Comment 1 for bug 571914

Revision history for this message
eMTee (realprogger) wrote :

The crash is actually because of an unhandled exception caused by a modulo by zero operation, and is reproducible if DC++ receives a GET BLOM command with zero filter size (m) specified (or if parameter #3 of the GET command is invalid).

As far as I see the (current) protocol extension does not restrict m=0, however getting a zero sized filter seems illogical to me... so if m=0 is invalid then the fix is easy (send "Unsupported m"). If m=0 is a valid value then some other action must be taken.