From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.135]) by sourceware.org (Postfix) with ESMTPS id AB5AA3877411 for ; Mon, 29 Nov 2021 12:07:18 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org AB5AA3877411 Received: from calimero.vinschen.de ([24.134.7.25]) by mrelayeu.kundenserver.de (mreue011 [212.227.15.167]) with ESMTPSA (Nemesis) id 1MvryJ-1mZagl3agZ-00srvj for ; Mon, 29 Nov 2021 13:07:16 +0100 Received: by calimero.vinschen.de (Postfix, from userid 500) id 0795AA80D6A; Mon, 29 Nov 2021 13:07:16 +0100 (CET) Date: Mon, 29 Nov 2021 13:07:16 +0100 From: Corinna Vinschen To: cygwin-apps@cygwin.com Subject: Re: [ATTN MAINTAINER] openssh Message-ID: Reply-To: cygwin-apps@cygwin.com Mail-Followup-To: cygwin-apps@cygwin.com References: <874k85yghh.fsf@Rainer.invalid> <875ysc61xm.fsf@Rainer.invalid> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <875ysc61xm.fsf@Rainer.invalid> X-Provags-ID: V03:K1:QXtOeFiOpoqsbgZAjDEPdWNSj6XyQtSwjTHe2ivRkq0zsDNfmsn cQTa/TgcUgT0An5ot7yfOZ1YzLlfcXqq1xNbGwdcIuF8bMjzOtqm3LtlUK4jdqv/7iSPTGa DfxFnJ5bE1Jyn1oXQ6GY0jUIoNUdch5KOARn7KNz6DlL9FkMzvr8ntoNtNxzdZ01LNPhRa1 g6re6cHyxPDz5knHL0m4A== X-UI-Out-Filterresults: notjunk:1;V03:K0:mPmj9PmSf0Y=:Q+DfMvT8DhtHKBhccIwoJa dN8tQL7hBpTEhOwYmk62lfKhvkoET4TJ4BVbUBNSsdD1rXxWl20WCKEuF6MxwvXTUNlxb6sjZ MulXEmaRzqHp9bpK9S3t1dFKgSpyl434AUDuRIEyyvBLThJyarE6GIvrWBwSBWQOecsZr0pmk eU6ESTG90mdDokuPPB3IJz20xElH4m/m9ZwwVPDTc/0vG6SYCWz9IT8w1bON2E0CqzZ/KpwvT wxMDP41eyqENFr7xn2ht+QN29OUg5piFek+vODfWrYY0f4jc2QmWdNJl6v8q04wT2MINFj7aT 3I7KKxCIJpvgwiwHq2Dv1sxShpmWekXLNjei/7JUnr5eO5FI6E4joRFXng+6Yewz70Z0jB1J8 19lj2fnSySTCqlGR9adXOckJaPZUuQp61hvnnMTJV549gQ4VHF6rtmJPjJ/j6/LxPSzrFGqFQ LVbxXN8pP2sS07E5fv3vG3Kxqr/XWrp7PlMI35m1W/MSEa0Fd934ItvPo8ZpZaGi8ZDjFAiE9 MccZeiO0C4h3cL0bAs9MIxiXJ1YX2+o/Y4byW9qVfmqbRohUqmg77EQTzfRoM7/dqe+An4tr6 UNG0b0+hM8vkAhHvQBB8SpfBcsR3EQt03dH4E/aw7M3ONgSGlIVSwnGY1GZjH6kxLzfFEKHVx pH78c4y6BxpLLDz0E+CUZSLwJ3Cl94G8mTlIAcVrqdqK0OlN31cHiLPp5fnbf6LZcF2qOfvgF Buvi9Mn9MKlkTBS3 X-Spam-Status: No, score=-99.4 required=5.0 tests=BAYES_00, GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_NEUTRAL, TXREP autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin-apps@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Cygwin package maintainer discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2021 12:07:22 -0000 On Nov 28 10:53, Achim Gratz wrote: > Achim Gratz writes: > > These patches work for 32bit also and I believe they are correct, but > > that build should not be made available due to a bug in libfido2 that > > crashes when trying to free the memory associated with the WebAuthn > > payload returned. Without these patches applied you can still use the > > fallback to USB-HID when you are an administrator. > > The call into WebAuthn completely messes up the stack apparently. The > returned object looks OK once you realize it is a version 1 and thus the > extension fields are bogus, but the whole thing crashes if you do just > one more call. Gdb session: > > https://paste.c-net.org/SerumLoser > > Any ideas what that might be? For the bystanders, on a hunch I created a libfido2 patch to change the calling convention for the dynamically loaded windows functions. Let's see if Achim's testing now succeeds on 32 bit... Corinna