IMPORTANT! There may be a glitch on this forum (Serious! Accidentally uncovered)

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Quote from: Gleb Gamow on October 29, 2016, 10:40:23 PM

Quote from: Foxpup on October 29, 2016, 10:15:52 PM

Quote from: Gleb Gamow on October 29, 2016, 08:51:10 AM

?¿?

or if you prefer

¿?¿

¿?¿Por qué no los dos?¿?

Debido a que un pájaro feo en la mano si un valor de más de un centenar de los bonitos en un arbusto.

Doesn't that mean using a single question mark properly is better than using a hundred (or three)?

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: Foxpup on October 29, 2016, 10:15:52 PM

Quote from: Gleb Gamow on October 29, 2016, 08:51:10 AM

?¿?

or if you prefer

¿?¿

¿?¿Por qué no los dos?¿?

Debido a que un pájaro feo en la mano si un valor de más de un centenar de los bonitos en un arbusto.

Foxpup

legendary

Activity: 4542

Merit: 3393

Vile Vixen and Miss Bitcointalk 2021-2023

Quote from: Gleb Gamow on October 29, 2016, 08:51:10 AM

?¿?

or if you prefer

¿?¿

¿?¿Por qué no los dos?¿?

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: ndnh on October 29, 2016, 02:04:32 AM

Quote from: Gleb Gamow on October 27, 2016, 10:14:53 PM

Quote from: Foxpup on October 27, 2016, 09:58:16 PM

Why would you resort to such an ugly hack??? My way's better.

Dude, I've yet to get to the nobbc chapter, thus my other hack ...

???

2 more!

Why would you resort to such an ugly hack

Why would you resort to such an ugly hack Huh

-

Okay, saving the best for last sans images or codes ...

?¿?

or if you prefer

¿?¿

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Quote from: Gleb Gamow on October 27, 2016, 10:14:53 PM

Quote from: Foxpup on October 27, 2016, 09:58:16 PM

Why would you resort to such an ugly hack??? My way's better.

Dude, I've yet to get to the nobbc chapter, thus my other hack ...

???

2 more!

Why would you resort to such an ugly hack

Why would you resort to such an ugly hack Huh

-

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: Foxpup on October 27, 2016, 09:58:16 PM

Why would you resort to such an ugly hack??? My way's better.

Dude, I've yet to get to the nobbc chapter, thus my other hack ...

???

Foxpup

legendary

Activity: 4542

Merit: 3393

Vile Vixen and Miss Bitcointalk 2021-2023

Why would you resort to such an ugly hack??? My way's better.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Since I'm now a certified coder Roll Eyes

, I thought I'd share with my fellow coder buddies a trick I came up after hours of research (or via happenstance) on how to quickly discover where the missing bracket is in a big table after doing several edits causing the INVALID BBCODE error to rear its ugly head.

Simply remove the third to last bracket like below, preview the post by scrolling up, and you'll see exactly where the error lies.

Code:

[/tr][/table]

[/tr[/table]

Tomorrow's lesson will be on how to ingeniously depict three consecutive question marks without generating the Huh smiley --> Huh

.

???

, but I'm still a fuckin' genius.>

FAKE EDIT (prior to posting): Okay, I have another idea on how to do it. Watch this, losers!

?.?.?

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: Spoetnik on June 29, 2016, 10:35:23 PM

Quote from: Gleb Gamow on June 26, 2016, 01:19:48 AM

Quote from: Felimon on June 25, 2016, 08:57:56 PM

The bug was not displayed on my side. What browser you are using? I'm using chrome.

I first noticed it in Chrome, but the screenshot was of it via IE, thinking at first that it may have been a browser glitch.

I see that theymos resolved the issue, but I'm gonna see if I can recreate it, so if BCT goes down in the next few minutes, blame Vod. Tongue

..we do

And wow look at you Bruno you just a regular ole hacker / bug finder hard at work like a busy bee finding them bugs like a trooper looking for that "finders fee" ahahahhaha
35 BTC ?
HOLY COW MAN !

..you reported it so it's all good Wink

I meant 35 XRA. Rumor has that that shit's goin' to da moon.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: Spoetnik on June 29, 2016, 10:35:23 PM

Quote from: Gleb Gamow on June 26, 2016, 01:19:48 AM

Quote from: Felimon on June 25, 2016, 08:57:56 PM

The bug was not displayed on my side. What browser you are using? I'm using chrome.

