search

irssi-import / bugs.irssi.org

bugs.irssi.org archive
https://github.com/irssi/irssi/issues
0 stars 0 forks source link

Strange timestamp display exploit #838

Open irssibot opened 12 years ago

irssibot commented 12 years ago

I've encountered a strange UTF-(x) related bug in irssi. Someone from syria is sending strange encoded messages which totally fucks up the timestamps.

I'm not sure how this is possible, but i do know that timestamps is clientside, so this must be a bug in irssi.

Here's some related settings;

17:41:35 [lookandfeel] 17:41:35 timestamp_format = %H:%M:%S

17:56:47 [lookandfeel] 17:56:47 term_charset = utf-8

17:56:47 [misc] 17:56:39 recode_out_default_charset = utf-8

See attached screenshot for the actual displying of the timestamps, and see the .txt for what he actually sent. (copy'n'paste, so it may not be correct utf-8 chars)

irssibot commented 12 years ago

Not sure if the attachments did upload correctly.

irssibot commented 12 years ago

irc[1].png

838_2c1f87493065ce6149cf8aa0e7

irssibot commented 12 years ago

irc[1].txt

 ~JODE@188.229.141.64 (freenode)
01:15:35 -!- Irssi: Starting query in freenode with Syria
01:15:35 <Syria> هاي
01:16:02 <Syria> انا ‏BOMBA
01:16:59 <Syria> جيني
01:19:26  * Syria JINE
01:21:42 -!- Syria is now known as BOMBA
01:21:42 <BOMBA> جيني
01:28:43 <BOMBA> شو
01:28:51 <BOMBA> جيني
01:30:44 <BOMBA> ؟
01:34:23 <BOMBA> شو
02:09:20 <BOMBA> هاي
02:09:55 <BOMBA> جيني
08:42:07 <jine> ... ?
08:42:07 -!- BOMBA: No such nick/channel
16:43:29 <BOMBA> هاي
16:48:52 <BOMBA> ؟
17:16:11 <BOMBA> ب
17:17:16 <BOMBA> جيني
17:34:18 <jine> Who are you?
17:34:18 -!- BOMBA: No such nick/channel
irssibot commented 10 years ago

This is happening because he's typing in Arabic, which is a right-to-left language, as opposed to English, which is left-to-right. Hilariously, the timestamp printout is having this logic applied to it.

For example, the timestamp 17:16:11 is being printed as 11:61:71.

You're welcome irssi people.