diff options
| author | Christian Duerr <contact@christianduerr.com> | 2020-11-26 00:00:35 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-11-26 00:00:35 +0000 |
| commit | 86603075dc8fdb481a0c475a740c00fb25c97771 (patch) | |
| tree | 96d3b3cfecdf88f5ac6f5040169c20aeddd6ae69 /codegen | |
| parent | 3cafbadd7e2544b484b75588d8759c9a6081fad8 (diff) | |
| download | r-alacritty-vte-86603075dc8fdb481a0c475a740c00fb25c97771.tar.gz r-alacritty-vte-86603075dc8fdb481a0c475a740c00fb25c97771.tar.bz2 r-alacritty-vte-86603075dc8fdb481a0c475a740c00fb25c97771.zip | |
Reduce the maximum value of CSI parameters
Since limits CSI parameters to be within range of `u16`, rather than
`i64`. This should effectively prevent downstream users from running
into DoS problems with excessively big escape sequence requests. An
example of a problematic escape would be `CSI Ps b` (repeat char).
According to https://vt100.net/emu/dec_ansi_parser, the smallest
possible size limit would be `16383`:
> The VT500 Programmer Information is inconsistent regarding the maximum
> value that a parameter can take. In section 4.3.3.2 of EK-VT520-RM it
> says that “any parameter greater than 9999 (decimal) is set to 9999
> (decimal)”. However, in the description of DECSR (Secure Reset), its
> parameter is allowed to range from 0 to 16383. Because individual
> control functions need to make sure that numeric parameters are within
> specific limits, the supported maximum is not critical, but it must be
> at least 16383.
Diffstat (limited to 'codegen')
0 files changed, 0 insertions, 0 deletions