#476 xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit

[Anonymous]

the machine on which xchat crashed
Linux 2.4.23
xchat 2.0.6

the machine who did the exploit
mirc 6.12
Windows XP

---
what happend:
i starded xchat 2.0.6 on my linux machine and, just for
fun, tried to exploit it via mirc.
if you are not familiar with that: mIRC 6.11 and ealier
6.x crashed on a malformated dcc request. 6.12 fixed that.

oh wonder! xchat closed!!!!
* Quits: <xchat_linux_nick>(who@cares) (Client exited)
(msg in my mirc)

downgraded to 2.0.5 and tried again
--- DCC RECV connect attempt to <mynick> failed
(err=Invalid argument).

this was reproduced on a FreeBSD machine with xchat 2.0.6

[Peter Zelezny.]

Logged In: YES
user_id=5012

How do I reproduce it (what is the actual message that
causes a crash)?

[Nobody/Anonymous]

Logged In: NO

you need to send a dcc request to someone.

(this is the mirc command .. if you are into xchat there
should be a way to translate it .. )

//raw -q privmsg <nick> : $+ $chr(1) $+ DCC SEND "a b c d e
f g h i j k l m n o p q r s t u v w x y z 1 2 3 4 5 6 7 8 9
0 1 2 3 4 " 1 2 3 $longip(127.0.0.1) 1111 $+ $chr(1)

[James Courtier-Dutton]

Logged In: YES
user_id=9273

A patch to fix this is at
http://bugs.gentoo.org/show_bug.cgi?id=35623