{"action":"created","issue":{"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2255","repository_url":"https://api.github.com/repos/magnumripper/JohnTheRipper","labels_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2255/labels{/name}","comments_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2255/comments","events_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2255/events","html_url":"https://github.com/magnumripper/JohnTheRipper/issues/2255","id":174803039,"number":2255,"title":"gpg2john segfaults with fuzzed input","user":{"login":"frank-dittrich","id":2026819,"avatar_url":"https://avatars.githubusercontent.com/u/2026819?v=3","gravatar_id":"","url":"https://api.github.com/users/frank-dittrich","html_url":"https://github.com/frank-dittrich","followers_url":"https://api.github.com/users/frank-dittrich/followers","following_url":"https://api.github.com/users/frank-dittrich/following{/other_user}","gists_url":"https://api.github.com/users/frank-dittrich/gists{/gist_id}","starred_url":"https://api.github.com/users/frank-dittrich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/frank-dittrich/subscriptions","organizations_url":"https://api.github.com/users/frank-dittrich/orgs","repos_url":"https://api.github.com/users/frank-dittrich/repos","events_url":"https://api.github.com/users/frank-dittrich/events{/privacy}","received_events_url":"https://api.github.com/users/frank-dittrich/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/labels/bug","name":"bug","color":"e11d21"},{"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/labels/Fixed%20-%20pending%20verify","name":"Fixed - pending verify","color":"fef2c0"}],"state":"open","locked":false,"assignee":{"login":"frank-dittrich","id":2026819,"avatar_url":"https://avatars.githubusercontent.com/u/2026819?v=3","gravatar_id":"","url":"https://api.github.com/users/frank-dittrich","html_url":"https://github.com/frank-dittrich","followers_url":"https://api.github.com/users/frank-dittrich/followers","following_url":"https://api.github.com/users/frank-dittrich/following{/other_user}","gists_url":"https://api.github.com/users/frank-dittrich/gists{/gist_id}","starred_url":"https://api.github.com/users/frank-dittrich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/frank-dittrich/subscriptions","organizations_url":"https://api.github.com/users/frank-dittrich/orgs","repos_url":"https://api.github.com/users/frank-dittrich/repos","events_url":"https://api.github.com/users/frank-dittrich/events{/privacy}","received_events_url":"https://api.github.com/users/frank-dittrich/received_events","type":"User","site_admin":false},"assignees":[{"login":"frank-dittrich","id":2026819,"avatar_url":"https://avatars.githubusercontent.com/u/2026819?v=3","gravatar_id":"","url":"https://api.github.com/users/frank-dittrich","html_url":"https://github.com/frank-dittrich","followers_url":"https://api.github.com/users/frank-dittrich/followers","following_url":"https://api.github.com/users/frank-dittrich/following{/other_user}","gists_url":"https://api.github.com/users/frank-dittrich/gists{/gist_id}","starred_url":"https://api.github.com/users/frank-dittrich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/frank-dittrich/subscriptions","organizations_url":"https://api.github.com/users/frank-dittrich/orgs","repos_url":"https://api.github.com/users/frank-dittrich/repos","events_url":"https://api.github.com/users/frank-dittrich/events{/privacy}","received_events_url":"https://api.github.com/users/frank-dittrich/received_events","type":"User","site_admin":false}],"milestone":null,"comments":10,"created_at":"2016-09-02T16:50:13Z","updated_at":"2016-09-17T12:56:43Z","closed_at":null,"body":"This is the contents of fail_gpg2john-1.hex:\r\n```\r\na6dba6db0002271700022717\r\n```\r\n(no newline, in case it matters for base64conf)\r\n\r\n```\r\n~/git/JtR/run$ ./base64conv -q -i hex -o raw -r fail_gpg2john-1.hex -w fail_gpg2john-1.raw\r\n~/git/JtR/run$ ./gpg2john fail_gpg2john-1.raw\r\n\tEncrypted data [sym alg is IDEA, simple string-to-key]\r\n[gpg2john] MDC is misssing, expect false positives!\r\nASAN:SIGSEGV\r\n=================================================================\r\n==28549==ERROR: AddressSanitizer: SEGV on unknown address 0x7ffc8d3ec4f3 (pc 0x7f5a157955ab bp 0x000000000001 sp 0x7ffcd5f106e0 T0)\r\n    #0 0x7f5a157955aa in _IO_default_xsputn (/lib/x86_64-linux-gnu/libc.so.6+0x7b5aa)\r\n    #1 0x7f5a15767200 in vfprintf (/lib/x86_64-linux-gnu/libc.so.6+0x4d200)\r\n    #2 0x7f5a1582fe93 in __vsprintf_chk (/lib/x86_64-linux-gnu/libc.so.6+0x115e93)\r\n    #3 0x7f5a1582fdec in __sprintf_chk (/lib/x86_64-linux-gnu/libc.so.6+0x115dec)\r\n    #4 0xe6fea5 in sprintf /usr/include/x86_64-linux-gnu/bits/stdio2.h:33\r\n    #5 0xe6fea5 in Symmetrically_Encrypted_Data_Packet /home/ubuntuadm/git/JtR/src/gpg2john.c:953\r\n    #6 0xe84bb3 in parse_packet /home/ubuntuadm/git/JtR/src/gpg2john.c:1531\r\n    #7 0xe87714 in gpg2john /home/ubuntuadm/git/JtR/src/gpg2john.c:360\r\n    #8 0x419909 in main /home/ubuntuadm/git/JtR/src/john.c:1933\r\n    #9 0x7f5a1573a82f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)\r\n    #10 0x422628 in _start (/home/ubuntuadm/git/JtR/run/john+0x422628)\r\n\r\nAddressSanitizer can not provide additional info.\r\nSUMMARY: AddressSanitizer: SEGV ??:0 _IO_default_xsputn\r\n==28549==ABORTING\r\n```\r\n\r\nSimilar segfaults with these files converted back from hex to raw:\r\n```\r\nc9ffff7ffffffc\r\n```\r\n```\r\nd2ffff000010000000ff283a19fe45\r\n```"},"comment":{"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/comments/247768015","html_url":"https://github.com/magnumripper/JohnTheRipper/issues/2255#issuecomment-247768015","issue_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2255","id":247768015,"user":{"login":"frank-dittrich","id":2026819,"avatar_url":"https://avatars.githubusercontent.com/u/2026819?v=3","gravatar_id":"","url":"https://api.github.com/users/frank-dittrich","html_url":"https://github.com/frank-dittrich","followers_url":"https://api.github.com/users/frank-dittrich/followers","following_url":"https://api.github.com/users/frank-dittrich/following{/other_user}","gists_url":"https://api.github.com/users/frank-dittrich/gists{/gist_id}","starred_url":"https://api.github.com/users/frank-dittrich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/frank-dittrich/subscriptions","organizations_url":"https://api.github.com/users/frank-dittrich/orgs","repos_url":"https://api.github.com/users/frank-dittrich/repos","events_url":"https://api.github.com/users/frank-dittrich/events{/privacy}","received_events_url":"https://api.github.com/users/frank-dittrich/received_events","type":"User","site_admin":false},"created_at":"2016-09-17T12:56:43Z","updated_at":"2016-09-17T12:56:43Z","body":"Same on my fedora 24 system:\r\n\r\n```sh\r\n(bleeding-jumbo)run $ echo \"00000000: a0e8 03                                  ...\"|xxd -r > hang_gpg2john\r\n(bleeding-jumbo)run $ ./gpg2john hang_gpg2john\r\n\r\n```\r\n... and gpg2john hangs"}}
{"actor":{"display_login":"frank-dittrich"}}