Warning: Can't synchronize with the repository (Unsupported version control system "svn": "/usr/lib64/libsvn_ra_neon-1.so.0: undefined symbol: svn_compat_wrap_file_rev_handler" ). Look in the Trac log for more information.

Ticket #134 (closed defect: fixed)

Opened 2 years ago

Last modified 21 months ago

Carriage Return in pasted comment/url/music causes Vent server to boot Mangler user

Reported by: x3464 Owned by: ekilfoil
Priority: major Milestone: Mangler 1.2
Component: gui Version: 0.0
Keywords: Cc:

Description

Expected Behaviour: Don't send characters that aren't properly handled. Even if the user pasted them into the field.

Actual Behaviour: Pasting text that contains a carriage return into the "comment/url/music" fields of "Edit"-->"Comment" causes Vent server to boot the Mangler client.

Change History

  Changed 2 years ago by FWishbringer

According to IDA, ventrilo allows:
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~

(there is no linebreak in that, the wiki-formatting wants to use the ; as a place to break the very long line)

  Changed 2 years ago by FWishbringer

it ate it off the first character, space is also allowed

follow-up: ↓ 4   Changed 2 years ago by Haxar

The server will only boot if you have any newlines or returns in any of the three comment fields.

For chat, if the message contains a newline or a return, the server will drop it.

in reply to: ↑ 3   Changed 2 years ago by Haxar

Replying to Haxar:

The server will only boot if you have any newlines or returns in any of the three comment fields.

For chat, if the message contains a newline or a return, the server will drop it.

Actually, it will boot for all control characters except null and maybe also for all non-printable characters.

  Changed 21 months ago by ekilfoil

  • status changed from new to accepted
  • milestone set to Mangler 1.2

  Changed 21 months ago by Haxar

  • status changed from accepted to closed
  • resolution set to fixed

fixed in r835

Note: See TracTickets for help on using tickets.