Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 24 Apr 2013 20:34:22 +0200
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: testing all valid()s

On 24 Apr, 2013, at 3:00 , Alexander Cherepanov <cherepan@...me.ru> wrote:
> On 2013-04-23 18:55, Alexander Cherepanov wrote:
>> I'll will gather it all together and post it a bit later.
> 
> Here it is. Only unstable is checked, bleeding is for later.

Yes, please do not care about bleeding until Jumbo-8 is released.

> 1. Crashes:
> 
> for format in clipperz dmd5 dmg episerver ike keyring mschapv2 netntlmv2 salted-sha1; do
>  echo ">> $format"
>  ./john --max-run-time=1 --format="$format" crashes.txt
> done

I have fixed DMD5. If I do anymore at all, it'll be salted-sha1 and then possibly mschapv2 and netntlmv2 (actually, all net* formats probably have similar bugs).

> 2. Self-test fails:
> 
> for format in dynamic_1001 md5ns; do
>  echo ">> $format"
>  ./john --max-run-time=1 --format="$format" selftests.txt
> done

I have fixed md5ns.

> 4. Strange crash (it doesn't occurs with --format):
> 
> ./john crash_wpapsk.txt

This is asa-md5 (a thin dynamic format) crashing in dynamic's valid(). An educated guess is that if you delete the asa-md5 plugin, pix-md5 will crash instead. I'll leave this to Jim.

magnum


Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