Thread overview
[Issue 22495] SECURITY: unicode directionality overrides should be rejected
Nov 08, 2021
Walter Bright
Nov 15, 2021
Iain Buclaw
Oct 13, 2022
Dlang Bot
Oct 28, 2022
Dlang Bot
Nov 01, 2022
Dlang Bot
Nov 01, 2022
Dlang Bot
Jan 10, 2023
Iain Buclaw
November 08, 2021
https://issues.dlang.org/show_bug.cgi?id=22495

Walter Bright <bugzilla@digitalmars.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://issues.dlang.org/sh
                   |                            |ow_bug.cgi?id=22465

--
November 15, 2021
https://issues.dlang.org/show_bug.cgi?id=22495

Iain Buclaw <ibuclaw@gdcproject.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |accepts-invalid
                 CC|                            |ibuclaw@gdcproject.org

--- Comment #1 from Iain Buclaw <ibuclaw@gdcproject.org> ---
Posted pull request on the github repo with more appropriate tests here: https://github.com/nickboucher/trojan-source/pull/16

Also noted what works, what doesn't.

--
October 13, 2022
https://issues.dlang.org/show_bug.cgi?id=22495

--- Comment #2 from Dlang Bot <dlang-bot@dlang.rocks> ---
@dukc updated dlang/dmd pull request #14538 "Fix security issue 22495" mentioning this issue:

- Fix security issue 22495 - unicode bidirectional controls should be forbidden.

https://github.com/dlang/dmd/pull/14538

--
October 28, 2022
https://issues.dlang.org/show_bug.cgi?id=22495

--- Comment #3 from Dlang Bot <dlang-bot@dlang.rocks> ---
dlang/dmd pull request #14538 "Fix security issue 22495" was merged into stable:

- dadb7fd66e9c434ccec733b40cbd5e0704ecde2a by Ate Eskola:
  Fix security issue 22495 - unicode bidirectional controls should be
forbidden.

https://github.com/dlang/dmd/pull/14538

--
November 01, 2022
https://issues.dlang.org/show_bug.cgi?id=22495

--- Comment #4 from Dlang Bot <dlang-bot@dlang.rocks> ---
@ibuclaw created dlang/dmd pull request #14609 "merge stable" mentioning this issue:

- Fix security issue 22495 (#14538)

  Fix security issue 22495 - unicode bidirectional controls should be
forbidden.

https://github.com/dlang/dmd/pull/14609

--
November 01, 2022
https://issues.dlang.org/show_bug.cgi?id=22495

--- Comment #5 from Dlang Bot <dlang-bot@dlang.rocks> ---
dlang/dmd pull request #14609 "merge stable" was merged into master:

- a658f02da91b50fe73bb832c793a273abfd93aa9 by Ate Eskola:
  Fix security issue 22495 (#14538)

  Fix security issue 22495 - unicode bidirectional controls should be
forbidden.

https://github.com/dlang/dmd/pull/14609

--
January 10, 2023
https://issues.dlang.org/show_bug.cgi?id=22495

Iain Buclaw <ibuclaw@gdcproject.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #6 from Iain Buclaw <ibuclaw@gdcproject.org> ---
This was fixed.

--