iarv/znc
1
0
Fork 0
mirror of https://github.com/znc/znc.git synced 2026-05-07 05:44:41 +02:00
Code Issues Packages Projects Releases Wiki Activity

Don't crash if user specified invalid encoding.

Browse Source 
This is CVE-2019-9917
This commit is contained in:
Alexey Sokolov
2019-03-15 20:34:10 +00:00
parent 46544d9067
commit 64613bc8b6
5 changed files with 34 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/integration/tests/scripting.cpp
+7
View File
@@ -55,6 +55,13 @@ TEST_F(ZNCTest, Modpython) {
ircd.Write(":n!u@h PRIVMSG nick :Hi\xF0, github issue #1229");
// "replacement character"
client.ReadUntil("Hi\xEF\xBF\xBD, github issue");
// Non-existing encoding
client.Write("PRIVMSG *controlpanel :Set ClientEncoding $me Western");
client.Write("JOIN #a\342");
client.ReadUntil(
":*controlpanel!znc@znc.in PRIVMSG nick :ClientEncoding = UTF-8");
ircd.ReadUntil("JOIN #a\xEF\xBF\xBD");
}
TEST_F(ZNCTest, ModpythonSocket) {