bugzilla-daemon at bugzilla.mindrot.org
2008-Jan-20 00:31 UTC
[Bug 1230] filename escaping of brackets in sftp
https://bugzilla.mindrot.org/show_bug.cgi?id=1230 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED AssignedTo|bitbucket at mindrot.org |djm at mindrot.org --- Comment #1 from Damien Miller <djm at mindrot.org> 2008-01-20 11:31:11 --- Created an attachment (id=1445) --> (http://bugzilla.mindrot.org/attachment.cgi?id=1445) process_put: check pathname even if glob does not match The recently committed argument parser changes together with this additional patch make all your test cases pass: sftp> put '[eztv]' Uploading [eztv] to /tmp/xxxx/[eztv] [eztv] 100% 0 0.0KB/s 00:00 sftp> put "[eztv]" Uploading [eztv] to /tmp/xxxx/[eztv] [eztv] 100% 0 0.0KB/s 00:00 sftp> put [eztv] Uploading [eztv] to /tmp/xxxx/[eztv] [eztv] 100% 0 0.0KB/s 00:00 sftp> put \[eztv\] Uploading [eztv] to /tmp/xxxx/[eztv] [eztv] 100% 0 0.0KB/s 00:00 sftp> put \[abcdefg\] stat [abcdefg]: No such file or directory I'll apply this fix now, so it will be in OpenSSH 4.8. Thanks indeed for the detailed bug report and test cases. -- Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching the assignee of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2008-Jan-20 00:38 UTC
[Bug 1230] filename escaping of brackets in sftp
https://bugzilla.mindrot.org/show_bug.cgi?id=1230 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #2 from Damien Miller <djm at mindrot.org> 2008-01-20 11:38:48 --- fix applied -- Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching the assignee of the bug.
Apparently Analagous Threads
- [Bug 1230] filename escaping of brackets in sftp
- sftp client reget reput
- remote DoS in sftp via crafted glob expressions (CVE-2010-4755)
- [Bug 726] sftp working for list files, and download, but not for uploading
- [Bug 73] New: sftp segfaults on an attempt to up/download a nonexistent file