Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 4 May 2013 00:42:18 +0200
From: Lukas Odzioba <>
Subject: Re: Yet more crashes

2013/5/3 magnum <>:
> This was b0rken.
> $ ../run/john --test -form:sip
> Benchmarking: SIP MD5 [32/64]... FAILED (valid)
> +       if (strspn(ciphertext, "*") != 14)
> +               return 0;
> This strspn() will return the length of ciphertext, from start of it, that consist of characters within the string "*", ie. none. For eg. "**hel*lo**" it would return 2.

Fsck this was stupid...I am sorry about that.

Download attachment "sip_valid_fixed.diff" of type "application/octet-stream" (735 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.