smokelegend / littleblackbox Goto Github PK

What steps will reproduce the problem?
1. Run ./configure.

What is the expected output? What do you see instead?

The configure script is expected to generate the Makefile. Instead it reports 
an error saying that the librt library is not found.

Fix:

1. Edit configure.ac and remove the line that starts with 
"AC_CHECK_LIB(pthread".
2. Edit Makefile.in and remove '-lrt' from LDFLAGS.
3. Run 'autoconf configure.ac > configure" to generate a new configure script.
4. Run './configure' to generate a Makefile.

Build patches (and a pre-built OSX binary) coming in release 0.1.4.

What steps will reproduce the problem?
1. Run 'make'

What is the expected output? What do you see instead?

Expected output is the littleblackbox binary. Instead, you will receive a "ld: 
library not found for -lcrt0.o" linker error. This is due to littleblackbox 
trying to build itself statically and OSX not having a static libcrt library.

A temporary work around is to remove the '-static' flag from the Makefile.

makes this possible to compile against new curl versions.

How to compile into MAC OS X binary?

Please turn the README file to a linux man file so it can be installed by 
distributors, many thanks :) 

What steps will reproduce the problem?
1. Run littleblackbox v0.1 and specify a PEM file using the -p option.
2. Run littleblackbox v0.1 and specify a PEM file using the --pem option.
3.

What is the expected output? What do you see instead?

Using --pem works fine, but using -p does not. This is due to some of the short 
options being borked. 

Work around for now is to use long options.

I've noticed that a lot of VPN providers seem to share their secrets online:


https://twitter.com/obisw4n/status/249646520067031040
https://twitter.com/marshray/status/249642980313554944
https://twitter.com/ioerror/status/249645991999991808
https://twitter.com/ioerror/status/249645223213404160
https://twitter.com/ioerror/status/249644598778007553
https://twitter.com/ioerror/status/249647806166487040
https://twitter.com/ioerror/status/249648046747574272
https://twitter.com/ioerror/status/249648741768912896
https://twitter.com/ioerror/status/249648882588475392
https://twitter.com/ioerror/status/249649014537068544
https://twitter.com/ioerror/status/249649401847500801
https://twitter.com/ioerror/status/249649654189416449
https://twitter.com/ioerror/status/249649822024470529

It might be nice to have those in littleblackbox as well.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1. Build
2. ./littleblackbox -r ::1
3. Segmentation fault

What is the expected output? What do you see instead?
Expected output: scanning localhostv6 or an error message that ipv6 isn't 
supported

Instead: Segmentation fault

What version of the product are you using? On what operating system?
Version: r22 trunk
OS: Linux calisto 2.6.35-24-generic #42-Ubuntu SMP Thu Dec 2 02:41:37 UTC 2010 
x86_64 GNU/Linux

Please provide any additional information below.

http://google-opensource.blogspot.com/2015/03/farewell-to-google-code.html

The dates of interest are:

* March 12, 2015 - New project creation disabled.
* August 24, 2015 - The site goes read-only. You can still checkout/view 
project source, issues, and wikis.
* January 25, 2016 - The project hosting service is closed. You will be able to 
download a tarball of project source, issues, and wikis. These tarballs will be 
available throughout the rest of 2016.

This gentoo bug seems to have dealt with it: 
https://bugs.gentoo.org/375899?id=375899

format_sha1_hash allocates a char array SHA_DIGEST_LENGTH*3 bytes in length, 
and proceeds to append SHA_DIGEST_LENGTH 3-byte strings to it in a loop using 
sprintf.  sprintf will always NUL-terminate its string, though, so each 
iteration actually writes 4 bytes.  The final run through the loop overflows 
the buffer, writing a 0 past the end of the array.  The next thing on the stack 
is the variable "i", so the NUL terminator ends up resetting the loop variable 
and function loops infinitely.  

Fix:

Index: common.c
===================================================================
--- common.c    (revision 23)
+++ common.c    (working copy)
@@ -8,7 +8,7 @@
 char *format_sha1_hash(unsigned char *hash)
 {
        int i = 0;
-       char sha_str[SHA_DIGEST_LENGTH*3] = { 0 };
+       char sha_str[SHA_DIGEST_LENGTH*3+1] = { 0 };

        for(i=0; i<SHA_DIGEST_LENGTH; i++)
        {

There is no update feature built into littleblackbox to check for updates to 
the certificate database, ldd.db. Since this database will likely be updated 
often, this would be a very useful feature to have integrated into the utility.