Package: screen
Version: 4.0.3-13

Hi,

If you run screen, set a caption with e.g. ':caption always lol', and resize the window containing it to 1 line tall, the SCREEN process segfaults in MClearArea() with the 'ye' argument set to -1, which causes an out-of-bounds array access. So, even if you resize your terminal temporarily to one line tall and drag it back before letting go, screen will have crashed (losing any processes inside it).

The same crash happens if you have a hardstatus line, e.g., ':hardstatus alwayslastline'.

Revertiing debian/patches/01CVS.patch's change to resize.c fixes this bug. In particular, the patch gets rid of special cases for (D_has_hstatus == HSTATUS_LASTLINE) and (captionalways) and getting rid of at least the hardstatus line if necessary, and replaces it with shorter code that assumes you can always subtract one line each for the caption and hardstatus if they exist.

That said, the NEWS file says just "buffer overflow in resize.c fixed", so if that's the reason for the rewrite, going to the old version might only trade one bug for another.

--
Geoffrey Thomas
geo...@mit.edu



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to