View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0003688unrealircdpublic2008-05-01 10:582008-05-01 14:06
Reporterniek Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionwont fix 
Product Version3.2.7 
Summary0003688: The IRCd crashes on "WHO" command.
DescriptionWhen I connect to the IRCd server, and act like a real server, and then call a WHO command, the whole IRCd just crashes.

I know a server shouldn't do any types of WHO/WHOIS commands, but I just tried it.

I don't know if this could be a security issue, but I think the server should just ignore my WHO (just like it ignore's my WHOIS).
Steps To Reproduceopen a telnet connection to your Unreal server
(my CentOS it's this):
telnet irc.<myhost>.net 6667

>> PASS :MySecretPassword
>> SERVER services.<myhost>.net 1 :blah.
<< <a lot of data>
<< <a lot of data>
>> WHO AnyNickname
[CRASH]
3rd party modules

Relationships

duplicate of 0003584 closed Crash when 'who' command was sent by a linked server 
duplicate of 0003211 closed Server Crash on WHO from another server 
duplicate of 0002807 closed When a server sends a who command the ircd crashes 

Activities

w00t

2008-05-01 11:11

reporter   ~0015289

0003584

Stealth

2008-05-01 14:06

reporter   ~0015290

This is pretty much intentional. We do not have syntax checking between servers to make links operate faster, and this is why we tell people not to do stupid things like this (and OperServ RAW).

This will not be fixed. I'm sure you can find more information in the duplicates.

Issue History

Date Modified Username Field Change
2008-05-01 10:58 niek New Issue
2008-05-01 11:11 w00t Note Added: 0015289
2008-05-01 14:00 Stealth Relationship added duplicate of 0003584
2008-05-01 14:01 Stealth Relationship added related to 0003211
2008-05-01 14:02 Stealth Relationship deleted related to 0003211
2008-05-01 14:02 Stealth Relationship added duplicate of 0003211
2008-05-01 14:02 Stealth Relationship added duplicate of 0002807
2008-05-01 14:06 Stealth QA => Not touched yet by developer
2008-05-01 14:06 Stealth U4: Need for upstream patch => No need for upstream InspIRCd patch
2008-05-01 14:06 Stealth Status new => closed
2008-05-01 14:06 Stealth Note Added: 0015290
2008-05-01 14:06 Stealth Resolution open => wont fix