[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

suggestion for checking unicode characters against "trojan source attacks"



Hi,

the topic is about CVE-2021-42574 and CVE-2021-42694.
Some unicode control characters, bidirectional characters, are dangerous
in source code files because they can allow one to reorder source code tokens.

I wonder if lintian is already doing that kind of check, and if not, it seems to be
a good idea for lintian to check the presence of those nasty characters.

Jérémy


Reply to: