tags 528219 + fixed-upstream pending
fixed 528219 1.0-1
thanks

Olivier Cailloux <[email protected]> writes:

> Hello,
>
>     A standard file descriptor "-" can be used to request "stdin".
>     No changes to the code is needed. Closing bug as no-op.
>
> 1) About providing passwords in a pipe: this is not correct, or I can't find 
> how to use it. Example (using unpatched fcrackzip
> version 0.3):
> $ fcrackzip -p pw ploum.zip
> possible pw found: sT ()
> possible pw found: xK ()
> possible pw found: zJ ()
> possible pw found: A* ()
> possible pw found: Er ()
> possible pw found: Kn ()
> ... (etc.)
> BUT
> $ fcrackzip -p - ploum.zip < pw
> displays nothing and returns (i.e., is not equivalent to the first command)

fixed in 1.0

    $ fcrackzip --version
    fcrackzip version 1.0

    $ touch a b c
    $ zip -e test.zip a b c
    Enter password: ab
    Verify password: ab

      adding: a (stored 0%)
      adding: b (stored 0%)
      adding: c (stored 0%)

    $ echo cc > input.pass
    $ fcrackzip -c a -u -v -v -p -l 1-2 - test.zip < input.pass

    skipping '1-2': No such file or directory
    skipping '-': No such file or directory
    found file 'a', (size cp/uc     12/     0, flags 9, chk a2c1)
    found file 'b', (size cp/uc     12/     0, flags 9, chk a2c1)
    found file 'c', (size cp/uc     12/     0, flags 9, chk a2c1)

    PASSWORD FOUND!!!!: pw == ab

> 2) The provided patch claims it corrects a bug related to a
> non-initialized variable in the code. Please look at the patch. This
> can produce a segmentation fault (happened to me several times) or
> other undesired behaviors.

According to upstream the initialization is handled differently in 1.0,
so patch is obsolete in this regard.

Jari



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to