[Citadel Development] (no subject)

2013-08-13 Thread dothebart
some try to get a hold on it... however, it seems as if ld_preload changes offsets, need to find a way around this - so I can get usefull backtraces :-( /* * gcc -Wall -nostartfiles -fpic -shared -olibbacktrace.so backtrace_open.c */ #define _GNU_SOURCE #define _FILE_OFFSET_BITS 64 #define

[Citadel Development] Security Issues

2013-08-13 Thread cab0lt
Hello, I identified the following issues in WebCit: * XSS at https://rpi.yvanj.me/do_template?template=iconbar_user * Secure (if on SSL) and HTTPOnly flag not set on the session ID cookie How can I submit a patch for this? cab0lt

[Citadel Development] Re: Security Issues

2013-08-13 Thread IGnatius T Foobar
You can submit the patch right here. Thanks!

[Citadel Development] (no subject)

2013-08-13 Thread Freakdog
  Mon Aug 12 2013 05:17:50 AM EDT from dothebart @ Uncensored hm, somethings smelly around the network queue importer. it seems there is some sort of double close here (though I couldn't find it by browsing the source) and from sendcommand rwho I see something messing with the current room of

[Citadel Development] (no subject)

2013-08-13 Thread dothebart
Tue Aug 13 2013 11:37:05 EDT from Freakdog @ Dog Pound BBS II   Mon Aug 12 2013 05:17:50 AM EDT from dothebart @ Uncensored hm, somethings smelly around the network queue importer. it seems there is some sort of double close here (though I couldn't find it by browsing the source) and from

[Citadel Development] (no subject)

2013-08-13 Thread dothebart
ok, next version. doing pretty well already; however it doesn't show all open system calls any hints which calls I should intercept also are welcome. /* * gcc -Wall -nostartfiles -fpic -shared -olibbacktrace.so backtrace_open.c */ #define _GNU_SOURCE #define _FILE_OFFSET_BITS 64 #define