Discussion:
double free in ssh2john
(too old to reply)
Hanno Böck
2015-12-08 21:54:38 UTC
Permalink
Raw Message
Hi,

There is a double free error in ssh2john if you run it against a file
that contains two ssl certificate blocks.

Just take a random certificate, add it twice to a file:
cat test.crt test.crt > out.crt

and run
ssh2john out.crt

Seems there is a loop that is freeing all openssl objects at the end of
the loop and then reusing the same objects and freeing them for every
iteration of the loop.
--
Hanno Böck
http://hboeck.de/

mail/jabber: ***@hboeck.de
GPG: BBB51E42
magnum
2015-12-08 23:47:47 UTC
Permalink
Raw Message
Post by Hanno Böck
There is a double free error in ssh2john if you run it against a file
that contains two ssl certificate blocks.
cat test.crt test.crt > out.crt
and run
ssh2john out.crt
Seems there is a loop that is freeing all openssl objects at the end of
the loop and then reusing the same objects and freeing them for every
iteration of the loop.
Thank you for reporting, I'll open an issue for it.

magnum

Loading...