Package: python-paramiko
Version: 1.7.7.1-2
Severity: normal

paramiko is overly picky about any minor format errors in known_hosts files
but at the same time ignores total corruption of such files.

example: if you mis-edit a known_hosts file and, for example, damage the '==' 
marker at
the end of a host key line, then load_system_host_keys() throws an ioerror 
exception 
complaining about incorrect padding.

on the other hand, if i dump a few megabytes of binary garbage into known_hosts
(dd if=/dev/urandom of=~/.ssh/known_hosts count=1k bs=1k) then 
load_system_host_keys()
ignores the useless file and happily soldiers on.

this behaviour is identical for both 
load_system_host_keys("/etc/ssh/ssh_known_hosts")
and load_system_host_keys(None) (which reads ~/.ssh/known_hosts) - despite the 
docs claiming
that load_system_host_keys(None) doesn't throw exceptions.

regards
az



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to