patchWeeChat - Patches: patch #6810, security fix for tcl plugin

 
 

patch #6810: security fix for tcl plugin

Submitter:  Dmitry <karvur>
Submitted:  Fri 17 Apr 2009 03:13:14 PM UTC
   
 
Category:  plugins Priority:  7 - High
Status:  Done Privacy:  Public
Assigned to:  flashcode Open/Closed:  Closed
IRC nick:  Karvur
* Mandatory Fields

Add a New Comment Rich Markup
   

Wed 22 Apr 2009 03:17:05 PM UTC, comment #4: 

Well, everything should be ok now with attached 0003-... patch.

(file #17997)

Dmitry <karvur>
Wed 22 Apr 2009 08:49:37 AM UTC, comment #3: 

Sorry, last patch not work, too. I should do better testing.

Dmitry <karvur>
Wed 22 Apr 2009 08:19:10 AM UTC, comment #2: 

There is another patch here. Hope it works.

(file #17993)

Dmitry <karvur>
Tue 21 Apr 2009 08:27:14 AM UTC, comment #1: 

This patch fixes the [ ] execution issue, but raises another problem. With the patch applied, any message that has the { or } chars end with an error if they are unbalanced.

Testing with the following tcl script:
weechat::register "err" "" "0.1" "GPL3" "descr" "" ""
weechat::hook_modifier "irc_in_privmsg" "ircIn"
proc ircIn {modifier server text} {return $text}



e.g. a simple channel message "te{st" shows an error in weechat buffer: tcl unable to run function "ircIn": missing close-brace: possible unbalanced brace in comment

Another message "te}st" shows the error:
tcl unable to run function "ircIn": extra characters after close-brace

Anonymous
Fri 17 Apr 2009 03:13:14 PM UTC, original submission:  


Dmitry <karvur>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #17997:  0003-Security-fix-for-tcl-plugin.patch added by karvur (3KiB - application/octet-stream)
file #17993:  0002--Security-fix-for-tcl-plugin.patch added by karvur (2KiB - application/octet-stream)
file #17940:  0001-Security-fix-in-tcl-plugin.patch added by karvur (890B - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by flashcode (Updated the item)
  • -email is unavailable- added by karvur
  • -email is unavailable- added by karvur (Submitted the item)
  • -email is unavailable- added by karvur
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 10 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2009-09-11 flashcode Open/ClosedOpen Closed
    2009-04-24 flashcode StatusNone Done
        Assigned toNone flashcode
    2009-04-22 karvur Attached File- Added 0003-Security-fix-for-tcl-plugin.patch, #17997
    2009-04-22 karvur Attached File- Added 0002--Security-fix-for-tcl-plugin.patch, #17993
    2009-04-18 karvur Carbon-Copy- Added flashcode
    2009-04-18 karvur Carbon-CopyRemoved flashkode -
    2009-04-17 karvur Attached File- Added 0001-Security-fix-in-tcl-plugin.patch, #17940
        Carbon-Copy- Added flashkode
        Carbon-Copy- Added karvur

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code