 05:09:41PM -0400, Guy wrote: > > -----Original Message----- > > Cut--- > > >> BTW, if your terminal is misconfigured badly enough to feed program > > output > > >> back as input, you really ought to fix it, and not just because of > > ls(1)... > >=20 > > >That means, that the terminal should never respond to any escape > > >sequences sent to it. >=20 > No, it does not. Xterm does. > > So, I guess using a screen editor is out! No cursor control! Can't us= e vi > > anymore. Everyone must hack their terminals and/or terminal emulators = to > > play safe with Linux! You got to be kidding!!!!!! Wait until Microsoft > > finds out about this! Bill will laugh so hard he will shit! >=20 > I'm not quite sure why the last one is of any interest for anybody except > aforementioned Bill and maybe his proctologist, but anyway. >=20 > You claimed the following: >=20 > "If someone used the above method, they may be able to cause a simple "ll" > command to cause another program to be run!" >=20 > Mind showing the sequence that would achieve that? Xterm seems to have several escape sequences that cause data to be sent back to the program. Only one that seems capable of sending data affected by user seems to be 'get cursor position' though (\e[6n) and it will only return an "\e[%i;%iR" (where %i get substitued by the cursor position -- as decimal numbers). If any terminal had "get title" sequence, it would be a problem. I think none has, though. ---------------------------------------------------------------------------= ---- Jan 'Bulb' Hudec --Bi+HF1AHjw0mn3zx Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFA/aBeRel1vVwhjGURAiuHAJwNNhYJcFrZicQVHgJrgAtX+q8SWQCg4Spu 90Uc3GELogafvN+sGPTlweY= =6ok/ -----END PGP SIGNATURE----- --Bi+HF1AHjw0mn3zx--