[Savannah-hackers] lsh crash

[Loic Dachary]

        Hi,

        lshd crashed. I noticed it immediately, the downtime was less than 10
minutes. Here are the debuggin information. 

        Thanks for your support,

syslog:

Sep 19 06:01:45 subversions lshd[15419]: io.c: accept on fd 7 
Sep 19 06:01:45 subversions lshd[15419]: Accepting connection from 
130.149.164.61, port 1244 
Sep 19 06:01:45 subversions lshd[15419]: Initiating handshake with 
130.149.164.61 
Sep 19 06:01:45 subversions lshd[15419]: io.c: Preparing fd 7 for reading and 
writing 
Sep 19 06:01:46 subversions lshd[15419]: Client version: SSH-1.99-2.0.13 
(non-commercial) Server version: SSH-1.99-lshd_1.2.1 lsh - a free ssh 
Sep 19 06:01:49 subversions lshd[15419]: Selected keyexchange algorithm: 
diffie-hellman-group1-sha1   with hostkey algorithm:       ssh-dss 
Sep 19 06:01:49 subversions lshd[15419]: Selected bulk algorithms: (client to 
server, server to client)   Encryption:             (3des-cbc, 3des-cbc)   
Message authentication: (hmac-md5, hmac-md5)   Compression:            (zlib, 
zlib) 
Sep 19 06:01:49 subversions lshd[15419]: handle_dh_init 
Sep 19 06:01:49 subversions lshd[15419]: do_dsa_sign: Signing according to 
<unknown> 
Sep 19 06:01:49 subversions lshd[15419]: generic_dsa_sign, r: 
1625b70ae38a44d4d5c483373e158dafe9adce65 
Sep 19 06:01:49 subversions lshd[15419]: generic_dsa_sign, s: 
486b06fde4c38999733770953989a289dd5dbbfb 
Sep 19 06:01:49 subversions lshd[15419]: do_dsa_sign: Internal error, 
unexpected algorithm <unknown>. 

stack frame:

subversions:/subversions/sourceforge/tmp# gdb /usr/local/sbin/lshd core.1
GNU gdb 19990928
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...
Core was generated by `/usr/local/sbin/lshd --enable-core --daemonic 
--ssh1-fallback=/usr/sbin/sshd --'.
Program terminated with signal 6, Aborted.
Reading symbols from /lib/libutil.so.1...done.
Reading symbols from /lib/libnsl.so.1...done.
Reading symbols from /lib/libcrypt.so.1...done.
Reading symbols from /usr/lib/libz.so.1...done.
Reading symbols from /usr/lib/libgmp2.so.2...done.
Reading symbols from /lib/libc.so.6...done.
Reading symbols from /lib/ld-linux.so.2...done.
Reading symbols from /lib/libnss_compat.so.2...done.
Reading symbols from /lib/libnss_files.so.2...done.
#0  0x400b3881 in kill () from /lib/libc.so.6
(gdb) bt
#0  0x400b3881 in kill () from /lib/libc.so.6
#1  0x400b3564 in raise () from /lib/libc.so.6
#2  0x400b4ce1 in abort () from /lib/libc.so.6
#3  0x8067a5b in fatal () at werror.c:561
#4  0x8052595 in do_dsa_sign (c=0x80a2d48, algorithm=0, msg_length=20, 
    msg=0x14 <Address 0x14 out of bounds>) at dsa.c:528
#5  0x8051786 in dh_make_server_msg (self=0x80b0b70, server_key=0x80b0bb8, 
    hostkey_algorithm=0, s=0x80a2d48) at dh_exchange.c:179
#6  0x805b58c in do_handle_dh_init (c=0x80b0b60, connection=0x80a7218, 
    packet=0x80b0e20) at server_keyexchange.c:82
#7  0x806974a in connection_handle_packet (closure=0x80a7218, packet=0x80b0e20)
    at connection.c:122
#8  0x80697dd in do_handle_connection (w=0x80a7218, packet=0x80b0e20)
    at connection.c:143
#9  0x8069e5a in do_debug (w=0x810cf90, packet=0x80b0e20) at debug.c:64
#10 0x80693ad in do_packet_inflate (closure=0x810cfb0, packet=0x401a10b8)
    at compress.c:80
#11 0x8066fe4 in do_unpad (w=0x810cfd0, packet=0x80b0d80) at unpad.c:95
#12 0x8059be0 in do_read_packet (h=0x8c, available=0, 
    data=0xbfffbc9c 
"\212Ö8Åí\002g\\\022#ÞÕ8\022-'\223T\034ÅÄo\211Êð\022!\223­%U7Ô\027#Þc»\236å±^ëàMÃ5\215S\036¡÷`xR\"address@hidden(HÇ\227§§
 
©&p|\t2KhmötÓ\210cFc\214ó\006/\230îþð\\\022ó\017¶ã\216\023\204\236ì\233KÒTq¬z\213V¥\210%JSom\235¼ôBª\220\a!\031å
 
A²Rð\202\\üGpôÆÖ\017>p\035Ç\232\205º³\025lÉüÐ\232MîäX\016Àz¨Iý¶ñ]0s\206\004¥ío\bNf¸\221\aÐ\207fd\025\212hר"...)
    at read_packet.c:344
#13 0x8054a14 in do_buffered_read (s=0x8141500, fd=0x8206010) at io.c:547
#14 0x8054781 in io_iter (b=0x809ed98) at io.c:414
#15 0x805482b in io_run (b=0x809ed98) at io.c:436
#16 0x804b00e in main (argc=6, argv=0x80a1b88) at lshd.c:837
(gdb) quit
subversions:/subversions/sourceforge/tmp# 

-- 
Loic   Dachary         http://www.dachary.org/  address@hidden
24 av Secretan         http://www.senga.org/      address@hidden
75019    Paris         Tel: 33 1 42 45 09 16        address@hidden
        GPG Public Key: http://www.dachary.org/loic/gpg.txt