I first noticed it in Chrome, but the screenshot was of it via IE, thinking at first that it may have been a browser glitch.

I see that theymos resolved the issue, but I'm gonna see if I can recreate it, so if BCT goes down in the next few minutes, blame Vod. Tongue

..we do

And wow look at you Bruno you just a regular ole hacker / bug finder hard at work like a busy bee finding them bugs like a trooper looking for that "finders fee" ahahahhaha
35 BTC ?
HOLY COW MAN !

..you reported it so it's all good Wink

I meant 35 XRA. Rumor has that that shit's goin' to da moon.

Spoetnik

legendary

Activity: 1540

Merit: 1011

FUD Philanthropist™

Quote from: Gleb Gamow on June 26, 2016, 01:19:48 AM

Quote from: Felimon on June 25, 2016, 08:57:56 PM

The bug was not displayed on my side. What browser you are using? I'm using chrome.

I first noticed it in Chrome, but the screenshot was of it via IE, thinking at first that it may have been a browser glitch.

I see that theymos resolved the issue, but I'm gonna see if I can recreate it, so if BCT goes down in the next few minutes, blame Vod. Tongue

..we do

And wow look at you Bruno you just a regular ole hacker / bug finder hard at work like a busy bee finding them bugs like a trooper looking for that "finders fee" ahahahhaha
35 BTC ?
HOLY COW MAN !

..you reported it so it's all good Wink

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Quote from: theymos on June 26, 2016, 09:21:47 AM

Quote from: ndnh on June 26, 2016, 02:29:34 AM

INVALID BBCODE: unclosed tags sounds a little misleading since it happens when the center tag is closed without opening. Grin

INVALID BBCODE: bad table usage better

Is it possible that there can be more cases like this since this is the second time this thing comes up? I will also try to reproduce it, just for the fun.

OK, I changed both errors to "close of unopened tag in table".

There are a variety of ways to produce invalid HTML, but usually it's not a huge problem because the effects are confined to within your own post. It's possible that there are additional undiscovered ways to do especially disruptive things. In this case, the old code path was for inline tags and the new code path which I missed last time was for block tags. (They're in very different places in the code, and not obviously related.) I don't think that anyone really understands the SMF bbcode parser: it looks like someone quickly coded up some mainly regex-based parser that sort of worked, and then people have been constantly tweaking it to fix its bugs for 10+ years. It's terrible. I've long been thinking that I should write a proper parser in C using the traditional lex+yacc tools.

Cool!

I am really good at messing up bbcode and those two are the only issues have had yet (the narrow first column and (one of) the closing tag in table thingy here). I think nothing disruptive can be done with bbcode. We should be safe Grin

Quote

I don't think that anyone really understands the SMF bbcode parser

Totally agree Grin

theymos

administrator

Activity: 5222

Merit: 13032

Quote from: ndnh on June 26, 2016, 02:29:34 AM

INVALID BBCODE: unclosed tags sounds a little misleading since it happens when the center tag is closed without opening. Grin

INVALID BBCODE: bad table usage better

Is it possible that there can be more cases like this since this is the second time this thing comes up? I will also try to reproduce it, just for the fun.

OK, I changed both errors to "close of unopened tag in table".

There are a variety of ways to produce invalid HTML, but usually it's not a huge problem because the effects are confined to within your own post. It's possible that there are additional undiscovered ways to do especially disruptive things. In this case, the old code path was for inline tags and the new code path which I missed last time was for block tags. (They're in very different places in the code, and not obviously related.) I don't think that anyone really understands the SMF bbcode parser: it looks like someone quickly coded up some mainly regex-based parser that sort of worked, and then people have been constantly tweaking it to fix its bugs for 10+ years. It's terrible. I've long been thinking that I should write a proper parser in C using the traditional lex+yacc tools.

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Occurs when a closing tag of an unopened tag appears inside a table.

1. INVALID BBCODE: bad table usage (The table tag can be closed. Has nil effect)

Code:

[table][tr][td][/b]

Code:

[table][tr][td][/i]

Code:

[table][tr][td][/u]

Code:

[table][tr][td][/b]

Code:

[table][tr][td][/s]

Code:

[table][tr][td][/sub]

Code:

[table][tr][td][/sup]

Code:

[table][tr][td][/color]

size, font, glow, image, url..... and everything else.

