Another exploit was identified that can crash even the recently released version 6.12. It only seems to affect people who minimize DCC get dialog windows (manually or by default), and then open those windows to get a file with an excessively long filename. You cannot be crashed unless that sequence of events occurs. That manual step is required. If you auto-get the file, or do not get the file at all, nothing happens.
Workaround:
If you think the above affects you, then here is a temporary fix that should be pasted in your "remotes" section (alt-r to access). The below script rejects any excessively long filename: ctcp *:dcc send:*: if ($len($nopath($filename)) >= 225) { echo 4 -s $nick tried to crash you with an illegal dcc send of $nopath($filename) | halt }
Alternatively, this shorter version without the warning message: ctcp *:dcc send:*: if ($len($nopath($filename)) >= 225) halt
If you are not comfortable with modifying your remotes, you can just ignore all incoming DCC sends with the following, which is the same temporary fix as for the other bug described in the next section: /ignore -wd *
You can undo the above command by /ignore -rwd * (note the r for remove).
