Subj : oxp locks up, again
To   : August Abolins
From : Martin Foster
Date : Sun Feb 09 2020 11:36:00

Hello August!

*** 19.01.20 at 11:44, August Abolins wrote to Martin Foster:

[snip]
 AA> Which leads me to the security/bug/weakeness.

 AA> If the FILES directory is used for the arriving nodelists, and it is the
 AA> same directory for other arriving files such as attachments from other
 AA> people, then anyone could arbitrarily send me a nodelist, and its
 AA> presence can screw up oxp (just like the presence of the old
 AA> nodelist/diffs that I still had in there did).

It wasn't the presence of the old nodlists/diffs that was causing the  
problem :)

However, if OpenXP sees a nodelist in the FILES directory, it ignores it  
just as it ignores most other files in the FILES directory. The only files  
it takes action on are nodediffs/pointdiffs and if any of them are out of  
sequence, it just ignores them.

Regards,
Martin

--- OpenXP 5.0.43
 * Origin: Bitz-Box - Bradford - UK (2:310/31.3)

.