openssh bugs - Dec 2012 - [Bug 1990] sftp segfaults when tab-completing a directory which contains umlauts

https://bugzilla.mindrot.org/show_bug.cgi?id=1990

mikolajmm at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mikolajmm at gmail.com

--- Comment #3 from mikolajmm at gmail.com ---
The same here:
openssh 6.1p1
archlinux 64-bit

sftp> ls
1????                                           2???                   
                         4?d?b?o

sftp> cd 2[tab pressed]segmentation fault (core dumped)

locale pl_PL.UTF-8

ssh and sshfs wiork fine.

Maybe it's locale depend, but openssh should work with every locale
properly ;]

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1990

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au

--- Comment #4 from Darren Tucker <dtucker at zip.com.au> ---
I suspect the comment about locale was a suggestion to either try it
with a different one or specify what it was so we could try that. 
anyway:

$ mkdir /tmp/test?
$ export LOCALE=pl_PL.UTF-8
$ gdb -q ./sftp
Reading symbols from /home/dtucker/openssh-6.1p1/sftp...done.
(gdb) set args localhost
(gdb) run
Starting program: /home/dtucker/openssh-6.1p1/sftp localhost
Connected to localhost.
sftp> cd /tmp/t[TAB]
sftp> cd /tmp/test\303\244/

My guess is that it's crashing inside libedit (mine is 2.11-20080614-5
on x64_64).  So far, the only reported instances are on Arch.

Could you please try repeating the test under GDB as per the above, and
if it does crash us "bt" to get a backtrace to see where it's
crashing.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1990

--- Comment #5 from mikolajmm at gmail.com ---
Connected to localhost.
sftp> cd z[TAB]
zdj?cia z aparatu/   zdj?cia/             

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff7893460 in wcslen () from /usr/lib/libc.so.6
(gdb) bt
#0  0x00007ffff7893460 in wcslen () from /usr/lib/libc.so.6
#1  0x00007ffff7bacb12 in el_winsertstr () from /usr/lib/libedit.so.0
#2  0x00000000004079d5 in ?? ()
#3  0x00007ffff7bb299e in el_wgets () from /usr/lib/libedit.so.0
#4  0x00007ffff7bc26ed in el_gets () from /usr/lib/libedit.so.0
#5  0x0000000000407d1d in ?? ()                                         
#6  0x0000000000403257 in ?? ()                                         
#7  0x00007ffff7818725 in __libc_start_main () from /usr/lib/libc.so.6  
#8  0x0000000000403585 in ?? ()

I've tried build openssh and glibc with -g, but with no success so far.
I'll try tomorrow post more detailed backtrace.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1990

--- Comment #6 from Darren Tucker <dtucker at zip.com.au> ---
I just tried reproducing this with
http://www.thrysoee.dk/editline/libedit-20120601-3.0.tar.gz (which
according to https://www.archlinux.org/packages/core/x86_64/libedit/ is
what Arch is currently using) built locally on both x86_64 and i686 and
neither of them exhibited the problem.

Which version of Arch do you see it on, and what version of libedit
does it have?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1990

--- Comment #7 from mikolajmm at gmail.com ---
x86_64

I'm using the newest version of libedit: core/libedit 20120601_3.0-1

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.