Re: [ATTN MAINTAINER] openssh

[Achim Gratz <Stromeko@nexgo.de>]

Corinna Vinschen via Cygwin-apps writes:
> On Nov 28 10:53, Achim Gratz wrote:
>> Achim Gratz writes:
>> > These patches work for 32bit also and I believe they are correct, but
>> > that build should not be made available due to a bug in libfido2 that
>> > crashes when trying to free the memory associated with the WebAuthn
>> > payload returned.  Without these patches applied you can still use the
>> > fallback to USB-HID when you are an administrator.
>> 
>> The call into WebAuthn completely messes up the stack apparently.  The
>> returned object looks OK once you realize it is a version 1 and thus the
>> extension fields are bogus, but the whole thing crashes if you do just
>> one more call.  Gdb session:
>> 
>> https://paste.c-net.org/SerumLoser
>> 
>> Any ideas what that might be?
>
> For the bystanders, on a hunch I created a libfido2 patch to change
> the calling convention for the dynamically loaded windows functions.
> Let's see if Achim's testing now succeeds on 32 bit...

It does, your hunches are _that_ good.  :-)

So, once the new libfido2 hits the release area you can pull in the
OpenSSH patches and re-release that to take advantage of the now
correctly working Webauthn suppport.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Factory and User Sound Singles for Waldorf Q+, Q and microQ:
http://Synth.Stromeko.net/Downloads.html#WaldorfSounds