Limit REP to 64k. See email with subject line 'Minor iTerm 2 DoS'

gnachman · gnachman · commit 438fe6000b7d · 2022-10-04T09:09:43.000-07:00
diff --git a/sources/VT100Terminal.m b/sources/VT100Terminal.m
@@ -2490,7 +2490,7 @@ - (void)reallyExecuteToken:(VT100Token *)token {
             break;
 
         case VT100CSI_REP:
-            [_delegate terminalRepeatPreviousCharacter:token.csi->p[0]];
+            [_delegate terminalRepeatPreviousCharacter:MIN(65535, token.csi->p[0])];
             break;
 
         case VT100CSI_DECRQPSR:
