aboutsummaryrefslogtreecommitdiff
path: root/irc
diff options
context:
space:
mode:
authorOliver Eikemeier <eik@FreeBSD.org>2004-06-21 08:26:37 +0000
committerOliver Eikemeier <eik@FreeBSD.org>2004-06-21 08:26:37 +0000
commit62378ec21e6a886178382cc394964d4e8dd12759 (patch)
treefccb02197f6c637887ecb75060603dbef99faaa8 /irc
parent59953a2e277af77c9692333da41f039b8b0a3a37 (diff)
downloadports-62378ec21e6a886178382cc394964d4e8dd12759.tar.gz
ports-62378ec21e6a886178382cc394964d4e8dd12759.zip
fix ircd-hybrid-7 low-bandwidth DoS
- <http://people.freebsd.org/~eik/portaudit/23aafa20-c28a-11d8-864c-02e0185c0b53.html> - <http://vuxml.freebsd.org/23aafa20-c28a-11d8-864c-02e0185c0b53.html> PR: 68161 Submitted by: Evgueni V. Gavrilov <aquatique-ports@rambler.ru> (maintainer) Obtained from: Erik Sperling Johansen <einride@einride.org> (http://www.securityfocus.com/archive/1/366486)
Notes
Notes: svn path=/head/; revision=111922
Diffstat (limited to 'irc')
-rw-r--r--irc/ircd-hybrid-ru/Makefile2
-rw-r--r--irc/ircd-hybrid-ru/files/patch-src-packet.c11
2 files changed, 12 insertions, 1 deletions
diff --git a/irc/ircd-hybrid-ru/Makefile b/irc/ircd-hybrid-ru/Makefile
index 0be89380441a..17df3ace2c86 100644
--- a/irc/ircd-hybrid-ru/Makefile
+++ b/irc/ircd-hybrid-ru/Makefile
@@ -7,7 +7,7 @@
PORTNAME= ircd
PORTVERSION= 7.1
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= irc russian
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} \
ftp://rusunix.org/pub/FreeBSD/distfiles/
diff --git a/irc/ircd-hybrid-ru/files/patch-src-packet.c b/irc/ircd-hybrid-ru/files/patch-src-packet.c
new file mode 100644
index 000000000000..2d192ac37b96
--- /dev/null
+++ b/irc/ircd-hybrid-ru/files/patch-src-packet.c
@@ -0,0 +1,11 @@
+--- src/packet.c.orig Mon Jun 21 09:43:24 2004
++++ src/packet.c Mon Jun 21 09:44:15 2004
+@@ -467,7 +467,7 @@
+ parse_client_queued(client_p);
+
+ /* Check to make sure we're not flooding */
+- if (IsPerson(client_p) &&
++ if (!(IsServer(client_p) || IsHandshake(client_p) || IsConnecting(client_p)) &&
+ (dbuf_length(&client_p->localClient->buf_recvq) >
+ (unsigned int)ConfigFileEntry.client_flood))
+ {