[Bug 202540] libteken assert() fail on teken.c line 231

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=202540

--- Comment #4 from Ed Schouten <ed at FreeBSD.org> ---
Exactly. In stable these are not enabled.

Though I agree that these issues are pretty bad, we usually treat the console
as something that only trusted people can access. As far as I know, there isn't
a way to print arbitrary, unescaped data on one of vt(4)'s windows without
having a local login session.

Earlier this year we wrote an erratum for something similar: a bad ioctl() call
on vt(4) that could cause the system to crash.

https://www.freebsd.org/security/advisories/FreeBSD-EN-15:01.vt.asc

-- 
You are receiving this mail because:
You are the assignee for the bug.