"Require TLS ADC C-C connections" is broken

Bug #1206864 reported by maksis
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
DC++
Fix Released
Medium
Unassigned

Bug Description

The encryption is only checked at UserConnectionListener::Connected but only connections initiated by the other users come there. That setting has no effect when it's your client that connects to the other user.

Another issue is that DC++ tries to remove the source in the same location even though there is no user associated to the connection at that point. Luckily it won't crash the client since QueueManager::removeSource doesn't have any calls to the member variables of the user object.

AirDC++ checks the encryption support when receiving a CTM/RCM command, but also before adding the user as source and before trying to connect to the user. The code in AirDC++ has been rewritten from those parts so I'm not able to provide a tested patch.

Tags: core
eMTee (realprogger)
Changed in dcplusplus:
status: New → Confirmed
importance: Undecided → Medium
Fredrik Ullner (ullner)
tags: added: core
Revision history for this message
cologic (cologic) wrote :
Changed in dcplusplus:
status: Confirmed → Fix Committed
Revision history for this message
poy (poy) wrote :

Fixed in DC++ 0.851.

Changed in dcplusplus:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.