From: Michael R Sweet <msweet@msweet.org>
Date: Thu, 30 Jul 2026 23:12:43 +0000 (-0400)
Subject: Block all control chars in PPD localization strings.
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=989cfca122a4299bfca0f33ff6529c1710aba9e3;p=thirdparty%2Fcups.git

Block all control chars in PPD localization strings.
---

diff --git a/cups/ppd-cache.c b/cups/ppd-cache.c
index acb7fc351c..fcbac0921f 100644
--- a/cups/ppd-cache.c
+++ b/cups/ppd-cache.c
@@ -5665,7 +5665,7 @@ ppd_put_strings(cups_file_t *fp,	/* I - PPD file */
     {
       // Add the first line of localized text...
       cupsFilePrintf(fp, "*%s.%s %s/", lang->language, ppd_option, ppd_choice);
-      while (*text && *text != '\n')
+      while (*text && (*text & 255) >= ' ')
       {
         // Escape ":" and "<"...
         if (*text == ':' || *text == '<')