summaryrefslogtreecommitdiffstats
path: root/usr.bin/telnet
diff options
context:
space:
mode:
authorru <ru@FreeBSD.org>1999-06-14 18:46:15 +0000
committerru <ru@FreeBSD.org>1999-06-14 18:46:15 +0000
commitc3694d985891efb8a156e933600d23132577a053 (patch)
treee9eec289712e6aeb26a94332b27bb5ddaf66dc65 /usr.bin/telnet
parent8ca92b9b9581b23e12a61154d3c58740356dabbe (diff)
downloadFreeBSD-src-c3694d985891efb8a156e933600d23132577a053.zip
FreeBSD-src-c3694d985891efb8a156e933600d23132577a053.tar.gz
It was possible to circumvent telnet's security ``-E'' (no escape at all)
option by running it with ``-8 -E'' and passing it 0xff character. PR: 6317 Reviewed by: des, David Borman <dab@bsdi.com> (the author)
Diffstat (limited to 'usr.bin/telnet')
-rw-r--r--usr.bin/telnet/telnet.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/usr.bin/telnet/telnet.c b/usr.bin/telnet/telnet.c
index da8b0e1..8d2aa87 100644
--- a/usr.bin/telnet/telnet.c
+++ b/usr.bin/telnet/telnet.c
@@ -1987,7 +1987,7 @@ telsnd()
}
if ((sc == '\n') || (sc == '\r'))
bol = 1;
- } else if (sc == escape) {
+ } else if (escape != _POSIX_VDISABLE && sc == escape) {
/*
* Double escape is a pass through of a single escape character.
*/
OpenPOWER on IntegriCloud