Ticket #1223 (new defect)

Opened 6 months ago

Colloquy crashes on malformed DCC request

Reported by: LjL Assigned to: timothy
Priority: highest Component: Colloquy (GUI)
Version: Latest 2.1 Severity: major
Keywords: DCC exploit Cc:

Description

Sending a command such as /CTCP nickname-using-Colloquy DCC SEND aaaaaaaaaaaaaaaaaaaaaa causes Colloquy to disconnect and close (with the server giving a "Remote closed the connection" quit message) - at least if the DCC request is accepted by the user.

(The string used as example is the kind of string that triggers a well-known bug in some routers, but the Colloquy-specific problem has been tested to be unrelated to that)