problem was introduced with the fix for BUG91453 where the default was changed so that allowWindowOps was false as shown by : # resize COLUMNS=80; LINES=24; export COLUMNS LINES; # resize -s 25 80 resize: unknown character, exiting. Reproducible: Always Steps to Reproduce: 1.xterm 2.resize -s 25 80 3. Actual Results: an obscure error shown Expected Results: window resized or a clear explanation of why it didn't work which doesn't require digging into the sources the security problems that required the ebuild fix were put in place because of a user assisted exploit which abused the title modification, resizing was disabled as a side effect. the default in Debian/Ubuntu, Fedora/RedHat and upstream is to have this option enabled by default as the fix for the specific attack path used was fixed upstream in version 218
I can verify this. Same behavior here.
resizing (and moving the window around) are disabled when allowWindowOps is false for the obvious reason (anything that would prevent a user from accessing the window). The "resize" program would normally send back a timeout message; but for the case shown, is seeing an unexpected escape sequence reply. Either way, it's handling the error - it's not going to print out the unexpected escape sequence (though for debugging, it might be nice to print a sanitized version of it).
Am I reading this correctly that this is a "feature" or a "setting", not a bug?
yes - it's something that the user can override. Depending on how it's packaged, it might be awkward (for instance if the packager has set a too-specific pattern for the resource value).
(In reply to comment #4) > yes - it's something that the user can override. > > Depending on how it's packaged, it might be awkward > (for instance if the packager has set a too-specific > pattern for the resource value). > /usr/share/X11/app-defaults/XTerm has *allowWindowOps: false And our ebuild tells at the end (elog) following, elog "bracketed paste mode requires the allowWindowOps resource to be true" elog "which is false by default for security reasons (see bug #91453)." elog "To be able to use it add 'allowWindowOps: true' to your resources" That was previously behind USE flag called "paste64" but that flag is gone, I believe because we don't change the upstreams (yours I assume :-) setting for it that ./configure passes to the build.. which I assume enables it by default. So.. I don't see what we should change here.. closing..
