openssh unix dev - Feb 2002 - [Bug 126] New: ssh-keyscan hangs or crashes accessing Sun ssh host

http://bugzilla.mindrot.org/show_bug.cgi?id=126

           Summary: ssh-keyscan hangs or crashes accessing Sun ssh host
           Product: Portable OpenSSH
           Version: -current
          Platform: ix86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Miscellaneous
        AssignedTo: openssh-unix-dev at mindrot.org
        ReportedBy: jss at ast.cam.ac.uk


When trying to do a keyscan on a machine running Sun's ssh daemon, the
ssh-keyscan hangs indefinitely.

For example:

xpc1:~/code> ./ssh-keyscan cass37.ast.cam.ac.uk
# cass37.ast.cam.ac.uk SSH-2.0-Sun_SSH_1.0
[... hangs here consuming most of the cpu ...]

strace shows something like this repeated:

read(3, "", 1349676892)                 = 0
gettimeofday({1014826290, 123906}, NULL) = 0
gettimeofday({1014826290, 125461}, NULL) = 0

With a long file of hosts including a sun ssh one the keyscan can crash with an
error in xmalloc attempting to allocate too much memory.

xmalloc: out of memory (allocating 1349676920 bytes)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Hi,

On Thu, Feb 28, 2002 at 03:25:59AM +1100, bugzilla-daemon at mindrot.org
wrote:
>            Summary: ssh-keyscan hangs or crashes accessing Sun ssh host
>            Product: Portable OpenSSH
[..]
> With a long file of hosts including a sun ssh one the keyscan can crash
with an
> error in xmalloc attempting to allocate too much memory.
> 
> xmalloc: out of memory (allocating 1349676920 bytes)
Looks suspiciously like the thing I saw in the regression test yesterday
which is fixed in OpenBSD but not yet in -portable.

gert


-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at
greenie.muc.de
fax: +49-89-35655025                        gert.doering at
physik.tu-muenchen.de

[..]
> Looks suspiciously like the thing I saw in the regression test yesterday
> which is fixed in OpenBSD but not yet in -portable.
>
It should be fixed in portable as of last night when I resynced.

- Ben