commit - 1e1cc6d47f0d1323debefad0cd1598761a970d51
commit + 079e0cf9a4db2462e85fc9fb63764e3cb6ea9674
blob - 3cabfacb478e663ce6a7d07d1dd51158d13489b0
blob + a031bdbf2dc0c86ca65d1c67e9ae9d8238a34342
--- ChangeLog
+++ ChangeLog
-- ChangeLog --
+ngIRCd 0.10.3 (2007-08-01)
+
+ - SECURITY: Fixed a severe bug in handling JOIN commands, which could
+ cause the server to crash. Thanks to Sebastian Vesper, <net@veoson.net>.
+
ngIRCd 0.10.2 (2007-06-08)
ngIRCd 0.10.2-pre2 (2007-05-19)
--
-$Id: ChangeLog,v 1.302.2.17 2007/06/08 09:05:23 alex Exp $
+$Id: ChangeLog,v 1.302.2.18 2007/07/31 18:54:26 alex Exp $
blob - 27d0cbe5e16af5816eabaa16fafda7379619d316
blob + e59f32fac82b2d70bf8cb8e1d10034395307b562
--- src/ngircd/irc-channel.c
+++ src/ngircd/irc-channel.c
#include "portab.h"
-static char UNUSED id[] = "$Id: irc-channel.c,v 1.35.2.3 2007/04/03 20:23:31 fw Exp $";
+static char UNUSED id[] = "$Id: irc-channel.c,v 1.35.2.4 2007/07/31 18:54:30 alex Exp $";
#include "imp.h"
#include <assert.h>
assert( Req != NULL );
/* Bad number of arguments? */
- if(( Req->argc > 2 )) return IRC_WriteStrClient( Client, ERR_NEEDMOREPARAMS_MSG, Client_ID( Client ), Req->command );
+ if (Req->argc < 1 || Req->argc > 2)
+ return IRC_WriteStrClient(Client, ERR_NEEDMOREPARAMS_MSG,
+ Client_ID(Client), Req->command);
/* Who is the sender? */
if( Client_Type( Client ) == CLIENT_SERVER ) target = Client_Search( Req->prefix );