Package: python-paramiko Version: 1.7.7.1-2 Severity: normal paramiko is overly picky about any minor format errors in known_hosts files but at the same time ignores total corruption of such files.
example: if you mis-edit a known_hosts file and, for example, damage the '==' marker at the end of a host key line, then load_system_host_keys() throws an ioerror exception complaining about incorrect padding. on the other hand, if i dump a few megabytes of binary garbage into known_hosts (dd if=/dev/urandom of=~/.ssh/known_hosts count=1k bs=1k) then load_system_host_keys() ignores the useless file and happily soldiers on. this behaviour is identical for both load_system_host_keys("/etc/ssh/ssh_known_hosts") and load_system_host_keys(None) (which reads ~/.ssh/known_hosts) - despite the docs claiming that load_system_host_keys(None) doesn't throw exceptions. regards az -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org