[mICQ] ANNOUNCEMENT: mICQ 0.4.10.4 released, fixes remote DoS
RüdigerKuhlmann
micq-list-CKH1bDCG6x4V at ruediger-kuhlmann.de
Tue Sep 23 09:58:06 PDT 2003
>--[Rüdiger Kuhlmann]--<micq-list-CKH1bDCG6x4V at ruediger-kuhlmann.de>
> For those buglets, a patch is appended.
> md5sum e01abb07198544e053e5c48a066e8468 source/fix-0.4.10.4.patch
> sha1sum b0bc33b3ab864829a3faaea656a98d3b3d95c910 source/fix-0.4.10.4.patch
Yeah and here's the attachment.
--
100 DM = 51 € 13 ¢.
100 € = 195 DM 58 pf.
mailto:ruediger at ruediger-kuhlmann.de
http://www.ruediger-kuhlmann.de/
-------------- next part --------------
Index: ChangeLog
===================================================================
RCS file: /var/lib/cvs/micq/ChangeLog,v
retrieving revision 1.121.2.18
diff -u -r1.121.2.18 ChangeLog
--- ChangeLog 22 Sep 2003 17:43:35 -0000 1.121.2.18
+++ ChangeLog 23 Sep 2003 14:56:46 -0000
@@ -1,5 +1,10 @@
-*- coding: utf-8 -*-
+2003-09-23 Rüdiger Kuhlmann <info at ruediger-kuhlmann.de>(stable-0-4-10)
+ * fix Tcl (broken call backs)
+ * fix SSL (man page, no more connection failed on unanswered SSL request)
+ * fix alias expansion when no argument is given
+
2003-09-22 Rüdiger Kuhlmann <info at ruediger-kuhlmann.de>(stable-0-4-10)
* apply Roman's patch to fix SSL
* rewrite SSL hand-shake to be non-blocking
Index: doc/micq.7
===================================================================
RCS file: /var/lib/cvs/micq/doc/micq.7,v
retrieving revision 1.36.2.9
retrieving revision 1.36.2.10
diff -u -r1.36.2.9 -r1.36.2.10
--- doc/micq.7 22 Sep 2003 03:00:16 -0000 1.36.2.9
+++ doc/micq.7 23 Sep 2003 12:14:21 -0000 1.36.2.10
@@ -1,5 +1,5 @@
-.\" $Id: micq.7,v 1.36.2.9 2003/09/22 03:00:16 kuhlmann Exp $ -*- nroff -*-
-.\" EN: $Id: micq.7,v 1.36.2.9 2003/09/22 03:00:16 kuhlmann Exp $
+.\" $Id: micq.7,v 1.36.2.10 2003/09/23 12:14:21 kuhlmann Exp $ -*- nroff -*-
+.\" EN: $Id: micq.7,v 1.36.2.10 2003/09/23 12:14:21 kuhlmann Exp $
.TH MICQ 7 mICQ
.SH NAME
mICQ - interactive commands
@@ -912,13 +912,13 @@
.TP
.BI handshake
SSL handshake failure.
-.RE
-.RE
.TP
-.BI ssl \ <uin>\ \fR{\fPcandidate\fR,\fPno_candidate\fR}\fP
+.RB { candidate , no_candidate }
Indicates whether
.I uin
-is a SSL capable candidate.
+is an SSL capable candidate.
+.RE
+.RE
.TP
.BI unevent
Uninstall event hook. Returns command of former hook.
Index: doc/de/micq.7
===================================================================
RCS file: /var/lib/cvs/micq/doc/de/micq.7,v
retrieving revision 1.13.2.2
retrieving revision 1.13.2.3
diff -u -r1.13.2.2 -r1.13.2.3
--- doc/de/micq.7 22 Sep 2003 03:00:27 -0000 1.13.2.2
+++ doc/de/micq.7 23 Sep 2003 12:17:33 -0000 1.13.2.3
@@ -1,5 +1,5 @@
-.\" $Id: micq.7,v 1.13.2.2 2003/09/22 03:00:27 kuhlmann Exp $ -*- nroff -*-
-.\" EN: micq.7,v 1.36.2.9
+.\" $Id: micq.7,v 1.13.2.3 2003/09/23 12:17:33 kuhlmann Exp $ -*- nroff -*-
+.\" EN: micq.7,v 1.36.2.10
.TH MICQ 7 mICQ DE
.SH NAME
.B mICQ
@@ -965,13 +965,13 @@
.TP
.BI handshake
Der SSL-Verbindungsaufbau ist fehlgeschlagen.
-.RE
-.RE
.TP
-.BI ssl \ <uin>\ \fR{\fPcandidate\fR,\fPno_candidate\fR}\fP
+.RB { candidate , no_candidate }
Gibt zu\(:uck, ob
.I uin
m\(:oglicherweise SSL unterst\(:utzt.
