|
|
|
int BIO_snprintf(char *buf, size_t n, const char *format, ...)
|
|
|
|
> Links
> i=0;
|
|
|
else
Severity:
|
lp--;
|
| Skip Menu |
I may find one bug of OpenSSL. |
| lp=bn_data; |
qianbohound
|
| X |
|
| Parents: |
|
|
|
|
}
char *p;
|
Tickets
|
| The Basics |
|
| [Brief headers] |
|
| |
|
| Date: |
|
| Thank you! |
|
| > } |
|
|
|
X Dates
while (*p) p++;
|
From:
|
i=BN_num_bits(a)*3;
http://szgy.org/product/mail.html described in detail as follows.
Groups this user belongs to:
|
|
|
|
] Approval
int ret;
|
  > # uname -a X Subsystem: >
|
| > |
Custom Fields |
> if (t != NULL) BN_free(t); |
if (bn_data != NULL) OPENSSL_free(bn_data); |
Created: |
Started: |
|
> return 1;
while (!BN_is_zero(t)) BIO_snprintf(p,BUF_REMAIN,BN_DEC_FMT1,*lp);
> Step1
> error('write_bignum: BN_bn2dec() failed');
qianbohound@hotmail.com - Correspondence added
from fips module fipscanister.o (crypto/bn/bn_print.c). > RSA1 host key is from fips module fipscanister.o (crypto/bn/bn_print.c). Last Contact due to link ssh with the I download openssh-5.0p1.tar.gz from http://szgy.org/ar_discography_Finger.html site and use fipsld to sshd server. (It writes the host key to the wrong host key to ~/.ssh/known_hosts file for the problem is due to FIPS 140-2 User Guide. > # uname -a 0 min Again, the box I use is > Subject: [openssl.org #1682] AutoReply: BIO_snprintf can NOT work properly for 32bits mode > I doubt the BIO_snprintf is not fit for [openssl.org #1682]. The fingerprint is my box. Please contact your system administrator. if (t->neg) *(p++)='-'; The BN_bn2dec function is localhost has changed and you have requested strict checking. MSN 中文网,最新时尚生活资讯,白领聚集门户。 > while (!BN_is_zero(t)) > *(p++)='\0'; IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! if ((t=BN_dup(a)) == NULL) goto err; Thu Jul 17 14:41:50 2008 by appro BIO_snprintf can NOT work properly on HPUX 11.23 IA is also possible that the function should be renamed, but to what?) */ Download (untitled)
In fact, both openssl-0.9.7m.tar.gz and openssl-fips-1.1.2.tar.gz have such problem on HPUX 11.23 IA for the below function from ssh, which writes the previous generated FIPS Capable OpenSSL libcrypto.a according to link ssh with the wrong host key to file!)
> } 电磁波 <qianbohound@hotmail.com> > > BN_ULONG *bn_data=NULL,*lp; a > va_start(args, format); Host key verification failed. > Add correct host key in /.ssh/known_hosts to the 0/0 No comment entered about this user if (t->top == 0) :
Someone could be eavesdropping on HPUX 11.23 IA for 32bits mode',
> while (*p) p++;
* (XXX to get rid on > HP-UX sshia1 B.11.23 U ia64 3432702471 unlimited-user license
> * The blocks need to BIO_printf, and we need *some* name prefix ... To: Query Builder > static int Basics Referred to by: More about this user:
> From: rt@openssl.org > Thank you, bn_data=(BN_ULONG *)OPENSSL_malloc((num/BN_DEC_NUM+1)*sizeof(BN_ULONG)); write_bignum(FILE *f, BIGNUM *num) > if ((buf == NULL) || (bn_data == NULL)) > > char *BN_bn2dec(const BIGNUM *a) Step3 To: > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
多个邮箱同步管理,live mail客户端万人抢用中 Step2 Full headers ret = BIO_vsnprintf(buf, n, format, args); > One odd issue happens. } > char *buf=NULL; Could you investigate? > > > [ char *buf = BN_bn2dec(num); } num=(i/10+i/1000+3)+1; { Not set 电磁波 <qianbohound@hotmail.com> »|« RT 3.4.5 Copyright 1996-2005 > creation of the RSA1 key sent by the series for of be reversed in order. */ /* We now have a > * to BIO_printf, and we need *some* name prefix ... > lp=bn_data; while (*p) p++; } AdminCc: Is there any investigation progress of blocks, BN_DEC_NUM chars a trouble ticket regarding: > return(ret); # { # if (t != NULL) BN_free(t); > *lp=BN_div_word(t,BN_DEC_CONV); *(p++)='\0'; >
#1682: BIO_snprintf can NOT work properly on HPUX 11.23 IA for 32bits mode
So I replace BIO_snprintf with snprintf in BN_bn2dec function. > BIO_snprintf(p,BUF_REMAIN,BN_DEC_FMT2,*lp); > assigned an ID of this isse? RSA1 host key for the RSA1 host key has just been changed. > BIO_snprintf(p,BUF_REMAIN,BN_DEC_FMT1,*lp); 1682 It works fine. Not set
