psychon b0e59f1294 Fix a crash bug with auth modules ...

If a module like imapauth needs some time to process a login, it's possible that
the client already disconnected by the time the lookup finished. This would then
cause a stale pointer in CAuthBase to be dereferenced.

Fix this remotely exploitable crash bug by adding a new function
CAuthBase::Invalidate(). After this was called, the CAuthBase instance doesn't
do anything at all anymore, especially not dereferencing the (possibly stale)
m_pSock pointer.

This also makes sure that one can only call AcceptLogin() or RefuseLogin() once.

Thanks to Sm0ke0ut for providing backtraces and reporting this bug.


git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@1669 726aef4b-f618-498e-8847-2d620e286838

2009-11-28 18:53:20 +00:00

..

extra

Remove connect_throttle module from extra

2009-10-15 14:38:02 +00:00

webadmin/skins

Fix some minor errors in webadmin's CSS files

2009-09-18 18:26:20 +00:00

admin.cpp

admin: Disable ConnectEnabled() for cloned users

2009-10-20 16:59:40 +00:00

adminlog.cpp

Import the adminlog module znc-extra

2009-08-10 18:16:03 +00:00

autoattach.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

autocycle.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

autoop.cpp

autoop: Use const_iterator instead of iterator where it makes sense

2009-03-29 12:23:59 +00:00

autoreply.cpp

Import the autoreply module from znc-extra

2009-08-07 19:33:29 +00:00

away.cpp

Don't ever ask for a password via stdin in away and savebuff

2009-02-20 19:15:31 +00:00

awaynick.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

buffextras.cpp

savebuff: Honour the KeepBuffer setting

2009-09-04 12:25:05 +00:00

chansaver.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

crypt.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

email.cpp

Fix a compiler warning in email

2009-04-05 19:09:03 +00:00

fail2ban.cpp

fail2ban: Clear all bans on rehash

2009-07-15 18:28:03 +00:00

fixfreenode.cpp

Import the fixfreenode module from znc-extra

2009-08-07 19:28:12 +00:00

imapauth.cpp

Use that new define everywhere

2009-01-25 16:51:54 +00:00

keepnick.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

kickrejoin.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

Makefile.in

Move saslauth into modules/extra/

2009-09-14 12:17:17 +00:00

modperl.cpp

Move CZNC::FindModPath() to CModules

2009-08-23 11:05:22 +00:00

modperl.pm

Use znc.in instead of znc.com

2008-08-30 09:00:21 +00:00

nickserv.cpp

I suck (I broke the build!)

2009-07-01 09:11:33 +00:00

partyline.cpp

partyline: Fix the KICK sent for deleted users

2009-04-09 08:22:20 +00:00

perform.cpp

Add a "swap" command to perform to change the order of commands

2009-07-08 20:17:47 +00:00

q.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

raw.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

route_replies.cpp

route_replies: Improve the timeout handling

2009-11-15 13:03:48 +00:00

sample.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

savebuff.cpp

savebuff: Honour the KeepBuffer setting

2009-09-04 12:25:05 +00:00

schat.cpp

Use a set instead of a vector in CModule

2009-10-05 20:44:54 +00:00

shell.cpp

Add and use CZNCSock instead of Csock everywhere

2009-06-29 11:26:19 +00:00

simple_away.cpp

Happy New Year 2009 everyone!

2009-01-01 12:22:21 +00:00

stickychan.cpp

stickychan: Accept a channel list as module arguments

2009-06-05 19:56:23 +00:00

watch.cpp

watch: Removed a bit too much in r1413.

2009-03-07 11:24:34 +00:00

webadmin.cpp

Fix a crash bug with auth modules

2009-11-28 18:53:20 +00:00