+.RE
+.RE
.TP
.BI unevent
Entfernt den Ereignis-R\(:uckruf. Falls es einen gegeben hat, gibt es
Index: src/cmd_user.c
===================================================================
RCS file: /var/lib/cvs/micq/src/cmd_user.c,v
retrieving revision 1.216.2.30
retrieving revision 1.216.2.31
diff -u -r1.216.2.30 -r1.216.2.31
--- src/cmd_user.c 21 Sep 2003 23:20:16 -0000 1.216.2.30
+++ src/cmd_user.c 23 Sep 2003 14:24:42 -0000 1.216.2.31
@@ -5,7 +5,7 @@
*
* alias stuff GPL >= v2
*
- * $Id: cmd_user.c,v 1.216.2.30 2003/09/21 23:20:16 kuhlmann Exp $
+ * $Id: cmd_user.c,v 1.216.2.31 2003/09/23 14:24:42 kuhlmann Exp $
*/
#include "micq.h"
@@ -4112,7 +4112,7 @@
if (*cmd != '\xb6')
{
- if (*argsd && CmdUserProcessAlias (cmd, argsd + 1, &idle_save, idle_flag))
+ if (CmdUserProcessAlias (cmd, *argsd ? argsd + 1 : "", &idle_save, idle_flag))
is_alias = TRUE;
else
j = CmdUserLookup (cmd, CU_USER);
Index: src/tcp.c
===================================================================
RCS file: /var/lib/cvs/micq/src/tcp.c,v
retrieving revision 1.153.2.13
retrieving revision 1.153.2.14
diff -u -r1.153.2.13 -r1.153.2.14
--- src/tcp.c 21 Sep 2003 23:20:18 -0000 1.153.2.13
+++ src/tcp.c 23 Sep 2003 13:22:01 -0000 1.153.2.14
@@ -5,7 +5,7 @@
* Lots of changes from Rüdiger Kuhlmann. File transfer by Rüdiger Kuhlmann.
* This file may be distributed under version 2 of the GPL licence.
*
- * $Id: tcp.c,v 1.153.2.13 2003/09/21 23:20:18 kuhlmann Exp $
+ * $Id: tcp.c,v 1.153.2.14 2003/09/23 13:22:01 kuhlmann Exp $
*/
#include "micq.h"
@@ -1528,7 +1528,8 @@
Connection *peer = event->conn;
Packet *pak = event->pak;
UWORD delta, e_trans;
- char isfile = ExtraGet (event->extra, EXTRA_MESSAGE) == MSG_FILE;
+ int msgtype = ExtraGet (event->extra, EXTRA_MESSAGE);
+ char isfile = msgtype == MSG_FILE || msgtype == MSG_SSL_OPEN;
if (!peer || !cont)
{
Index: src/util_tcl.c
===================================================================
RCS file: /var/lib/cvs/micq/src/Attic/util_tcl.c,v
retrieving revision 1.1.2.3
retrieving revision 1.1.2.4
diff -u -r1.1.2.3 -r1.1.2.4
--- src/util_tcl.c 22 Sep 2003 16:47:06 -0000 1.1.2.3
+++ src/util_tcl.c 23 Sep 2003 12:14:34 -0000 1.1.2.4
@@ -17,7 +17,7 @@
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
* 02111-1307, USA.
*
- * $Id: util_tcl.c,v 1.1.2.3 2003/09/22 16:47:06 kuhlmann Exp $
+ * $Id: util_tcl.c,v 1.1.2.4 2003/09/23 12:14:34 kuhlmann Exp $
*/
#include "micq.h"
@@ -94,7 +94,7 @@
TCL_COMMAND (TCL_command_help)
{
- if (argc == 1)
+ if (argc <= 2)
{
M_printf (i18n (2346, "The following Tcl commands are supported:\n"));
M_printf (COLMESSAGE "%s" COLNONE "\n\t" COLINDENT "%s\n%s" COLEXDENT "\n",
@@ -286,24 +286,26 @@
{
const char *result;
- if (tcl_events) {
- Tcl_Eval (tinterp, s_sprintf ("%s {%s} %s", tcl_events->cmd, type, data));
- result = Tcl_GetStringResult (tinterp);
+ if (tcl_events)
+ {
+ char *cdata = strdup (data);
+ Tcl_Eval (tinterp, s_sprintf ("%s {%s} %s", tcl_events->cmd, type, cdata));
+ result = Tcl_GetStringResult (tinterp);
if (strlen (result) > 0)
M_printf ("%s\n", Tcl_GetStringResult (tinterp));
+ s_free (cdata);
}
}
-void TCLMessage (Contact *from, const char *text_)
+void TCLMessage (Contact *from, const char *text)
{
tcl_hook_p hook = tcl_msgs;
tcl_hook_p generic = NULL;
- const char *uin = "";
- char *text = strdup (text_);
+ char *uin = NULL;
const char *result;
- if (from)
- uin = s_sprintf ("%lu", from->uin);
+ if (from)
+ uin = strdup (s_sprintf ("%lu", from->uin));
while (hook)
{
@@ -312,19 +314,19 @@
else if (from && (!strcmp (hook->filter, from->nick) ||
!strcmp (hook->filter, uin)))
{
- Tcl_Eval (tinterp, s_sprintf ("%s {%s}", hook->cmd, text));
+ Tcl_Eval (tinterp, s_sprintf ("%s %s {%s}", hook->cmd, uin, text));
generic = NULL;
break;
}
hook = hook->next;
}
if (generic)
- Tcl_Eval (tinterp, s_sprintf ("%s {%s}", generic->cmd, text));
+ Tcl_Eval (tinterp, s_sprintf ("%s %s {%s}", generic->cmd, uin, text));
result = Tcl_GetStringResult (tinterp);
if (strlen (result) > 0)
M_printf ("%s\n", Tcl_GetStringResult (tinterp));
- free (text);
+ s_free (uin);
}
void TCLInit ()
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20030923/830b36ae/attachment-0001.bin
More information about the freebsd-ports
mailing list