M2Crypto related segfault in pbkdf2
Created originally on Bitbucket by Anonymous
===== //(Imported from Google Code)//
==== [[https://code.google.com/u/100663101023986156711|rr2do2]] wrote: What steps will reproduce the problem?\Use a key length longer than 31 (not 40 as the comment in the source says) and cause an overflow in m2crypto.
What version of the product are you using? On what operating system?\1.5.3, mac (but all are affected)
Please provide any additional information below.
There is a comment in utils/pbkdf2.py:
~#NOTE: M2crypto reliably segfaults for me if given keylengths\~# larger than 40 (crashes at 41 on one system, 61 on another).\~# so just avoiding it for longer calls.
This is the source of the issue:
To be safe for now you should use a value safe with the buffer in m2crypto (not 40 as that still overflows) and keep an eye out on that issue being fixed before the note and workaround can be removed.