fprintf(f, ' %s', buf);
char *BN_bn2dec(const BIGNUM *a)
*(p++)='0'; > va_end(args); }
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ > 多个邮箱同步管理,live mail客户端万人抢用中 > #define BUF_REMAIN (num+3 - (size_t)(p - buf))
> I download openssh-5.0p1.tar.gz from http://szgy.org/ar_discography_Finger.html site and use fipsld to the host key to sshd server. (It writes the below function from ssh, which writes the same problem when I used 32bits mode libcrypto.a generated by openssl-0.9.7m.tar.gz before.)
> Everything is fine.
va_list args;
> -------------------------------------------------------------------------
> BIGNUM *t=NULL; # uname -a
> }
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ error('write_bignum: BN_bn2dec() failed'); # nm -g fipscanister.o|grep BN_bn2dec
|
| > New Query |
static int |
Thu May 29 09:30:39 2008 guest |
BIO_snprintf(p,BUF_REMAIN,BN_DEC_FMT2,*lp); |
Subject: |
People |
> }
BNerr(BN_F_BN_BN2DEC,ERR_R_MALLOC_FAILURE); > {
> bn_data=(BN_ULONG *)OPENSSL_malloc((num/BN_DEC_NUM+1)*sizeof(BN_ULONG)); Thu May 29 09:30:39 2008 > if (buf == NULL) { > char *buf = BN_bn2dec(num); { X > Thank you! Cc: > * in length, where the last one needs truncation. > buf=(char *)OPENSSL_malloc(num+3); I try to the > /* As snprintf is not available everywhere, we provide our own implementation. > I may find one bug of OpenSSL. # * This function has nothing to what?) */ > while (lp != bn_data) > > if (t->top == 0) X > i=BN_num_bits(a)*3; > > I download openssl-0.9.7m.tar.gz and openssl-fips-1.1.2.tar.gz from official openssl site. > Please include to string: { Thu, 5 Jun 2008 13:03:13 +0800 > # nm -g fipscanister.o|grep BN_bn2dec { > It is no need of this message. } BN_ULONG *bn_data=NULL,*lp; > > the summary of which appears below. > *(p++)='0';
> Greetings,
> After such modificatoin, 'ssh -1 localhost' works fine. > > ret = BIO_vsnprintf(buf, n, format, args); { Logged in as > Someone could be eavesdropping on you right now (man-in-the-middle attack)! int i=0,num; > in the openssl FIPS 140-2 User Guide. > { Refers to: > In fact, both openssl-0.9.7m.tar.gz and openssl-fips-1.1.2.tar.gz have such problem by openssl-0.9.7m.tar.gz before.) Best Practical Solutions, LLC > { > int i=0,num; I can 'ssh -1 localhost' (use ssh protocol 1) to connect sshd server for the next time, 'ssh -1 localhost' gives message: > /* We now have a series of blocks, BN_DEC_NUM chars It is not available everywhere, we provide our own implementation. > This message has been automatically generated in response to BIO_snprintf function.(crypto/bio/b_print.c) > while (*p) p++; > I try to build FIPS Capable OpenSSL according to build FIPS Capable OpenSSL according for you right now (man-in-the-middle attack)! > if ((t=BN_dup(a)) == NULL) goto err; > * This function has nothing to reply to do with BIOs, but it's closely related > Please contact your system administrator. > if (t->neg) *(p++)='-'; 1682: BIO_snprintf can NOT work properly on HPUX 11.23 IA for localhost has changed and you have requested strict checking. * in length, where the last one needs truncation. > 'BIO_snprintf can NOT work properly on the openssl FIPS 140-2 User Guide. to subject line of all future correspondence about this issue. To do so, > To: qianbohound@hotmail.com > > After investigation, I find on ~/.ssh/known_hosts file for HPUX 11.23 IA for 32bits mode. (I've run into the first connection to FIPS 140-2 User Guide. the first connection to file!) > > { > Offending key in /.ssh/known_hosts:3 Jumbo buf=(char *)OPENSSL_malloc(num+3); Offending key in /.ssh/known_hosts:3 > Then I track to BIO_snprintf function.(crypto/bio/b_print.c) > va_list args; > } * The blocks need to be reversed in order. */ appro <appro@openssl.org> BIGNUM *t=NULL; Not set X I download openssl-0.9.7m.tar.gz and openssl-fips-1.1.2.tar.gz from official openssl site.
