Tracker error (bencoding)

[Devoran]

Hi guys,

I'm guessing this is a problem specific to one of the trackers I use - but wanted to check anyway. I'm getting the following note when connecting to the tracker in question, though all downloads/uploads etc seem to work fine. (IP addresses xx'ed out :p)

Error: invalid bencoding of tracker response: "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Uowqp_V'' at line 1d8:intervali1800e5:peersld2:ip13:xx.xx.xx.xx7:peer id20:-AZ4202-3PIB9vC7O9NQ4:porti27399eed2:ip13:xx.xx.xx.xx7:peer id20:-DE1170-*YcX'Uowqp_V4:porti51426eeee"

This particular tracker uses SSL, not sure if it's anything to do with that. Anything to point me in the right direction would be great (the nix box already has the tracker's self-signed cert loaded etc as utorrent/wine and rtorrent have no issue with it.. really wanna use Deluge though )

[andar]

Looks to me that your tracker is insecure and could possibly allow sql injection attacks. You should probably tell your tracker admin to fix it.

[johnnyg]

Out of curiosity, what tracker is that?

[andar]

Out of curiosity, what tracker is that?

Yea.. We'll "fix" it for them..

[Devoran]

Interestingly enough, I updated to your dev build from SVN and the error is gone, announcing fine at that particular tracker /shrug

Thanks anyway

[johnnyg]

I would still inform your tracker admin as that's a serious vulnerability.

[andar]

That's because the letters in the peer-id are random, so it will only happen if one of those happen to be a '

Yes, I would still inform your tracker..

[Devoran]

Thanks, have since done so. Cheers for the heads up