Re: Fwd: Re: [oss-security] GNU Emacs 25.2 enriched text remote code execution

[Paul Eggert]

On 09/13/2017 07:46 AM, Eli Zaretskii wrote:
> > that if nobody has a better suggestion.
> I only have 21.4, and there the recipe in the 25.3 NEWS works.  Can we
> please see the exact recipe tried in Emacs 21.3 and its results?

I did not reproduce the problem on Solaris 10 sparc, which ships with 
GNU Emacs 21.3 in /opt/sfw/bin/emacs (dated 2006-03-26). I ran the shell 
command "Emacs" from a terminal window, where my ~/.emacs file contained 
only this:

  (eval-after-load "enriched"
      '(defun enriched-decode-display-prop (start end &optional param)
             (list start end)))

which is what is in 25.3 etc/NEWS. Emacs started up fine and the bugfix 
was in place. So perhaps we should leave the NEWS file alone.

It's hard to reproduce the problem on today's GNU/Linux, as these old 
releases no longer build out of the box.