search

wolfSSL / wolfssh

wolfSSH is a small, fast, portable SSH implementation, including support for SCP and SFTP.
https://www.wolfssl.com
370 stars 88 forks source link

RSA Verify Fix #652

Closed ejohnstown closed 7 months ago

ejohnstown commented 7 months ago

Switch from wc_RsaSSL_VerifyInline() to wc_RsaSSL_Verify(). Fixes a bad free.

To reproduce:

./configure && make clean && make
./examples/client/client -u john -h localhost -p 22 -i ~/.ssh/id_rsa -j ~/.ssh/id_rsa.pub -t

I used my own RSA private key to log into the sshd locally on both my Mac and my Linux PC. Both crashed out with a bad free.

(ZD17381)