Re: suggestion for checking unicode characters against "trojan source attacks"

[Jérémy Lal <kapouer@melix.org>]

Le lun. 1 nov. 2021 à 21:38, Felix Lechner <felix.lechner@lease-up.com> a écrit :

Dear Jérémy,

On Mon, Nov 1, 2021 at 1:14 PM Jérémy Lal <kapouer@melix.org> wrote:
>
> it seems this python tool does the job:

Looks great. If you can package it, your check may be only a few lines
long, or less. I can help with processing the output in Perl.

i think we can skip the python script since lintian wraps the same kind of behavior.

BTW it comes from https://access.redhat.com/security/vulnerabilities/RHSB-2021-007#diagnostic-tools

and in there we can read this very simple check:

grep -r $'[\u061C\u200E\u200F\u202A\u202B\u202C\u202D\u202E\u2066\u2067\u2068\u2069]'