openssh bugs - Jan 2018 - [Bug 2819] New: Problem with "scp -C" on specific files only.

https://bugzilla.mindrot.org/show_bug.cgi?id=2819

            Bug ID: 2819
           Summary: Problem with "scp -C" on specific files only.
           Product: Portable OpenSSH
           Version: 7.5p1
          Hardware: PPC
                OS: AIX
            Status: NEW
          Severity: major
          Priority: P5
         Component: scp
          Assignee: unassigned-bugs at mindrot.org
          Reporter: mayasha9 at in.ibm.com

Created attachment 3113
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3113&action=edit
scp and sshd logs

Hello Team ,
"scp -C" (compression) is not working with some special kind of files.

The source code has been compiled with xlc compiler.
# xlc -qversion
IBM XL C/C++ Enterprise Edition V8.0 for AIX
Version: 08.00.0000.0012

The issue has been seen on AIX 6.1.0.0, AIX 7.1.0.0, AIX 7.2.0.0.

You can recreate the issue in the following way :- 

# scp -C /usr/lib/libssl.a localhost:/
root at localhost's password:
libssl.a                              0%    0     0.0KB/s   --:-- ETA
ssh_packet_send: invalid format
lost connection

* Here i am using libssl.a library file as a special file. 
Also i am sending debug logs for both scp and sshd daemon.

Thanks 
Mayank Sharma
AIX Opensource Security, IBM.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2819

Mayank Sharma <mayasha9 at in.ibm.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mayasha9 at in.ibm.com

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2819

--- Comment #1 from Mayank Sharma <mayasha9 at in.ibm.com> ---
Hello Team
Is there any update on this defect ? Please let me know if any
additional information is required.

Thanks 
Mayank Sharma

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2819

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #2 from Darren Tucker <dtucker at dtucker.net> ---
What configure and compile time options were used?  What version of
zlib was used and what options was it compiled with?

The only thing I can think of that would manifest like this would be if
zlib was built with some kind of leak/overflow checking that would
cause it to pollute stdout or stderr.

Whatever is going on seems to be in the ssh process under the scp one
on the client side.  If you attach an strace or similar to that process
before it exits you might get a hint.

The other thing you could try is to compile with -DPACKET_DEBUG (but be
aware this may expose some private info in the logs, so check it before
sharing it).

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2819

--- Comment #3 from Mayank Sharma <mayasha9 at in.ibm.com> ---
Hi,

I have gone through the source code and compilation process and i found
that this error occurred because of the old zlib libraries. I have now
replaced the older with new zlib libraries and compiled. Its working
fine now. Thanks team for your effort.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2819

Mayank Sharma <mayasha9 at in.ibm.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2819

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
closing resolved bugs as of 8.6p1 release

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.