Page 1 of 1

Tracker error (bencoding)

Posted: Thu May 07, 2009 4:44 pm
by Devoran
Hi guys,

I'm guessing this is a problem specific to one of the trackers I use - but wanted to check anyway. I'm getting the following note when connecting to the tracker in question, though all downloads/uploads etc seem to work fine. (IP addresses xx'ed out :p)

Error: invalid bencoding of tracker response: "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Uowqp_V'' at line 1d8:intervali1800e5:peersld2:ip13:xx.xx.xx.xx7:peer id20:-AZ4202-3PIB9vC7O9NQ4:porti27399eed2:ip13:xx.xx.xx.xx7:peer id20:-DE1170-*YcX'Uowqp_V4:porti51426eeee"

This particular tracker uses SSL, not sure if it's anything to do with that. Anything to point me in the right direction would be great (the nix box already has the tracker's self-signed cert loaded etc as utorrent/wine and rtorrent have no issue with it.. really wanna use Deluge though :) )

Re: Tracker error (bencoding)

Posted: Thu May 07, 2009 5:37 pm
by andar
Looks to me that your tracker is insecure and could possibly allow sql injection attacks. You should probably tell your tracker admin to fix it.

Re: Tracker error (bencoding)

Posted: Thu May 07, 2009 6:00 pm
by johnnyg
Out of curiosity, what tracker is that?

Re: Tracker error (bencoding)

Posted: Thu May 07, 2009 6:01 pm
by andar
johnnyg wrote:Out of curiosity, what tracker is that?
Yea.. We'll "fix" it for them.. :)

Re: Tracker error (bencoding)

Posted: Fri May 08, 2009 5:54 am
by Devoran
Interestingly enough, I updated to your dev build from SVN and the error is gone, announcing fine at that particular tracker /shrug

Thanks anyway ;)

Re: Tracker error (bencoding)

Posted: Fri May 08, 2009 9:42 am
by johnnyg
I would still inform your tracker admin as that's a serious vulnerability.

Re: Tracker error (bencoding)

Posted: Fri May 08, 2009 6:24 pm
by andar
That's because the letters in the peer-id are random, so it will only happen if one of those happen to be a '

Yes, I would still inform your tracker..

Re: Tracker error (bencoding)

Posted: Sat May 09, 2009 8:45 am
by Devoran
Thanks, have since done so. Cheers for the heads up