Calling /usr/sbin/john -wordfile=/bla/wordlist -rules -stdout=13 results with version 1.6 that /usr/sbin/restore will be overwritten (if root calls john) which imho is a serious bug. With 1.63 john will try to write to /usr/sbin/john.rec The reason can be found in path_init (path.c) which is called from main.c and sets the homepath to the directory where the binary is. I suggest calling path_init with getenv("HOME") as parameter. Regards, Alexander Reproducible: Always Steps to Reproduce: 1. 2. 3.
will later - overseas at the moment. I'm putting together a big patch set for john and will definately look at this one.
changed in my compiled patchset. Will release when I get some of that mythical time.
sorry for neglecting this bug. http://dev.gentoo.org/~dragonheart/john.tar.bz2 is a tarball is my little workspace with unpatched and patched version of john. Feel free to submit patches.
Fixed in johntheripper-1.6.37_p1. Thanks for your patience.
