[Pidgin] #11347: irc.freenode.net nickserv passwords containing the colon (:) character, specified in the account settings, are improperly escaped

Pidgin trac at pidgin.im
Thu Feb 11 11:27:26 EST 2010


#11347: irc.freenode.net nickserv passwords containing the colon (:) character,
specified in the account settings, are improperly escaped
-----------------------------------------+----------------------------------
 Reporter:  graphiclunarkid              |        Owner:  elb    
     Type:  defect                       |       Status:  pending
Milestone:                               |    Component:  IRC    
  Version:  2.6.5                        |   Resolution:         
 Keywords:  irc password nickserv colon  |  
-----------------------------------------+----------------------------------
Changes (by elb):

  * status:  new => pending


Comment:

 Does the password in question by any chance have the colon as the *first*
 character?

 This almost certainly ''is'' an escaping problem, but probably not how you
 think.  When an argument to an IRC command starts with a colon, the colon
 is removed and the rest of the line is considered part of this final
 argument even if it contains whitespace.

 The account dialog box does not contain a nickserv username and password,
 it contains a server password.  It just so happens that freenode uses this
 password in authentication to !NickServ if appropriate.  This is a
 nonstandard behavior (!NickServ being nonstandard).  PRIVMSG commands
 (which are used when you message !NickServ directly to authenticate) are
 already colon arguments, so this bug does not occur.

 If you can confirm that the colon in this case is the first character of
 the password, we can try escaping the password field with a colon.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/11347#comment:1>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list