Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 12 Mar 2011 14:04:26 +0100
From: magnum <rawsmooth@...dband.net>
To: john-dev@...ts.openwall.com
Subject: Re: New update to md5-gen, AND changes to the john core
 'format' structures. (diff posted to Wiki)

On 03/12/2011 04:37 AM, jfoug wrote:
>> From: magnum [mailto:rawsmooth@...dband.net]
>> Fwiw I think I saw a misformatteded NT-format (using $NT$) hash file
>> result in segfault because there was : in user names (all of them, so in
>> practice there was a field between user and hash throughout the whole
>> file, and it was not an LM hash). Just a heads up, I haven't had time to
>> confirm or reproduce it.
>
> Please try to get an input file.  There is some strangeness in the NT

Here is an input file that produce a segfault. It does have some 
misformatted lines (first colon meant to be _) but there seem to be more 
parameters involved.

Program received signal SIGSEGV, Segmentation fault.
0x0000000000452ad4 in ldr_init_hash (db=0x6d6320) at loader.c:676
676					    db->format->methods.binary_hash[size] &&
(gdb) bt
#0  0x0000000000452ad4 in ldr_init_hash (db=0x6d6320) at loader.c:676
#1  ldr_fix_database (db=0x6d6320) at loader.c:698
#2  0x00000000004506a2 in john_load (argc=<value optimized out>, 
argv=<value optimized out>) at john.c:326
#3  john_init (argc=<value optimized out>, argv=<value optimized out>) 
at john.c:397
#4  main (argc=<value optimized out>, argv=<value optimized out>) at 
john.c:503

magnum

user:$NT$c75b16cbd3c0300706b9218158e6c8b4:::
user:$NT$b290318044b4eb23fa08876f12083473:::
user:$NT$bd19460827f797bf767e6ebd7076906c:::
user���:$NT$ff6ebb6bf5f204373da2e84f20429d94:::���
user￾￾￾:$NT$f388705a2e7f47dec2affb8ef2bd9ef0:::￾￾￾
user1-1: :$NT$71c5391067de41fad6f3063162e5eeff::: 
user1-1:!:$NT$293d9afb2eae75a0d90c29f89df107f4:::!
user1-1:":$NT$6a5320b12e6cca595ce44fbe3969b8d4:::"
user1-1:#:$NT$cf07b7ddd01ee4aff09be196f9f0a61b:::#
user1-1:$:$NT$8d35a564630be8d19e90511a7ebd761c:::$

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