curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Crashes with libssh2_userauth_keyboard_interactive_ex

From: Christian Schmitz via curl-library <curl-library_at_cool.haxx.se>
Date: Thu, 4 Mar 2021 18:54:48 +0100

Hello,

We got reports about crashes with recent CURL update and libssh2_userauth_keyboard_interactive_ex function.

Doing SFTP with LibSSH2 and OpenSSL causes a crash if no username/password is set.

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0 libsystem_platform.dylib 0x00007fff6a342e52 _platform_strlen + 18
1 libsystem_c.dylib 0x00007fff6a1f2cd8 strdup + 18
2 app 0x0000000113ced7c0 kbd_callback + 40
3 app 0x0000000113ae6032 libssh2_userauth_keyboard_interactive_ex + 1698
4 app 0x0000000113ce99fd ssh_statemach_act + 2082
5 app 0x0000000113ce9087 ssh_multi_statemach + 39
6 app 0x0000000113cc2648 multi_runsingle + 1079
7 app 0x0000000113cc2113 curl_multi_perform + 129
8 app 0x0000000113ca82ef curl_easy_perform + 309


Not sure what change in 7.75 causes this.

Sadly it looks like strdup and strlen are set.

Anyone seen this, too?

Sincerely
Christian



-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.se/mail/etiquette.html
Received on 2021-03-04