a5e296e4eb
This fixes the null-dereference reported on full-disclosure [1]. A corrected analysis of the issue follows below: When SASL authentication completes, and auth_user is requested, client_p->user may be NULL. Thusly accessing fields of client_p->user may cause a null dereference. In these cases, aborting SASL auth early is a correct interpretation of the IRCv3.1 specification. The code must handle this situation, which this commit corrects. [1]: http://seclists.org/fulldisclosure/2014/Mar/320 |
||
---|---|---|
bandb | ||
doc | ||
extensions | ||
extra/services | ||
help | ||
include | ||
libratbox | ||
modules | ||
scripts | ||
src | ||
ssld | ||
testsuite | ||
tools | ||
unsupported | ||
.gitignore | ||
.indent.pro | ||
CREDITS | ||
INSTALL | ||
LICENSE | ||
Makefile.in | ||
NEWS | ||
README.md | ||
TODO.markdown | ||
aclocal.m4 | ||
configure | ||
configure.ac | ||
install-sh |
README.md
elemental-ircd
elemental-ircd is a high performance, lightweight, and scalable IRC daemon. It is a fork of the now-defunct ShadowIRCD created to meet PonyChat's needs, and seeks to continue in the direction ShadowIRCD was headed.
Supported Platforms
<Cassy> If you put something on a platform which cannot support it
it may tip and fall and become broken. Simple physics.
Support
Our support channel is #rainbow-factory
on irc.ponychat.net
. Poke
aji, lyska, or Kabaka for help.
To report bugs, please use the GitHub issue tracker.