[Debian-audit] Talking of being beaten to things ..

  A long time ago I noticed that gnocatan was vulnerable to
 *something*. I guess this is kinda public because I wrote about
 it on the Livejournal shellcode community at the time:

        http://www.livejournal.com/community/shellcode/

  I could never narrow down the cause well enough to report it, but it might
 be worth somebody looking at it if they're bored.

  What I did was connect to a running server (gnocatan-server-gtk)
 and emulate a client login request. Once that's done you can use
 the "chat" command to send messages to all the other users of the
 game.

  Semi-randomly you could cause either the server, or a single
 connected client, or all connected clients to die. I couldnt
 ever pin it down properly, and looking at the source wasn't
 terribly enlightening.

  Using gdb on a multi-threaded application was painful so it
 pretty much just sat there.

  Consider it a challenge ;)

Steve

--