[zeromq-dev] zmq_server can be remotely crashed with telnet

Martin Sustrik sustrik at fastmq.com
Mon Mar 16 19:57:36 CET 2009


Aamir,

> FYI, there is some instability in the latest version of zmq_server
> (from trunk). If you telnet to the box running zmq_server (on the
> appropriate port) and then press ctrl+c, zmq_server dies with the
> following message:
> 
> zmq_server: zmq_server.cpp:296: int __unixcall main(int, char **):
> Assertion `false' failed.
> 
> Seems kind of dangerous since people sometimes use telnet to quickly
> see if a service is accessible.

Thanks for pointing this out. You are right: zmq_server is vulnerable to 
deliberately malformed input data. We'll fix the issue shortly.

Martin



More information about the zeromq-dev mailing list