Re: CVE request: Digest::SHA double free when using load subroutine

[Salvatore Bonaccorso <carnil () debian org>]

Hi Kurt and Florian

On Tue, Jan 15, 2013 at 10:37:59PM -0700, Kurt Seifried wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 01/15/2013 12:37 PM, Florian Weimer wrote:
> > * Kurt Seifried:
> >
> > > I'm not clear, how would an attacker exploit this? They'd need to
> > > be able to specify the file that gets hashed, and the file would
> > > have to be not present and would thus trigger the crash? Are
> > > there any real world examples of an affected application? (web
> > > based?)
> >
> > My hunch is that this is just a bug, not a security issue.
>
> I'll leave it for now, if anyone comes up with a security impact/etc.
> let us know! (I bet this never happens, ah well =).

Thanks for your feedback on this.

Regards,
Salvatore