Pango development

Owen Taylor otaylor at redhat.com
Tue Mar 2 02:18:46 UTC 2004


On Mon, 2004-03-01 at 16:48, Alan Cox wrote:
> On Tue, Mar 02, 2004 at 12:09:41AM +0300, Kir Kolyshkin wrote:
> > I see the same bugs with gnome-terminal 2.5 (and therefore added the 
> > appropriate comment to your bug). Probably this is the same bug as this one:
> > http://bugzilla.gnome.org/show_bug.cgi?id=131336
> 
> Unless we know what the cause is and if its involving parsing data
> provided by external programs I'd mark this bug 'security' as it could
> enable DoS text files, file names and/or worse if its a bug of that 
> kind

I'm pretty sure it's a "read-off-the-end" bug rather than a
"write-off-the-end" bug, so "worse" is unlikely. But yes, you
probably could trigger it with a really long weird web page
title that 'elinks' makes the terminal title.

Regards,
					Owen






More information about the fedora-devel-list mailing list