[Pidgin] #12170: Pidgin repeatedly disconnects from jabber, if there're messages containing  in a conference
Pidgin
trac at pidgin.im
Mon Jun 14 19:44:26 EDT 2010
#12170: Pidgin repeatedly disconnects from jabber, if there're messages containing
in a conference
----------------------------------------------------+-----------------------
Reporter: sergem | Owner: deryni
Type: defect | Status: new
Component: XMPP | Version: 2.7.0
Keywords: xmpp jabber disconnect chat conference |
----------------------------------------------------+-----------------------
Recently I've got under the casual DoS attack in jabber conference, when
one of participants pasted a message, that contained in its body.
Steps to reproduce an attack:[[BR]]
1. Connect to Jabber/XMPP conference with i.e. psi[[BR]]
2. Paste and send a buffer, that contains ASCII char 1[[BR]]
3. See all libpurple clients disconnected
If the conference sends last messages after the reconnect (as most do), no
pidgin is able to connect to this conference any more. I suppose the
attack can be done in many other way (by setting a conference title or
status message with similar character, or just sending a private message).
That time I had to find a fast solution, and I found one. Attached patch
skips all such messages, that cause disconnects. I tested it for a few
weeks already.
It is not perfect but it works. Feel free to make any suggestions.
--
Ticket URL: <http://developer.pidgin.im/ticket/12170>
Pidgin <http://pidgin.im>
Pidgin
More information about the Tracker
mailing list