[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <c9d78b95afdf1a7bf82348ce852c4378@smtp.hushmail.com>
Date: Mon, 1 Oct 2012 07:29:45 +0200
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: Static analysis of John using Coverity
On 1 Oct, 2012, at 2:15 , Alexander Cherepanov <cherepan@...me.ru> wrote:
> On 2012-09-19 03:22, magnum wrote:
>> Also, all (or nearly all) the mentioned formats use input files produced with *2john tools. The risk of bad input is low.
>
> Unfortunately most *2john tools either happily pass bad input through
> them or crash themselves or both. Examples are in my previous mail.
>
> It doesn't mean that everything have to be fixed in one day but thinking
> that 2john tools somehow guard john is just wrong. Some of these tools
> are a problem on their own.
Sure, they should be fixed. The context was "not one day before a release". A bug in valid() often crashes other formats than just the offending one.
magnum
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
