[Linuxdcpp-team] [Bug 2071439] Re: Long and continous chat messages are not displayed at all or getting truncated in some cases.

2024-08-21 Thread RoLex
Exactly: [18:26] <[-dcpp-]-rolex> !ulog tag ++ 500 66999: Buffer overflow -- You received this bug notification because you are a member of Dcplusplus-team, which is subscribed to DC++. https://bugs.launchpad.net/bugs/2071439 Title: Long and continous chat messages are not displayed

[Linuxdcpp-team] [Bug 2071439] Re: Long and continous chat messages are not displayed at all or getting truncated in some cases.

2024-08-21 Thread RoLex
Actually there are a few wild examples. One of them is !seen command in Verlihub + Ledokol: [18:02:38] !seen nick rolex [18:02:38] <# Охрана> Looking for users with nick rolex on: https://te-home.net/?do=hublist [18:02:38] <# Охрана> Users with nick rolex found in following hubs:

[Linuxdcpp-team] [Bug 2047732] Re: [PoC] RCE in ScriptPlugin 1.0

2024-01-02 Thread RoLex
My suggestion then is to add bit32_compat.lua to scripts repository, define global "bit32" table in there and push those missing functions in there > bit32 = {} bit32["lrotate"] = function(x, n) x = x % 2^32 * 2^n local r = x % 2^32 return r + (x - r) / 2^32 end bit32["rrotate"] = function(x, n)

[Linuxdcpp-team] [Bug 2047732] Re: [PoC] RCE in ScriptPlugin 1.0

2024-01-02 Thread RoLex
Module bit32 has been deprecated since first release of Lua 5.3 > https://www.lua.org/manual/5.3/manual.html#8.2 It's even stated in code that you assigned to ScriptPlugin last time > https://sourceforge.net/p/dcnetwork/code/ci/default/tree/trunk/dc- plugins/ScriptPlugin/lua/lbitlib.c#l227 -- Yo

[Linuxdcpp-team] [Bug 2047732] Re: [PoC] RCE in ScriptPlugin 1.0

2024-01-02 Thread RoLex
Whole lbitlib.c is written under this block > #if defined(LUA_COMPAT_BITLIB) -- You received this bug notification because you are a member of Dcplusplus-team, which is subscribed to DC++. https://bugs.launchpad.net/bugs/2047732 Title: [PoC] RCE in ScriptPlugin 1.0 Status in DC++: New Statu

[Linuxdcpp-team] [Bug 2047732] Re: [PoC] RCE in ScriptPlugin 1.0

2024-01-01 Thread RoLex
Lua didn't remove bitlib, it's provided via math module instead. -- You received this bug notification because you are a member of Dcplusplus-team, which is subscribed to DC++. https://bugs.launchpad.net/bugs/2047732 Title: [PoC] RCE in ScriptPlugin 1.0 Status in DC++: New Status in DC++ pl

[Linuxdcpp-team] [Bug 2047732] Re: [PoC] RCE in ScriptPlugin 1.0

2023-12-30 Thread RoLex
** Also affects: dcpp-plugin-sdk-cpp Importance: Undecided Status: New -- You received this bug notification because you are a member of Dcplusplus-team, which is subscribed to DC++. https://bugs.launchpad.net/bugs/2047732 Title: [PoC] RCE in ScriptPlugin 1.0 Status in DC++: New S

[Linuxdcpp-team] [Bug 2047732] Re: [PoC] RCE in ScriptPlugin 1.0

2023-12-30 Thread RoLex
** Description changed: I guess many of you atleast once heard of the most common mistake that - unexperienced PHP coders made, allowing SQL database input without + unexperienced PHP coder makes, allowing SQL database input without escaping, which resulted in SQL injections and possibly serve

[Linuxdcpp-team] [Bug 2047732] [NEW] [PoC] RCE in ScriptPlugin 1.0

2023-12-30 Thread RoLex
*** This bug is a security vulnerability *** Private security bug reported: I guess many of you atleast once heard of the most common mistake that unexperienced PHP coder makes, allowing SQL database input without escaping, which resulted in SQL injections and possibly server stealing. We got ve

[Linuxdcpp-team] [Bug 2019497] Re: Handling of CTM/search DDoS triggered by a malicious hub

2023-06-06 Thread RoLex
The ability to flood and even crash clients have been there for a very long time, because the client itself does not implement any kind of flood protection, except the search flood. I guess that clients mostly rely on hub antiflood protection, but in this case it is a hub itself that enforces the f

[Linuxdcpp-team] [Bug 2019492] Re: Tab control crash Win10+

2023-06-06 Thread RoLex
I confirm this when DC++ is compiled under GCC 11. -- You received this bug notification because you are a member of Dcplusplus-team, which is a bug assignee. https://bugs.launchpad.net/bugs/2019492 Title: Tab control crash Win10+ Status in DC++: New Bug description: When running DC++ co

[Linuxdcpp-team] [Bug 1649066] Re: Invalid UTF-8 data is not always being rejected

2016-12-19 Thread RoLex
@ maksis Hello. I'm developer of Team Elite Hublist. You reported UTF-8 validation issue in our XML files, so I took a good look at it. You was absolutely right, my pinger did not try to encode hub data to UTF-8 when hub encoding was already set to UTF-8. It seemed obvious to me that if hub says t

[Linuxdcpp-team] [Bug 1386172] Re: startup.lua in scripting plugin breaks handshake with ADC hubs

2014-11-09 Thread RoLex
Did you test it on Windows? -- You received this bug notification because you are a member of Dcplusplus-team, which is subscribed to DC++. https://bugs.launchpad.net/bugs/1386172 Title: startup.lua in scripting plugin breaks handshake with ADC hubs Status in DC++: New Bug description: D

[Linuxdcpp-team] [Bug 1386172] Re: startup.lua in scripting plugin breaks handshake with ADC hubs

2014-10-28 Thread RoLex
What is aggressive in my explanation? Lol. I'm just trying to report a bug. Those who wrote that plugin should know better about this issue, I however, found a temporary solution and proposed it to others. -- You received this bug notification because you are a member of Dcplusplus-team, which i

[Linuxdcpp-team] [Bug 1386172] Re: startup.lua in scripting plugin breaks handshake with ADC hubs

2014-10-27 Thread RoLex
Function adch.DataArrival is a handler function that is called directly by the plugin in Plugin::onHubDataIn, you should know better. -- You received this bug notification because you are a member of Dcplusplus-team, which is subscribed to DC++. https://bugs.launchpad.net/bugs/1386172 Title: s

[Linuxdcpp-team] [Bug 1386172] [NEW] startup.lua in scripting plugin breaks handshake with ADC hubs

2014-10-27 Thread RoLex
Public bug reported: Default startup.lua script included with ScriptPlugin breaks the handshake with any ADC(S) hub. Function adch.DataArrival checks for empty protocol message and returns nil in that case. For some reason this breaks the client to hub handshake. To fix this, function needs to ret