Opened 6 years ago

#15413 new defect

IRC - Flood of "chat invitation" message

Reported by: maar Owned by: elb
Milestone: Component: IRC
Version: 2.10.6 Keywords: chat invitation
Cc:

Description

Hi,

Possible to flood packets by chat invitations. It's possible to send a lot of 'chat invitations' by irc client to PidGin?. What happend in PidGin? if user won't react for question, it will open a lot of windows with question "Accept chat invitation?". In case of no answer from PidGin?, PidGin? shouldn't open next question window if it still waiting for answer for previous invitation from the same login/sender. If receiver doesn't accept invitation than next window with invitation is possible but it shuoldn't be possible. Second chat invitation should be ignored by PidGin? if first window is still waiting for answer. Would be good to block that kind of behaviour.

How to reproduce? Send more than 1 chat invitation. Receiver(Pidgin client) shouldn't accept invitation.

File: pidgin-2.10.6\pidgin-2.10.6\libpurple\protocols\irc\msgs.c Function: irc_msg_invite() serv_got_chat_invite() function should be executed only in case if other than last user send invitation. There should be some list of logins which waits for answer but those list should be unlimitted, eg. 3 nicks can ask for chat invitation in the same time.

Change History (0)

Note: See TracTickets for help on using tickets.
All information, including names and email addresses, entered onto this website or sent to mailing lists affiliated with this website will be public. Do not post confidential information, especially passwords!