#169: segmentation fault in pubkey authentication
-------------------------+--------------------------------------------------
 Reporter:  suyogjadhav  |       Owner:       
     Type:  defect       |      Status:  new  
 Priority:  high         |   Milestone:       
Component:  API          |     Version:  1.2.4
 Keywords:               |    Blocking:       
Blockedby:               |  
-------------------------+--------------------------------------------------
 libssh2 encounter SIGSEGV when null passphrase is passed to
 libssh2_userauth_publickey_fromfile while the passed key requires a valid
 passphrase.

 My application takes these configuration from user,and when passed along
 they cause app to crash.

 The error is traced to passphrase_cb in openssl.c.
 This function does not check for null passphrase and tries to find strlen
 causing the segmentation fault.

 A simple check such as this would suffice,

 passphrase_len = 0;
 if(passphrase != NULL)
 passphrase_len = strlen(passphrase);

-- 
Ticket URL: <http://libssh2.stuge.se/ticket/169>
libssh2 <http://libssh2.stuge.se/>
C library for writing portable SSH2 clients
_______________________________________________
libssh2-devel http://cool.haxx.se/cgi-bin/mailman/listinfo/libssh2-devel

Reply via email to