2. INVALID BBCODE: unclosed tags

Code:

[table][tr][td][/center]

Code:

[table][tr][td][/left]

Code:

[table][tr][td][/right]

Code:

[table][tr][td][/quote]

Code:

[table][tr][td][/list]

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Quote from: theymos on June 25, 2016, 11:02:51 PM

I think that this is no security risk whatsoever, but just to be safe I made the bbcode parser return an error in this case.

INVALID BBCODE: unclosed tags sounds a little misleading since it happens when the center tag is closed without opening. Grin

INVALID BBCODE: bad table usage better

Is it possible that there can be more cases like this since this is the second time this thing comes up? I will also try to reproduce it, just for the fun.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: Felimon on June 25, 2016, 08:57:56 PM

The bug was not displayed on my side. What browser you are using? I'm using chrome.

I first noticed it in Chrome, but the screenshot was of it via IE, thinking at first that it may have been a browser glitch.

I see that theymos resolved the issue, but I'm gonna see if I can recreate it, so if BCT goes down in the next few minutes, blame Vod. Tongue

theymos

administrator

Activity: 5222

Merit: 13032

Quote from: Quickseller on June 25, 2016, 11:12:20 PM

Do you think this might have something to do with the issue with tables that Dogie was having earlier today? (Maybe both issues have the same root cause).

That seems very unlikely.

Quickseller

copper member

Activity: 2996

Merit: 2374

Do you think this might have something to do with the issue with tables that Dogie was having earlier today? (Maybe both issues have the same root cause).

theymos

administrator

Activity: 5222

Merit: 13032

I think that this is no security risk whatsoever, but just to be safe I made the bbcode parser return an error in this case.

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

I remember posting about a very similar bug..

Let me check.

Edit.
https://bitcointalksearch.org/topic/bitcointalk-bbcode-new-feature-the-hobbit-header-1092872

Edit2.
It is the same thing. Omitting the opening center tag is the cause. theymos had fixed it with an error message, may be a little more to fix now.
https://bitcointalksearch.org/topic/m.11656030

Accountbr

member

Activity: 70

Merit: 10

Quote from: Gleb Gamow on June 25, 2016, 08:26:00 PM

Quote from: Cyrus on June 25, 2016, 07:53:54 PM

I've contacted theymos about it.

Hey, I forgot something. Do I send you or theymos my bitcoin wallet address for my 35 BTC finders fee? Tongue

You can't get a finders fee if you posted in public.

Felimon

full member

Activity: 238

Merit: 100

The bug was not displayed on my side. What browser you are using? I'm using chrome.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: Cyrus on June 25, 2016, 07:53:54 PM

I've contacted theymos about it.

Hey, I forgot something. Do I send you or theymos my bitcoin wallet address for my 35 BTC finders fee? Tongue

Cyrus

administrator

Activity: 3962

Merit: 3184

I've contacted theymos about it.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

https://bitcointalksearch.org/topic/m.15303430

I don't think that one should be able to embed content above the post's user's profile/above the fold.

Here's the code that I just changed to in seeing if you can make heads or tails as to how was accomplished, for I'm at sea.

Code:

[tr][td][/td] [td][url=https://bitcointalk.org/index.php?action=profile;u=537536][b]xavier77[/b][/url][/td] [td](F)[/td] [td][color=red][b]N[/b][/color][/center][/td] [td][url=https://bitcointalk.org/index.php?topic=1521348.msg15330030#msg15330030]June 23 03:28:12 AM[/url][/td] [td]218[/td][/tr]

It was changed from:

Code:

[tr][td]109[/td] [td][url=https://bitcointalk.org/index.php?action=profile;u=537536][b]xavier77[/b][/url][/td] [td](F)[/td] [td][center]Q[/center][/td] [td][url=https://bitcointalk.org/index.php?topic=1521348.msg15330030#msg15330030]June 23 03:28:12 AM[/url][/td] [td]218[/td][/tr]

EDIT: Found out how it was done prior to posting this thread. The following was omitted:

Code:

[center]

Not sure to what ends/extent, but I'm pretty sure a nefarious hacker could exploit such a glitch.

Topic: IMPORTANT! There may be a glitch on this forum (Serious! Accidentally uncovered) (Read 2201 times)