bugzilla-daemon at bugzilla.mindrot.org
2008-Jan-20 00:31 UTC
[Bug 1230] filename escaping of brackets in sftp
https://bugzilla.mindrot.org/show_bug.cgi?id=1230
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |ASSIGNED
AssignedTo|bitbucket at mindrot.org |djm at mindrot.org
--- Comment #1 from Damien Miller <djm at mindrot.org> 2008-01-20
11:31:11 ---
Created an attachment (id=1445)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=1445)
process_put: check pathname even if glob does not match
The recently committed argument parser changes together with this
additional patch make all your test cases pass:
sftp> put '[eztv]'
Uploading [eztv] to /tmp/xxxx/[eztv]
[eztv] 100% 0 0.0KB/s
00:00
sftp> put "[eztv]"
Uploading [eztv] to /tmp/xxxx/[eztv]
[eztv] 100% 0 0.0KB/s
00:00
sftp> put [eztv]
Uploading [eztv] to /tmp/xxxx/[eztv]
[eztv] 100% 0 0.0KB/s
00:00
sftp> put \[eztv\]
Uploading [eztv] to /tmp/xxxx/[eztv]
[eztv] 100% 0 0.0KB/s
00:00
sftp> put \[abcdefg\]
stat [abcdefg]: No such file or directory
I'll apply this fix now, so it will be in OpenSSH 4.8. Thanks indeed
for the detailed bug report and test cases.
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2008-Jan-20 00:38 UTC
[Bug 1230] filename escaping of brackets in sftp
https://bugzilla.mindrot.org/show_bug.cgi?id=1230
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |RESOLVED
Resolution| |FIXED
--- Comment #2 from Damien Miller <djm at mindrot.org> 2008-01-20
11:38:48 ---
fix applied
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
Seemingly Similar Threads
- [Bug 1230] filename escaping of brackets in sftp
- sftp client reget reput
- remote DoS in sftp via crafted glob expressions (CVE-2010-4755)
- [Bug 726] sftp working for list files, and download, but not for uploading
- [Bug 73] New: sftp segfaults on an attempt to up/download a nonexistent file