[systemd-bugs] [Bug 89040] journal export allows field injection

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=89040

Zbigniew Jedrzejewski-Szmek <zbyszek at in.waw.pl> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |INVALID

--- Comment #1 from Zbigniew Jedrzejewski-Szmek <zbyszek at in.waw.pl> ---
Actually, utf8_is_printable_newline is invoked with false as the last argument,
so it does not accept newlines. Running your example gives me:

_TRANSPORT=journal
...
MESSAGE
^S^@^@^@^@^@^@^@MESSAGE=bar
_UID=99
...

The field is exported as binary.

I adjusted the specification to allow non-control utf-8 characters, apart from
the newline.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20150214/7b10f57f/attachment.html>