Fwd: Re: Inconsisten declaration of ssh_aes_ctr_iv()

[Damien Miller]

On Thu, 17 Jan 2013, Iain Morgan wrote:

> I applied the diff you supplied, along with the previous diff. The
> regression tests got further along, but now fail in integrity.sh:
> 
> run test integrity.sh ...
> test integrity: hmac-sha1 @2300 RSA_public_decrypt failed: error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01. key_verify failed for server_host_key.

I think that the integrity test script might be fuzzing too early in the
stream and messing up the host keys rather than channel data. Could you
try increasing the "startoffset" in regress/integrity.sh a bit? You
probably only need crank it by a couple of hundred bytes.

FYI this is also on Darren's tinderbox:

http://tinderbox.dtucker.net/cgi-bin/gunzip.cgi?tree=OpenSSH_Portable&full-log=1360685541.11111

I'd like to figure out what is making KEX complete later in the stream though
(assuming my hypothesis is correct).

-d