Bug#861058: hydra: on resume, children die with "double free or corruption"

[Lukas Schwaighofer]

Control: found -1 hydra/8.3-2
Control: tags -1 + upstream

Hi Ivan,

thanks for reporting this bug.  I was able to reproduce the problem
(also for the version 8.3-2 from Debian stretch).  The bug is also
already known upstream:
  https://github.com/vanhauser-thc/thc-hydra/issues/27

I've just looked into the problem and I think I found the cause. I've
created a pull request
  https://github.com/vanhauser-thc/thc-hydra/pull/209
which seemed to fix the problem for me.  However, I'd like to wait for
feedback from the author and possibly other affected users before
applying the fix to the Debian version.


If you need a workaround until the issue has been properly fixed: The
issue does not affect the i386 version of the software (as also
confirmed by the original author in one of his messages to the github
issue).  You can try to add the i386 architecture to dpkg and then
install the hydra:i386 package (let me know if you need help with that).


Regards
Lukas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-security-team/attachments/20170424/b2e9e445/attachment.sig>