EFnet Paralyzed By Vulnerability

An anonymous reader writes "EFnet member Fionn 'Fudge' Kelleher reported several vulnerabilities in the IRC daemons charybdis, ircd-ratbox, and other derivative IRCds. The vulnerability was subsequently used to bring down large portions of the EFnet IRC network." By crafting a particular message, you can cause the IRC daemon to call strlen(NULL) and game over, core dumped.

C strings strike again!

[cheesybagel]

This is the problem you get when your strings don't know their allocated size like in that ghastly language Pascal.

Re:C strings strike again!

[cheesybagel]

Not to mention the whole C issue where pointers to something and arrays of something are sort of the same but not really.