bugzilla-daemon at mindrot.org
2022-Apr-29 08:38 UTC
[Bug 3427] New: display prompt error when displaying escape charaters
https://bugzilla.mindrot.org/show_bug.cgi?id=3427
Bug ID: 3427
Summary: display prompt error when displaying escape charaters
Product: Portable OpenSSH
Version: 8.6p1
Hardware: All
OS: All
Status: NEW
Severity: trivial
Priority: P5
Component: ssh
Assignee: unassigned-bugs at mindrot.org
Reporter: shizhenzhen at baidu.com
Created attachment 3588
--> https://bugzilla.mindrot.org/attachment.cgi?id=3588&action=edit
display prompt for different versions
The the function conv() is called by a service module to set
pam_message which msg_style is PAM_TEXT_INFO and msg contains escape
characters?such as QR code. In version 8.1p1, display prompt can
display correctly when using the ssh command to login?but?In version
8.6p1, prompt msg show no escape. Display results will be provided in
the attachment.
According to source code analysis, it is caused by function
asmprintf() which is called in line 1942 of file sshconnect2.c
--
You are receiving this mail because:
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2022-Apr-29 09:05 UTC
[Bug 3427] display prompt error when displaying escape charaters
https://bugzilla.mindrot.org/show_bug.cgi?id=3427
Darren Tucker <dtucker at dtucker.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |dtucker at dtucker.net
--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
This was added to prevent a malicious server from conducting preauth
terminal control sequence attacks via this mechanism (while still
allowing valid utf-8).
--
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2022-May-01 23:54 UTC
[Bug 3427] display prompt error when displaying escape charaters
https://bugzilla.mindrot.org/show_bug.cgi?id=3427
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |djm at mindrot.org
--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Note that this still allows through valid UTF-8 encoded unicode
characters, so you could still display QR codes via characters like
https://www.fileformat.info/info/unicode/char/2588/index.htm
Tools like qrencode support this, e.g. "qrencode -t utf8
https://bugzilla.mindrot.org"
--
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2022-May-02 03:03 UTC
[Bug 3427] display prompt error when displaying escape charaters
https://bugzilla.mindrot.org/show_bug.cgi?id=3427 --- Comment #3 from Damien Miller <djm at mindrot.org> --- I forgot to paste the actual QR code generated: ????????????????????????????????????? ????????????????????????????????????? ???? ????? ??? ??? ?? ??? ????? ???? ???? ? ? ???????????? ?? ? ? ???? ???? ????? ? ? ???? ?????? ????? ???? ???????????? ? ????? ??? ???????????? ????? ????? ????? ?? ????? ?????????? ???????????????? ??? ????????? ????? ????????? ????????? ??? ??????????? ???? ? ???????? ? ?????? ??? ? ????? ???????????????????? ???? ??????????? ?????????????????? ?? ??? ????? ???? ??????????????? ???? ?? ??? ? ?????? ???? ????? ??? ????????? ??? ???????? ???? ? ? ?????? ?????? ? ? ?? ????? ???? ????? ???? ?????? ??? ???????? ????????????????????????????????????? ????????????????????????????????????? ????????????????????????????????????? (it might not render perfectly in the browser, some fonts seem to have broken metrics that cause the block character to be wider than whitespace, even for monospace fonts - try changing fonts if it looks broken) -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug.