puttygen: 160MB memory leak while trying to extract openssh public key from crafted key file
该报告还没有中文解读。
原文摘录
摘自原文（5479 字符中的一小部分）
**Summary:** After downloading putty-0.70-2019-01-17.53747ad.tar.gz, I compiled it on Debian 9 with Clang-8.0.0 and AddressSanitizer. A 160000844 byte (160MB) memory leak happens while trying to extract an OpenSSH public key from a crafted key file.
原文中的代码
INVALID-ALGORITHM FmqsPmWL usest
=================================================================
==31861==ERROR: LeakSanitizer: detected memory leaks
Direct leak of 159999984 byte(s) in 1 object(s) allocated from:
#0 0x4c6333 in malloc /b/swarming/w/ir/kitchen-workdir/src/third_party/llvm/ …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 PuTTY (European Commission - DIGIT) 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @geeknik · 版权归作者与 PuTTY (European Commission - DIGIT) 所有