Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <55634FFA.7000203@gmail.com>
Date: Mon, 25 May 2015 18:38:18 +0200
From: Marek Wrzosek <marek.wrzosek@...il.com>
To: john-users@...ts.openwall.com
Subject: Using loopback with regex could cause crash

Hi

If john.pot contains e.g. "." and john is started with --loopback
--rules=none --regex=case=alpha:case="\0" (--regex="\0" doesn't crash
with the same john.pot) then this could happen:

buf=[sS][eE][xX][iI][sS]
buf=0
buf=[jJ]
buf=[mM]
buf=[pP]
buf=2
buf=9
buf=[bB]
buf=[cC]
buf=[dD]
buf=[lL]
buf=[gG]
buf=[wW]
buf=.
error: syntax error, unexpected $end
Error, invalid regex expression.  John exiting now  base_word=.  Regex= .

I think that forbidden characters should be escaped with \ or in []
brackets, don't you think? First would require changing john, but latter
maybe only changing regex_alphabets.conf e.g. by adding ".=[.]" line.

Best Regards
-- 
Marek Wrzosek
marek.wrzosek@...il.com

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.