1 files changed, 27 insertions, 0 deletions
diff --git a/tests/term_test.c b/tests/term_test.c
index 7b531b1..51544ef 100644
--- a/tests/term_test.c
+++ b/tests/term_test.c
@@ -1534,6 +1534,32 @@ static void test_string_payloads(void)
     }
 }
 
+/* term_new() refuses a name that a DCS reply could echo unsafely. */
+static void test_host_name_rejected(void)
+{
+    static const char *const bad[] = {
+        "\033x", "a\tb", "\177", "\300", "a\nb",
+    };
+    char longest[65];
+    memset(longest, 'a', 64);
+    longest[64] = 0;
+    char fits[64];
+    memset(fits, 'b', 63);
+    fits[63] = 0;
+
+    for (size_t i = 0; i < sizeof(bad) / sizeof(bad[0]); i++) {
+        struct term_options opt = { .size = { .x = 10, .y = 3 }, .name = bad[i] };
+        assert(!term_new(&opt));
+    }
+    struct term_options opt = { .size = { .x = 10, .y = 3 }, .name = longest };
+    assert(!term_new(&opt));
+
+    opt.name = fits;
+    struct term *t = term_new(&opt);
+    assert(t);
+    term_free(t);
+}
+
 static void test_newline_policy_survives_reset(void)
 {
     static const char *const resets[] = { "\033c", "\033[!p", "\033[20l" };
@@ -1932,6 +1958,7 @@ int main(void)
     test_snapshot_follows_new_terminal();
     test_snapshot_null_and_range();
     test_bulk_rows_survive_edits();
+    test_host_name_rejected();
 
     assert(!strcmp(UNICODE_DATA_VERSION, "18.0.0"));
     assert(!strcmp(term_unicode_version(), UNICODE_DATA_VERSION));