Issue 420: Invalid user-agent - Darcs bug tracker

Title	Invalid user-agent
Priority	bug	Status	resolved
Milestone		Resolved in
Superseder		Nosy List	darcs-devel, dmitry.kurochkin, flaurijssens, kowey, quick, thorkilnaur, tommy
Assigned To	quick	Topics

Created on 2007-02-26.15:31:05 by flaurijssens, last changed 2009-08-27.14:11:39 by admin.

Messages
msg1495 (view)	Author: flaurijssens	Date: 2007-02-26.15:30:58
The w32 version of darcs 1.0.7 - 1.0.9rc2 sends out an invalid user-agent string. I might or might not be a libcurl bug, but it looks like the string isn't terminated properly: User-Agent: darcs/1.0.7 (release) (libcurl/libcurl/7.14.1 GnuTLS/1.2.8 z�u�v�5 User-Agent: darcs/1.0.9rc2 (unknown) (libcurl/libcurl/7.14.1 GnuTLS/1.2.�Ov This way darcs might leak information to web servers.
msg1805 (view)	Author: quick	Date: 2007-07-12.06:39:15
The darcs interface to curl wasn't ensuring the user agent string was null terminated if it tried to stuff too much data into the string. This wouldn't necessarily hurt the current darcs run, but--as suspected--it might export a little too much data to the remote site. Submitted a patch to darcs-devel.

History
Date	User	Action	Args
2007-02-26 15:31:05	flaurijssens	create
2007-07-12 06:39:16	quick	set	status: unread -> has-patch nosy: + quick messages: + msg1805
2007-07-14 20:52:36	kowey	set	status: has-patch -> resolved-in-unstable
2007-07-31 18:13:38	kowey	set	status: resolved-in-unstable -> resolved-in-stable
2008-09-16 21:30:57	admin	set	status: resolved-in-stable -> resolved nosy: + dagit
2009-08-06 17:40:51	admin	set	nosy: + markstos, jast, Serware, dmitry.kurochkin, darcs-devel, zooko, mornfall, simon, thorkilnaur, - droundy, flaurijssens, quick
2009-08-06 20:38:03	admin	set	nosy: - beschmi
2009-08-10 22:02:20	admin	set	nosy: + flaurijssens, quick, - markstos, darcs-devel, zooko, jast, Serware, mornfall
2009-08-10 23:59:43	admin	set	nosy: - dagit
2009-08-25 17:54:24	admin	set	nosy: + darcs-devel, - simon
2009-08-27 14:11:39	admin	set	nosy: tommy, kowey, darcs-devel, flaurijssens, quick, thorkilnaur, dmitry.kurochkin