24 Feb
2008
24 Feb
'08
01:32
On 2008-02-24 at 01:18 +0100, Alexander Barton wrote:
The problem is that the oversized command can not only contain "dumb text" but parameters of IRC commands. And it is dangerous to cut off these possible parameters because the state of all the servers in the network must be identical.
So the only sane thing a server can do to ensure a valid state is to disconnect the client which violates the protocol.
I've tried sending messages > 512 chars to many other IRC servers, and none of them disconnects the client. As RFC 2812 implies, they truncate the message to 512 characters.
How could truncating an incoming message compromise server state?
Dana