[Pidgin] #12170: Pidgin repeatedly disconnects from jabber, if there're messages containing  in a conference

Pidgin trac at pidgin.im
Mon Jun 14 19:44:26 EDT 2010


#12170: Pidgin repeatedly disconnects from jabber, if there're messages containing
 in a conference
----------------------------------------------------+-----------------------
 Reporter:  sergem                                  |     Owner:  deryni
     Type:  defect                                  |    Status:  new   
Component:  XMPP                                    |   Version:  2.7.0 
 Keywords:  xmpp jabber disconnect chat conference  |  
----------------------------------------------------+-----------------------
 Recently I've got under the casual DoS attack in jabber conference, when
 one of participants pasted a message, that contained  in its body.

 Steps to reproduce an attack:[[BR]]
 1. Connect to Jabber/XMPP conference with i.e. psi[[BR]]
 2. Paste and send a buffer, that contains ASCII char 1[[BR]]
 3. See all libpurple clients disconnected

 If the conference sends last messages after the reconnect (as most do), no
 pidgin is able to connect to this conference any more. I suppose the
 attack can be done in many other way (by setting a conference title or
 status message with similar character, or just sending a private message).

 That time I had to find a fast solution, and I found one. Attached patch
 skips all such messages, that cause disconnects. I tested it for a few
 weeks already.

 It is not perfect but it works. Feel free to make any suggestions.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/12170>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list