View Single Post
  #1 (permalink)  
Old July 24th, 2003
Tadu
Guest
 
Posts: n/a
Exclamation My current batch of patches fixes remote DoS

I made a few new patches to Qtella 0.6.2. I didn't seperate them, so you have only two patches to look at.

http://www.stud.uni-karlsruhe.de/~uc...eprecated.diff

This one removes the usage of the deprecated header <strstream> and the corresponding class; replace it by <sstream> and class stringstream.

http://www.stud.uni-karlsruhe.de/~uc...and-fixes.diff

The remainder:
* accept version 0.4 conections again
* have code for outgoing 0.4 connections
(if you need 0.4, simply change a 0 to 1, if you need both, trying alternately both version yields good results)
* support for Gnucleus LAN mode
* get rid of stupid vect_* functions by using the right class for the job (string instead of vect<char>)
* fix remote DoS that resulted in 100% CPU usage
* improve header parsing somewhat (now files with " http" in their name can be downloaded)
* support for HUGE style incoming upload requests SHA1 hash
* partial support for HUGE download (needs more stuff to actually have a SHA1 hash to ask for)
* make autoconf.in somewhat more current

That's not all that should have been done, but a huge step in the right direction.
Reply With Quote