Anope Bug Tracker

View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001703Anope Stable (2.0.x series)[All Projects] Generalpublic2017-04-14 11:382017-04-14 11:38
ReporterAbsolver 
Assigned To 
PrioritynormalSeveritycrashReproducibilityalways
StatusnewResolutionopen 
PlatformAnope 2.0.5OSUbuntu 14.04 LTSOS Version
Summary0001703: Malformed XML crashes XMLRPC
DescriptionSending malformed XML to the XMLRPC handler crashes Anope.
Steps To Reproduce1) Set up Anope 2.0.5 with XMLRPC enabled
2) Verify that XMLRPC is up and running
3) Send the following XML to XMLRPC:
<?xml version="1.0" encoding="iso-8859-1"?>
<methodCall>
    <methodName>checkAuthentication</methodName>
    <params>
        <param>
            <value>
                <string>randomuser</string>
                <string>randompassword</string>
            </value>
        </param>
    </params>
</methodCall

(Note the missing closing > in the methodCall end tag)
Additional InformationDebug log information from sending the malformed XML:
Apr 14 12:33:04.147078 2017] Accepted connection 10 from 84.202.160.14
[Apr 14 12:33:04.335267 2017] m_httpd: Serving page /xmlrpc to 84.202.160.14
[Apr 14 12:33:04.335323 2017] m_xmlrpc: Tag name: ?xml version="1.0" encoding="iso-8859-1"?, data:

[Apr 14 12:33:04.335368 2017] m_xmlrpc: Tag name: methodCall, data:

[Apr 14 12:33:04.335415 2017] m_xmlrpc: Tag name: methodName, data: checkAuthentication
[Apr 14 12:33:04.335460 2017] m_xmlrpc: Tag name: /methodName, data:

[Apr 14 12:33:04.335504 2017] m_xmlrpc: Tag name: params, data:

[Apr 14 12:33:04.335548 2017] m_xmlrpc: Tag name: param, data:

[Apr 14 12:33:04.335594 2017] m_xmlrpc: Tag name: value, data:

[Apr 14 12:33:04.335647 2017] m_xmlrpc: Tag name: string, data: xlexious
[Apr 14 12:33:04.335685 2017] m_xmlrpc: Tag name: /string, data:

[Apr 14 12:33:04.335725 2017] m_xmlrpc: Tag name: string, data: <removed>
[Apr 14 12:33:04.335763 2017] m_xmlrpc: Tag name: /string, data:

[Apr 14 12:33:04.335801 2017] m_xmlrpc: Tag name: /value, data:

[Apr 14 12:33:04.335838 2017] m_xmlrpc: Tag name: /param, data:

[Apr 14 12:33:04.335875 2017] m_xmlrpc: Tag name: /params, data:

TagsNo tags attached.
Attached Files

- Relationships

-  Notes
There are no notes attached to this issue.

- Issue History
Date Modified Username Field Change
2017-04-14 11:38 Absolver New Issue


Copyright © 2000 - 2017 MantisBT Team
Powered by Mantis Bugtracker