ayo/kitty
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Do not echo invalid DECRQSS queries back, behavior inherited from xterm (CVE-2008-2383)

Browse source 
Reported by David Leadbeater.
This commit is contained in:
Kovid Goyal 2023-07-05 09:48:02 +05:30
parent 2fec9b372b
commit 60a7a53ccd
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C
2 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
docs/changelog.rst
View file

@ -87,6 +87,8 @@ Detailed list of changes
- macOS: Fix window shadows not being drawn for transparent windows (:iss:`2827`, :pull:`6416`)
- Do not echo invalid DECRQSS queries back, behavior inherited from xterm (CVE-2008-2383)
0.28.1 [2023-04-21]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2
kitty/screen.c
View file

@ -2192,7 +2192,7 @@ screen_request_capabilities(Screen *self, char c, PyObject *q) {
} else if (strcmp("r", query) == 0) {
shape = snprintf(buf, sizeof(buf), "1$r%u;%ur", self->margin_top + 1, self->margin_bottom + 1);
} else {
shape = snprintf(buf, sizeof(buf), "0$r%s", query);
shape = snprintf(buf, sizeof(buf), "0$r");
}
if (shape > 0) write_escape_code_to_child(self, DCS, buf);
break;