otrv4 / pidgin-otrng

Fork of https://bugs.otr.im/plugins/pidgin-otr. This is a mirror of https://bugs.otr.im/otrv4/pidgin-otrng
GNU General Public License v2.0
16 stars 5 forks source link

Crash in client profile serialization #80

Closed olabini closed 6 years ago

olabini commented 6 years ago
                #0  0x00007f1ab23c4eab raise (libc.so.6)
                #1  0x00007f1ab23af5b9 abort (libc.so.6)
                #2  0x0000559ed81f61be sighandler (pidgin)
                #3  0x00007f1ab23c4f30 __restore_rt (libc.so.6)
                #4  0x00007f1ab24eaf14 __memmove_avx_unaligned_erms (libc.so.6)
                #5  0x00007f1a9b9aa93c otrng_serialize_bytes_array (libotr-ng.so.0)
                #6  0x00007f1a9b991024 client_profile_body_serialize_pre_transitional_signature (libotr-ng.so.0)
                #7  0x00007f1a9b99108d client_profile_body_serialize (libotr-ng.so.0)
                #8  0x00007f1a9b991277 otrng_client_profile_serialize (libotr-ng.so.0)
                #9  0x00007f1a9b9a2fab otrng_prekey_dake2_message_valid (libotr-ng.so.0)
                #10 0x00007f1a9b9a48a8 process_received_dake2 (libotr-ng.so.0)
                #11 0x00007f1a9b9a4950 receive_dake2 (libotr-ng.so.0)
                #12 0x00007f1a9b9a5230 receive_decoded (libotr-ng.so.0)
                #13 0x00007f1a9b9a5392 otrng_prekey_client_receive (libotr-ng.so.0)
                #14 0x00007f1a9bbc694c otrng_plugin_receive_prekey_protocol_message (pidgin-otrng.so)

When this happens, the client profile is full of bad pointers.