[core-dev] [limewire jira] Created: (CORE-7) It is possible to trick LimeWire to download corrupt files

DO NOT REPLY TO THIS EMAIL.
PLEASE POST YOUR COMMENTS THROUGH THE WEB INTERFACE AT
http://www.limewire.org/jira/browse/CORE-7
ANY REPLY MADE TO THIS MESSAGE WILL BE DISCARDED.


The following issue has been created:


Here is an overview of the issue:
---------------------------------------------------------------------
        Key: CORE-7
    Summary: It is possible to trick LimeWire to download corrupt files
       Type: Bug

     Status: Open
   Priority: Minor

    Project: core
 Components: 
             downloader

   Assignee: Greg Bildson
   Reporter: Brandon Low

    Created: Thu, 22 Jul 2004 10:57 AM
    Updated: Thu, 22 Jul 2004 10:57 AM

Description:
As near as I can discern from conversation on #limewire, it is possible for a highly placed bad result for a file with an incorrect size, but reporting the URN-SHA1 of the correct file, to trick LimeWire into downloading an incorrectly sized file in place of the correct file.  At the end of the transfer, LimeWire reports that the download is corrupted, so this is not a case of someone finding duplicated URN-SHA1s.  Zlatin's think was that it is a problem in the search side of things not verifying reported sizes if the reported SHA1s are the same.

View the issue:
  http://www.limewire.org/jira/browse/CORE-7

---------------------------------------------------------------------
This message was generated by JIRA, LimeWire.org's issue tracking system.

If you think it was sent incorrectly contact one of the administrators:
   http://www.limewire.org/jira/secure/Administrators.jspa

_______________________________________________
core-dev mailing list
[email protected]
http://www.limewire.org/mailman/listinfo/core-dev