Date: Wed, 14 May 2008 16:43:25 +0200
From: Nico Golde <oss-security+ml@...lde.de>
To: oss-security@...ts.openwall.com
Subject: Re: Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution

Hi Sven,
* Sven Joachim <svenjoac@....de> [2008-05-14 16:12]:
> On 2008-05-14 15:27 +0200, Nico Golde wrote:
> > As I am a vim user I might have done something wrong too, 
> > not sure. What I did after installing emacs:
> > cat >> ~/.emacs << EOF
> > (global-font-lock-mode t)
> > (seq font-lock-support-mode 'fast-lock-mode)
> > EOF
> 
> Should read setq, not seq.  You will also need to load fast-lock
> explicitly before that, since it's obsolete and not automatically
> loaded anymore:

Where is the difference? seq was from:
http://lists.gnu.org/archive/html/emacs-devel/2008-05/msg00645.html

> (load-library "fast-lock")
> 
> > cat >> foobar.c << EOF
> > /* no comment */
> > EOF
> >
> > cat >> foobar.c.flc << EOF
> > " foobar "
> > EOF
> 
> Instead of " foobar ", you can put in the following which actually does
> something visible:
> 
> (message "Surprise, surprise!")

Thanks, missed the (message...)

> This string will be put in the echo area when you visit foobar.c.

Confirmed, works now as expected, not confirmation dialog though.
Nico
-- 
Nico Golde - http://www.ngolde.de - nion@...ber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