Menu

#1 Multiple Client Initiations

v0.0.*
closed-fixed
Server (7)
7
2005-06-03
2005-06-02
No

When the server receives the "proceed" message from the
client after the server has sent its protocol version,
the server begins initiation for that client. This
includes sending the client the file and user list, as
well as telling all of the other users that this new
client has connected.

However, the server doesn't make a note that this
client has been initiated, so the client could easily,
continually, and maliciously send multiple "proceed"
messages (code '101' as of protocol version 0.0.1),
causing the server to waste bandwidth and CPU time, as
well as send erroneous user logon messages to the other
clients.

Discussion

  • Daniel Bickett

    Daniel Bickett - 2005-06-03

    Logged In: YES
    user_id=1184088

    Fixed and committed to CVS.

     
  • Daniel Bickett

    Daniel Bickett - 2005-06-03
    • status: open --> closed-fixed
     

Log in to post a comment.