How to make invalid OpenPGP packets with GNUPG (a bugreport).

[JanuszA.Urbanowicz]

Hash: SHA1

The method is simple (at least for me):

- - write text in text editor (joe)
- - mark the whole text as a block
- - pipe the block though GnuPG for signing with a signing v4 subkey and for
  encryption for untrusted v3 RSA key.
  (gpg -sea -r <keyid> for my setup)
- - answer yes when asked if you really want to use that key

The resulting OpenPGP message will make all tested PGP (and GPG) versions
barf with the following message:

gpg: packet(1) too short
gpg: block_filter 0x80fdd48: read error (size=3D8763,a->size=3D36031)
gpg: block_filter: pending bytes!

The effect is repeatable.

Alex
- --=20
C _-=3D-_ H| Janusz A. Urbanowicz | ALEX3-RIPE | SF-F Framling |         | =
  *  =09
 ; (_O : +-------------------------------------------------------------+ --=
+~|=09
 ! &~) ? | P=B3yn=B1=E6 chc=EA na Wsch=F3d, za Suez, gdzie jest dobrem ka=
=BFde z=B3o | l_|/=09
A ~-=3D-~ O| Gdzie przykaza=F1 brak dziesi=EAciu, a pi=E6 mo=BFna a=BF po d=
no;     |   |  =20