4 ms·
Using the writeup I managed to find a crashing SSH-key which would give `ssh-keygen -l -f $file` a segfault. Great writeup, and a great tool. Bug reported to
by stevekemp 11y ago
Using the writeup I managed to find a crashing SSH-key which would give `ssh-keygen -l -f $file` a segfault.
Great writeup, and a great tool.
Bug reported to Debian, where it languishes:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=801530 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=801530
Reported upstream, and seem to be fixed somewhere between OpenSSH 6.6 and 6.8:
http://lists.mindrot.org/pipermail/openssh-unix-dev/2015-October/034455.html http://lists.mindrot.org/pipermail/openssh-unix-dev/2015-Oct...
Brief background on the reason for searching:
http://blog.steve.org.uk/so_about_that_idea_of_using_ssh_keygen_on_untrusted_input_.html http://blog.steve.org.uk/so_about_that_idea_of_using_ssh_key...