Bugtraq mailing list archives
feature Re: pine/pico vt control characters bug
From: gvs () AGMAR RU (GvS One)
Date: Sun, 26 Apr 1998 00:20:36 +0400
_\|/_ On Sat, 25 Apr 1998, Michal Zalewski wrote:
Pico, an editor included with pine 3.96 package, handles vt control characters (eg. 0x9B) improperly, so it's possible to do almost anything when normal text file is viewed with pico. Example? Try viewing file containing only two characters: 0x9B and 0x63... That's not all, pico is called by pine when you're replying to mail message. Anyone may insert any control chars (using quoted-printable encoding) to his signature.
Hm... Guessing... Pine: Main Menu -> Setup -> configure, few lines down... [X] Pass-control-characters-as-is ? ... or something like that. Don't you want to try it turned off while reading such message? ;)
Fix: --- display.c.orig Wed Jul 10 18:59:09 1996 +++ display.c Sat Apr 25 14:23:41 1998 @@ -266,7 +266,7 @@ } while ((vtcol&0x07) != 0); } - else if (c.c < 0x20 || c.c == 0x7F) { + else if (c.c < 0x20 || c.c == 0x7F || c.c == 0x9B) { ac.c = '^'; vtputc(ac); ac.c = (c.c ^ 0x40); (should help, at least in above situation)
sorry to bother you, if I'm wrong and you had turned that feature off. If so, and pico's control characters passing algorithm is incomplete, we should fix it to work with termcap/terminfo databases to determine what the characters are treated to be control. SY, Seva Gluschenko, just stranger at the Road. --- IRC: erra * Origin: gone to the Internet (gvs () agmar ru) [http://www.agmar.ru/~gvs/]
Current thread:
- pine/pico vt control characters bug Michal Zalewski (Apr 25)
- Special Report On Buffer Overfolws John Vranesevich (Apr 25)
- pine/pico vt control characters bug [2] Michal Zalewski (Apr 25)
- feature Re: pine/pico vt control characters bug GvS One (Apr 25)
- Re: feature Re: pine/pico vt control characters bug Michal Zalewski (Apr 25)
- Re: feature Re: pine/pico vt control characters bug Matt Barrie (Apr 25)
- Leveraging search engines against Frontpage enabled servers frank darden (Apr 26)
- <Possible follow-ups>
- Re: pine/pico vt control characters bug der Mouse (Apr 25)