Hello,

We got reports about crashes with recent CURL update and 
libssh2_userauth_keyboard_interactive_ex function.

Doing SFTP with LibSSH2 and OpenSSL causes a crash if no username/password is 
set.

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libsystem_platform.dylib            0x00007fff6a342e52 _platform_strlen + 18
1   libsystem_c.dylib                   0x00007fff6a1f2cd8 strdup + 18
2   app 0x0000000113ced7c0 kbd_callback + 40
3   app 0x0000000113ae6032 libssh2_userauth_keyboard_interactive_ex + 1698
4   app 0x0000000113ce99fd ssh_statemach_act + 2082
5   app 0x0000000113ce9087 ssh_multi_statemach + 39
6   app 0x0000000113cc2648 multi_runsingle + 1079
7   app 0x0000000113cc2113 curl_multi_perform + 129
8   app 0x0000000113ca82ef curl_easy_perform + 309


Not sure what change in 7.75 causes this.

Sadly it looks like strdup and strlen are set.

Anyone seen this, too?

Sincerely
Christian



-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html

Reply via email to