[Telepathy] [Bug 15384] New: telepathy-gabble allows sending characters that will get you disconnected from the XMPP service

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Mon Apr 7 04:53:50 PDT 2008


http://bugs.freedesktop.org/show_bug.cgi?id=15384

           Summary: telepathy-gabble allows sending characters that will get
                    you disconnected from the XMPP service
           Product: Telepathy
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: telepathy-gabble
        AssignedTo: telepathy at lists.freedesktop.org
        ReportedBy: leio at gentoo.org


I copy pasted to someone a line from gnome-terminal that contained characters
below 0x32 character values and sent it off with empathy. After that I got
disconnected from my jabber server immediately and the message didn't go
through.

The line tries was basically
./appname: line 1: <0x7F>ELF<0x02><0x01><0x01><0x02>: not found

Where <0xnn> was the actual character (rendered with 00nn in a box by pango).

on #telepathy people told that these characters shouldn't be allowed to be sent
at all and Send() should reject it or filter them out or replace with
something.

For example:
<smcv> (reject / replace with <0xfoo> / replace with spaces / delete would seem
to be the vaguely sane possibilities)

It might be useful for there to be a way for advanced client applications to
know something was done, to report it for the user.


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the Telepathy mailing list