Opened 9 years ago

Closed 9 years ago

#5424 closed Bug (duplicate)

Crash in Add Magnet Link

Reported by: henryhog Owned by:
Priority: High Milestone: None Set
Component: Transmission Version: 2.80
Severity: Normal Keywords: crash
Cc:

Description

When you add a magnet torrent with a large number of characters in the tracker URL transmission will crash.

It does not seem to be exploitable, however it prevents the user from opening transmission as it will crash upon launch so it will cause Denial of Service. It occurs because it returns null on the DNS lookup I believe.

NORMAL MAGNET magnet:?xt=urn:btih:804cfd9a77cbc88108d387b18748d4d46af85b6e&dn=BackTrack+5+R3+Gnome+32bit&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80&tr=udp%3A%2F%2Ftracker.publicbt.com%3A80&tr=udp%3A%2F%2Ftracker.istole.it%3A6969&tr=udp%3A%2F%2Ftracker.ccc.de%3A80&tr=udp%3A%2F%2Fopen.demonii.com%3A1337

CRASH MAGNET magnet:?xt=urn:btih:804cfd9a77cbc88108d387b18748d4d46af85b6e&dn=BackTrack+5+R3+Gnome+32bit&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80&tr=udp%3A%2F%2Ftracker.publicbt.com%3A80&tr=udp%3A%2F%2Ftracker.istole.it%3A6969&tr=udp%3A%2F%2Ftracker.ccc.de%3A80&tr=udp%3A%2F%2Fopen.demAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAonii.com%3A1337

Tested on OSX and Ubuntu

Attachments (1)

BackTrack+5+R3+Gnome+32bit.804cfd9a77cbc881.torrent (361 bytes) - added by cfpp2p 9 years ago.

Download all attachments as: .zip

Change History (5)

comment:1 Changed 9 years ago by cfpp2p

The only way to restart transmission after is to delete the offending magnet link from the torrents directory before restarting.

Attached is .torrent file created from above magnet crasher.

comment:2 Changed 9 years ago by cfpp2p

By opening/adding with web client or rpc the torrent file I attached will crash transmission and there again you can't restart transmission until you delete it from the torrents directory.

comment:3 Changed 9 years ago by cfpp2p

this is a duplicate of #5426

comment:4 Changed 9 years ago by jordan

  • Resolution set to duplicate
  • Status changed from new to closed
Note: See TracTickets for help on using tickets.