netdev - Re: lnstat

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Sun, 4 Mar 2018 08:58:42 -0800
From:   Stephen Hemminger <stephen@...workplumber.org>
To:     David Kaufmann <astra@...ic.at>
Cc:     netdev@...r.kernel.org
Subject: Re: lnstat

On Sat, 3 Mar 2018 22:56:02 +0100
David Kaufmann <astra@...ic.at> wrote:

> Hi!
> 
> `lnstat` segfaults (tested on Debian 9, CentOS 6+7, Fedora 27) if it is
> started as `lnstat -w 1`
> 
> according to gdb the crash is in `build_hdr_string` at lnstat.c:212
> 
> as it seems to be an useless value for the option anyway it might make
> sense to just handle a single "1" the same as if "0" was specified.
> `-w 0,1`, `-w 1,0`, `-w 1,1` and other variations do work.

Right having one character width is breaking the header building code.
Probably should just catch it in the option parsing.

> 
> All the best,
> Astra
> 
> PS: I did not find any other place to report this, if this is the wrong
> place please tell we where to post.

This the right place.

Content of type "application/pgp-signature" skipped