This is on FreeBSD 4.6-STABLE, doing an mget with wildcard char on a non-existent file(s) produces a SEGV. Reproduce the bug as follows (Note: "zqw*" is a pattern that does not match): % sftp user at host user at host's password: sftp> mget zqw* Program received signal SIGSEGV, Segmentation fault. 0x804c5db in process_get (conn=0x80520e0, src=0x80540b0 "zwq*", dst=0x0, pwd=0x8052100 "/home/faculty/elf", pflag=0) at /usr/src/secure/usr.bin/sftp/../../../crypto/openssh/sftp-int.c:371 (gdb) p g.gl_pathv[0] Error accessing memory address 0x0: Bad address.