Re: gnome-terminal, xfce4-terminal, terminator and others write

看板Bugtraq作者時間14年前 (2012/03/10 02:01), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串2/2 (看更多)
On Tue, 6 Mar 2012, Mark Krenz wrote: > Testing and reproducing the issue: > ----------------------------------------------------------------------- > On Linux, if you want to see this behavior, you can do the following: > > 1. Open one of the affected terminal emulators. > 2. Make sure its scrollback buffer is set to something like 500 or > more so that it saves some of the scrollback. > 3. In the terminal, run: > ls -l /proc/$PPID/fd | grep deleted > If enough data has entered the scrollback buffer, you should start > to see unlinked (deleted) files called /tmp/vte.* > > To see the data that has been logged to /tmp, you use a command like > strings to view the contents of your /tmp partition. If you have a > seperate /tmp partition and its located on /dev/sda2, this could be done > like this: > > strings /dev/sda2 | less While the affected terminal is still running, it is much easier to directly read /proc/PID/fd/NNN files. So, I suspect it can even be possible to see a "live mirror" of a running terminal session (yes, that is possible anyway via ptrace() or /proc/FD/mem, but reading well-known-formatted files is much-much-much easier). _________________________________________ Dmitry Yu. Bolkhovityanov The Budker Institute of Nuclear Physics Novosibirsk, Russia
文章代碼(AID): #1FMaLaSm (Bugtraq)
文章代碼(AID): #1FMaLaSm (Bugtraq)