I tweeted Don about it, I hope he sends more details soon so we can start patching it.
On 11/08/2014 07:46 PM, David Goulet wrote: > On 08 Nov (18:39:57), Gregory Maxwell wrote: >> People were circulating this pastebin around on IRC, since I don't see >> any git traffic for it... >> >> http://pastebin.com/se58hAmt > We have no idea what the bug is actually... :S > > Would be really great if people actually report bugs instead of entering > twitter vanity contest... We even put up a security disclosure email > account for more severe things that people can report securely. > > See on https://bugs.otr.im > > Cheers! > David > >> # >> # LibOTR memory corruption in 4 hours >> # While waiting for conference calls >> # Using latest git pulled from git.otr.im/libotr.git >> # d...@securitymouse.com >> # >> >> donb@x-VirtualBox:~$ !LD >> LD_LIBRARY_PATH=lib/src/libotr/libotr/src/.libs ./otr >> encoded base64 >> sending message >> version is 2 >> to the switch!! >> Segmentation fault (core dumped) >> donb@x-VirtualBox:~$ LD_LIBRARY_PATH=lib/src/libotr/libotr/src/.libs ldd >> ./otr >> linux-gate.so.1 => (0xb77c6000) >> libotr.so.5 => lib/src/libotr/libotr/src/.libs/libotr.so.5 >> (0xb77a9000) >> libc.so.6 => /lib/i386-linux-gnu/libc.so.6 (0xb75ef000) >> libgcrypt.so.11 => /lib/i386-linux-gnu/libgcrypt.so.11 (0xb7568000) >> /lib/ld-linux.so.2 (0xb77c7000) >> libgpg-error.so.0 => /lib/i386-linux-gnu/libgpg-error.so.0 >> (0xb7563000) >> donb@x-VirtualBox:~$ !gd >> gdb -q ./otr core >> Reading symbols from /home/donb/otr...(no debugging symbols found)...done. >> [New LWP 20510] >> >> warning: Can't read pathname for load map: Input/output error. >> Core was generated by `./otr'. >> Program terminated with signal 11, Segmentation fault. >> #0 0xXXXX in ?? () from /lib/i386-linux-gnu/libgcrypt.so.11 >> (gdb) i r eax >> eax 0x53565755 1398167381 >> (gdb) >> >> ^-- controlled EAX = for the win >> _______________________________________________ >> OTR-dev mailing list >> OTR-dev@lists.cypherpunks.ca >> http://lists.cypherpunks.ca/mailman/listinfo/otr-dev >> >> >> _______________________________________________ >> OTR-dev mailing list >> OTR-dev@lists.cypherpunks.ca >> http://lists.cypherpunks.ca/mailman/listinfo/otr-dev -- http://jurrevanbergen.nl/
_______________________________________________ OTR-dev mailing list OTR-dev@lists.cypherpunks.ca http://lists.cypherpunks.ca/mailman/listinfo/otr-dev
