[JDEV] DOS is mod_filter (was Bug in mod_filter.c)

[Nathan Sharp]

tomash,
  Thanks for the complete bug report.  Your fix is in fact not bad (may 
be that a deliver_fail() call is more appropriate so the error is 
reported somehow).   In general mod_filter is considered unstable by the 
jabberd developers (it has been disabled by default in CVS).  If this is 
a feature which is critical to people's use of jabberd, it will require 
a maintainer and probably a good deal of work (perhaps starting at the 
design level).  

  In the meantime, production server administators should disable 
mod_filter.

  Nathan

tomash wrote:

> Hi,
> maybe I have found a bug in mod_filter.c in jabber1.4.2. Here is 
> description of situation,
> in which the server is deterministically crashing:
>
>    <forward>/dev/null</forward>
>
> Variable "new" is NULL at this time.
>
> I'm not so familiar with the jabberd source, so I don't know how to 
> solve this correctly, so I have
> created this dirty fix. Server is not crashing any more (at last this 
> way :-) ).
>