[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [computer-go] Wishlist for playing programs on KGS

I hadn't really thought about it, but Jason has good points. I'll have
to make sure to never send the chats if your engine doesn't agree to
support them. And newlines are not an issue, the server does indeed
strip all newlines out of chat messages before they are sent. It would
probably be best for kgsGtp to strip out all escape characters (values
0..31), to ensure that engines don't get confused. Thanks for the
reminders on these.

On Thu, 2005-10-13 at 13:35 -0400, Jason House wrote:
> If I remember right, only newlines have special handling by kgsGtp.  As
> far as I know, chat's are limited to a single line so there should be no
> issues.
>    Additionally, if the user doesn't list kgs_talk in it's supported
> commands, then nothing will be sent.
> Arend Bayer wrote:
> > I am worried that you are just opening a big can of worm here. Are you
> > sure that you can keep the chat messages free of special character that
> > would invalidate the GTP stream? Or there could be a bug in the engine
> > with the handling of GTP-allowed characters that have never appeared
> > before, that allows any KGS observer to crash a robot running on KGS.
> > You may at some point want to allow unicode in user names.
> > (Ok I won't start about the buffer overflow in the GTP input handling of
> > my engine that allows a remote exploit via KGS chat :)
> > 
> > I think if you do that, you should at least give a configuration option
> > to limit the kgs-chat interface to a specified list of KGS usernames.
> _______________________________________________
> computer-go mailing list
> computer-go@xxxxxxxxxxxxxxxxx
> http://www.computer-go.org/mailman/listinfo/computer-go/

computer-go mailing list