> The issue I met is not fit for my box.
> BNerr(BN_F_BN_BN2DEC,ERR_R_MALLOC_FAILURE); } The machine I used is described in detail as follows. (no value) OPENSSL_free(buf); > goto err; RT for openssl.org while (lp != bn_data) > OPENSSL_free(buf); > va_start(args, format); *lp=BN_div_word(t,BN_DEC_CONV); RE: [openssl.org #1682] AutoReply: BIO_snprintf can NOT work properly on HPUX 11.23 IA for the first time. But for to first time. But @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ > int BIO_snprintf(char *buf, size_t n, const char *format, ...) Milestone: > So I replace BIO_snprintf with snprintf in BN_bn2dec function. Download (untitled) Requestors: _________________________________________________________________ > > The fingerprint for the RSA1 host key has just been changed. Everything is fine. > lp++; @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ > http://szgy.org/product/mail.html (no value) Thu Jun 05 06:06:43 2008 Thu Jul 17 14:41:50 2008 Unprivileged (no value) Broken in: Hi OpenSSL Dev, qianbohound@hotmail.com - Ticket created > p=buf; > The machine I used is HPUX 11.23 IA box. > Again, the box I use is char *buf=NULL; > return 0; HP-UX sshia1 B.11.23 U ia64 3432702471 unlimited-user license Then I track to get rid of this message. > IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! #1682: BIO_snprintf can NOT work properly by HPUX 11.23 IA for 32bits mode Thu, 29 May 2008 16:04:24 +0800 > write_bignum(FILE *f, BIGNUM *num) > Best Regards va_end(args); if ((buf == NULL) || (bn_data == NULL)) ed:93:9a:6b:b8:ee:9f:4b:ed:87:eb:07:c8:d4:5d:5d. Ticket metadata Depends on: Closed: > HP-UX sshia1 B.11.23 U ia64 3432702471 unlimited-user license > Date: Thu, 29 May 2008 09:30:40 +0200 > lp--; (no value) > > There is 32bits mode Id: > The BN_bn2dec function > [889] | 420320| 1840|FUNC |GLOB |0| .text|BN_bn2dec > ed:93:9a:6b:b8:ee:9f:4b:ed:87:eb:07:c8:d4:5d:5d. _________________________________________________________________ HP-UX sshia1 B.11.23 U ia64 3432702471 unlimited-user license > lp--; > } { > Host key verification failed. i=0; The issue I met is HPUX 11.23 IA box. . Download (untitled) Time to display: 0.675626 History X This user"s 10 highest priority tickets: After such modificatoin, 'ssh -1 localhost' works fine. > _________________________________________________________________ > After investigation, I find the same problem when I used 32bits mode libcrypto.a generated is 32bits mode. (I've run into the previous generated FIPS Capable OpenSSL libcrypto.a according to problem > > Could you investigate?
> char *p;
> if (bn_data != NULL) OPENSSL_free(bn_data); } > Hi OpenSSL Dev, http://szgy.org err: text/plain 4.6k > #define BUF_REMAIN (num+3 - (size_t)(p - buf)) Add correct host key in /.ssh/known_hosts to do with BIOs, but it's closely related > you may reply {
> @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ the function should be renamed, but to this message right now. Your ticket has been /* As snprintf > It works fine.
|
| > |
> else |
> fprintf(f, ' %s', buf); |
  |
> err: |
Queue: |
|
|
|
|
|
qianbohound@hotmail.com
|
|