Skip to content
This repository has been archived by the owner on Dec 10, 2019. It is now read-only.

Too easy to make server crash #90

Closed
breakwa11 opened this issue Sep 21, 2016 · 7 comments
Closed

Too easy to make server crash #90

breakwa11 opened this issue Sep 21, 2016 · 7 comments
Assignees
Labels

Comments

@breakwa11
Copy link

breakwa11 commented Sep 21, 2016

just run:

import socket
ip = "127.0.0.1" # or "xxx.com"
port = 8388
try:
    addrs = socket.getaddrinfo(ip, port, 0, socket.SOCK_STREAM, socket.SOL_TCP)
    af, socktype, proto, canonname, sa = addrs[0]
    s = socket.socket(af, socket.SOCK_STREAM)
    s.connect(sa)
    s.send(b'a')
    s.recv(1024)
except:
    pass
@librehat
Copy link
Contributor

Can't reproduce on my laptop (Fedora x64)

@breakwa11
Copy link
Author

Initialising ciphers...
AES-128/CFB (aes-128-cfb) initialised.
Running in server mode.
TCP server listen at port 8388
terminate called after throwing an instance of 'Botan::Invalid_IV_Length'
  what():  IV length 1 is invalid for AES-128/CFB

This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.

@librehat
Copy link
Contributor

What operating system?

@breakwa11
Copy link
Author

Windows, bin from latest release

@librehat librehat reopened this Oct 2, 2016
@breakwa11
Copy link
Author

more issue here:
in function bool Encryptor::verifyHeaderAuth(const QByteArray &data, const int &headerLen) const
line 160: == data.mid(headerLen, Cipher::AUTH_LEN);
mid function may throw an exception

@librehat
Copy link
Contributor

mid doesn't throw

@librehat
Copy link
Contributor

I'll check the botan exception on Windows when I have spare time

@librehat librehat self-assigned this Dec 14, 2016
@librehat librehat added the bug label Dec 14, 2016
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants