Mailing List Archive

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 19 Nov 1999, Berend De Schouwer wrote:

> RH6.0, Intel, openssh-1.2pre13
>
> If I generate /etc/ssh_host_key, it works, if I generate
> /root/.ssh/identity it segfaults. Every time.

Fixed. There was a buffer overrun in the filename handling.
Please try the attached patch.

Regards,
Damien Miller

> # ssh-keygen
> Generating RSA keys: Key generation complete.
> Enter file in which to save the key (/root/.ssh/identity):
> Enter passphrase (empty for no passphrase):
> Enter same passphrase again:
> Your identification has been saved in /root/.ssh/identity.
> Your public key is:
> 1024 35 120157590 ...... 3660088497 root@bongw3.bonus.co.za
> Segmentation fault (core dumped)
>
> # ssh-keygen
> Generating RSA keys: Key generation complete.
> Enter file in which to save the key (/root/.ssh/identity): /etc/ssh_host_key
> Enter passphrase (empty for no passphrase):
> Enter same passphrase again:
> Your identification has been saved in /etc/ssh_host_key.
> Your public key is:
> 1024 35 167064111 ...... 49601307 root@bongw3.bonus.co.za
> Your public key has been saved in /etc/ssh_host_key.pub
>
> (keys shortened for mail)
>
> Following is from a backtrace:
> # gdb ssh-keygen /root/core
> GNU gdb 4.17.0.11 with Linux support
> Copyright 1998 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License, and you are
> welcome to change it and/or distribute copies of it under certain conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB. Type "show warranty" for details.
> This GDB was configured as "i386-redhat-linux"...
> Core was generated by `ssh-keygen'.
> Program terminated with signal 11, Segmentation fault.
> Reading symbols from /lib/libpam.so.0...done.
> Reading symbols from /lib/libdl.so.2...done.
> Reading symbols from /lib/libnsl.so.1...done.
> Reading symbols from /usr/lib/libz.so.1...done.
> Reading symbols from /lib/libutil.so.1...done.
> Reading symbols from /lib/libc.so.6...done.
> Reading symbols from /lib/ld-linux.so.2...done.
> Reading symbols from /lib/libnss_files.so.2...done.
> #0 chunk_alloc (ar_ptr=0x40132580, nb=184) at malloc.c:2723
> malloc.c:2723: No such file or directory.
> (gdb) bt
> #0 chunk_alloc (ar_ptr=0x40132580, nb=184) at malloc.c:2723
> #1 0x400a1b8a in __libc_malloc (bytes=176) at malloc.c:2616
> #2 0x4009ae5b in _IO_new_fopen (filename=0x8068e80 "/root/.ssh/identity.¹",
> mode=0x805f6e3 "w") at iofopen.c:42
> #3 0x804a14f in main (ac=1, av=0xbffffd64) at ssh-keygen.c:574
> #4 0x40061cb3 in __libc_start_main (main=0x8049b44 <main>, argc=1,
> argv=0xbffffd64, init=0x8048e10 <_init>, fini=0x805f43c <_fini>,
> rtld_fini=0x4000a350 <_dl_fini>, stack_end=0xbffffd5c)
> at ../sysdeps/generic/libc-start.c:78
> (gdb)
>
>
> Funny filename "/root/.ssh/identity.¹"
>
> --
> Kind regards,
> Berend
>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> Berend De Schouwer, +27-11-712-1435, UCS
>
>

- --
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm@mindrot.org (home) -or- djm@ibs.com.au (work)


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.0 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE4NjZvormJ9RG1dI8RAqweAKCIdcMsIn9Vvuv7XOC+c4q6VwSpJACfRCo6
OOgqwWcT9PLydyNVNNDFONo=
=XjB/
-----END PGP SIGNATURE-----