View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001591 | unreal | ircd | public | 2004-02-25 14:30 | 2004-03-04 15:02 |
| Reporter | doh | Assigned To | |||
| Priority | normal | Severity | crash | Reproducibility | always |
| Status | closed | Resolution | open | ||
| Product Version | 3.2-RC1 | ||||
| Summary | 0001591: crash on rehash with remote includes | ||||
| Description | .... As a note, im using http passworded remote include.. but i guess thats unrelated? | ||||
| Steps To Reproduce | /rehash when the server is running | ||||
| Additional Information | It loads up fine.. but /rehash kills it | ||||
| 3rd party modules | |||||
|
|
Do you have any "strange" characters in the url? like things other than a-z A-Z ./ For example Joolz (0001587) also reported a crash with an url like http://URL.REMOVED/servers/retrieve.php?user=REMOVED&pass=REMOVED&file=badwords.conf |
|
|
more specific, do you have any '?'s (questionmarks) in your url? |
|
|
It should have generated a wircd.*.core file, can you please include that? Also, I'm assuming since you say this is a CVS version that you compiled it yourself? If so some more specifics would be useful. Did you compile with SSL support? Ziplinks support? What version of libcurl did you use? Did you compile libcurl with ares support? (note, if you just downloaded libcurl off the curl.haxx.se website, it does not have ares support and therefore will not work with Unreal). What version of c-ares/arescurl did you use? What features in libcurl did you enable (SSL, SPNEGO, LDAP, kerberos4, GSSAPI, etc.)? |
|
|
Sorry for not being more specific.. The version i used is the one downloadable at vulnscan.org (which has curl+zip+ssl). The remote include i tried to include was in the syntax: http://user:[email protected]/Folder/network.file no weird letters or anything like that (maybe except the @ and : ) codmastr: yes i think it generated (two?) core dumps.. can i attach them somewhere without giving sensitive information to everyone? |
|
|
Could you send the wircd.<somenumber>.mdmp file (preferably zipped) to me at [email protected]? |
|
|
Traced the bug, fixed in CVS (.2157). A new win cvs build is also available. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2004-02-25 14:30 | doh | New Issue | |
| 2004-02-25 15:55 | syzop | Note Added: 0005197 | |
| 2004-02-25 16:33 | syzop | Note Added: 0005200 | |
| 2004-02-25 16:38 |
|
Note Added: 0005204 | |
| 2004-02-25 17:28 | doh | Note Added: 0005209 | |
| 2004-02-25 17:34 | syzop | Note Added: 0005210 | |
| 2004-03-04 15:02 | syzop | Status | new => closed |
| 2004-03-04 15:02 | syzop | Note Added: 0005294 |