209116 – net-analyzer/hydra-5.4: http-form module crashes when run

Bug 209116 - net-analyzer/hydra-5.4: http-form module crashes when run

Summary: net-analyzer/hydra-5.4: http-form module crashes when run

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Netmon project

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2008-02-06 10:46 UTC by deanx
Modified:	2009-05-24 23:19 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Patch to solve the free problem (hydra-http-form.patch,436 bytes, patch) 2008-02-06 10:48 UTC, deanx	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description deanx 2008-02-06 10:46:59 UTC

When using the http-form module in hydra 5.4, hydra crashes with errors along the lines of

*** glibc detected *** hydra: free(): invalid pointer: 0x0000000000528080 *** 

Reproducible: Always

Steps to Reproduce:
Run hydra with using the http-(post/get)-form module correctly

Comment 1 deanx 2008-02-06 10:48:20 UTC

Created attachment 142799 [details, diff]
Patch to solve the free problem

Comment 2 Alexandre Hamelin 2009-04-28 20:33:18 UTC

Any plans to integrate the patch in portage? Seems fine to me as the patch only removes calls to free() on a pointer on which malloc() was apparently never called in the first place, hence the crash. See http://packetstorm.linuxsecurity.com/groups/thc/indexdate.html, hydra-http-form.patch.

Comment 3 Peter Volkov (RETIRED) gentoo-dev

2009-05-24 23:19:18 UTC

Thank you for report, deanx. Patch was added in hydra-5.4-r1.