From 14d1b3bd36f25f3fbcab7f38cc51111b130e3a93 Mon Sep 17 00:00:00 2001 From: Benno Schulenberg Date: Wed, 10 Feb 2016 15:06:45 +0000 Subject: [PATCH] Allowing only control sequences in the proper range to be rebound. This fixes Savannah bug #47025. git-svn-id: svn://svn.savannah.gnu.org/nano/trunk/nano@5625 35c25a1d-7b9e-4130-9fde-d3aeb78583b8 --- ChangeLog | 2 ++ src/rcfile.c | 3 +++ 2 files changed, 5 insertions(+) diff --git a/ChangeLog b/ChangeLog index dc46d976..7d4e5688 100644 --- a/ChangeLog +++ b/ChangeLog @@ -3,6 +3,8 @@ continuing after a discard. This fixes Savannah bug #47104. * src/files.c (get_full_path): Plug a sneaky memory leak. This fixes Savannah bug #47003 reported and solved by Mike Frysinger. + * src/rcfile.c (parse_binding): Allow only control sequences in the + proper range to be rebound. This fixes Savannah bug #47025. 2016-02-09 Benno Schulenberg * src/files.c (stat_with_alloc, open_buffer, write_file): Check the diff --git a/src/rcfile.c b/src/rcfile.c index 05bf90ab..785cd901 100644 --- a/src/rcfile.c +++ b/src/rcfile.c @@ -452,6 +452,9 @@ void parse_binding(char *ptr, bool dobind) else if (keycopy[0] != '^' && keycopy[0] != 'M' && keycopy[0] != 'F') { rcfile_error(N_("Key name must begin with \"^\", \"M\", or \"F\"")); goto free_copy; + } else if (keycopy[0] == '^' && (keycopy[1] < 64 || keycopy[1] > 127)) { + rcfile_error(N_("Key name %s is invalid"), keycopy); + goto free_copy; } if (dobind) {