openssh bugs - Sep 2003 - [Bug 690] sftp quoted filename parsing bug in get and put commands

http://bugzilla.mindrot.org/show_bug.cgi?id=690

           Summary: sftp quoted filename parsing bug in get and put commands
           Product: Portable OpenSSH
           Version: -current
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sftp
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: admorten at umich.edu


When doing a get or put of a quoted filename, sftp misinterprets the location of
the terminating
quote. In sftp-int.c, when the terminating quote is located, the path is NUL
terminated, but the
location counter is not updated, causing the source filename's end quote to
be interpreted as the
opening quote of a destination filename. This causes 'get
"filename"' to fail with an Unterminated
quote error, and causes 'get "src-filename"
"dest-filename"' to write src-filename to a file named "
" rather than dest-filename. Unquoted transfer commands--e.g., get
src-filename dest-filename--
are not affected.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=690





------- Additional Comments From admorten at umich.edu  2003-09-20 00:03 -------
Created an attachment (id=437)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=437&action=view)
Patch fixing increment bug in get_pathname function of sftp-int.c




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=690

admorten at umich.edu changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |openbsd, patch





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=690

admorten at umich.edu changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=690





------- Additional Comments From admorten at umich.edu  2003-09-24 01:43 -------
Fixed in OpenSSH 3.7.1p2.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.