Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 1 Oct 2012 07:29:45 +0200
From: magnum <>
Subject: Re: Static analysis of John using Coverity

On 1 Oct, 2012, at 2:15 , Alexander Cherepanov <> wrote:

> On 2012-09-19 03:22, magnum wrote:
>> Also, all (or nearly all) the mentioned formats use input files produced with *2john tools. The risk of bad input is low.
> Unfortunately most *2john tools either happily pass bad input through
> them or crash themselves or both. Examples are in my previous mail.
> It doesn't mean that everything have to be fixed in one day but thinking
> that 2john tools somehow guard john is just wrong. Some of these tools
> are a problem on their own.

Sure, they should be fixed. The context was "not one day before a release". A bug in valid() often crashes other formats than just the offending one.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.