diff options
| author | ru <ru@FreeBSD.org> | 1999-06-14 18:46:15 +0000 |
|---|---|---|
| committer | ru <ru@FreeBSD.org> | 1999-06-14 18:46:15 +0000 |
| commit | c3694d985891efb8a156e933600d23132577a053 (patch) | |
| tree | e9eec289712e6aeb26a94332b27bb5ddaf66dc65 | |
| parent | 8ca92b9b9581b23e12a61154d3c58740356dabbe (diff) | |
| download | FreeBSD-src-c3694d985891efb8a156e933600d23132577a053.zip FreeBSD-src-c3694d985891efb8a156e933600d23132577a053.tar.gz | |
It was possible to circumvent telnet's security ``-E'' (no escape at all)
option by running it with ``-8 -E'' and passing it 0xff character.
PR: 6317
Reviewed by: des, David Borman <dab@bsdi.com> (the author)
| -rw-r--r-- | usr.bin/telnet/telnet.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr.bin/telnet/telnet.c b/usr.bin/telnet/telnet.c index da8b0e1..8d2aa87 100644 --- a/usr.bin/telnet/telnet.c +++ b/usr.bin/telnet/telnet.c @@ -1987,7 +1987,7 @@ telsnd() } if ((sc == '\n') || (sc == '\r')) bol = 1; - } else if (sc == escape) { + } else if (escape != _POSIX_VDISABLE && sc == escape) { /* * Double escape is a pass through of a single escape character. */ |
