search for: cmdneed

...*********************| 0 --:-- ETA Although the simplest is to patch the sourcecode: (A patchfile for the CVS-version is included, but these fixes should work for any 2.2.0-version (as the one in Debian woody) as far as I can see) in scp.c: - strlen(thost) + strlen(targ) + CMDNEEDS + 32; + strlen(thost) + strlen(targ) + CMDNEEDS + 40; - "%s%s -x -o'FallBackToRsh no' -n -l %s %s %s %s '%s%s%s:%s'", + "%s%s -x -o'FallBackToRsh no' -n -l \"%s\" \"%s\" \"%s\"\"%s\" '%s%s%s:%s&...

...scp: command not found" FAQ entry but I'm not quite sure why we can't do this, unless it's because enhancements to scp are no longer a priority. Any other reason why it "is the way it is" other than that? The patch is below, all I've really done is replaced char cmd[CMDNEEDS] with char *rspcmd throughout. Forgive any dodgy coding, I'm not a developer during the day :). I haven't been able to test the patch below because I don't have a handy openbsd box, I have tested a patch under the portable version that seems to work fine. Let me know if I'm bett...

...- ../canonical-openssh5.6/scp.c 2010-07-01 23:37:33.000000000 -0400 +++ scp.c 2010-11-19 17:17:26.000000000 -0500 @@ -302,6 +302,7 @@ struct passwd *pwd; uid_t userid; int errs, remin, remout; int pflag, iamremote, iamrecursive, targetshouldbedirectory; +double fd_offset, fd_inset; #define CMDNEEDS 64 char cmd[CMDNEEDS]; /* must hold "rcp -r -p -d\0" */ @@ -324,6 +325,9 @@ main(int argc, char **argv) extern char *optarg; extern int optind; + fd_inset = 0; + fd_offset = 0; + /* Ensure that fds 0, 1 and 2 are open or directed to /dev/null */ sanitise_stdfd(); @@ -344...

...(void); + int do_cmd(char *host, char *remuser, char *cmd, int *fdin, int *fdout, int argc); /* Struct for addargs */ @@ -206,9 +207,11 @@ uid_t userid; int errs, remin, remout; int pflag, iamremote, iamrecursive, targetshouldbedirectory; +int eraseflag; +char *tmpfn = ""; -#define CMDNEEDS 64 -char cmd[CMDNEEDS]; /* must hold "rcp -r -p -d\0" */ +char *cmd; +int cmdlen; int response(void); void rsource(char *, struct stat *); @@ -236,7 +239,7 @@ addargs(&args, "-oFallBackToRsh no"); fflag = tflag = 0; - while ((ch = getopt(argc, argv, "dfprtvBCc...

Hello, I would like to request an update of the progress regarding fixes for the recently disclosed SCP vulnerability (CVE-2018-20685, CVE-2019-6111, CVE-2019-6109, CVE-2019-6110) It has been stated that CVE-2018-20685 has been patched in november but there are currently no information available on the progress of patches regarding the other CVEs. Will there be a patched release any time soon?

...;@" : "", ! thost, targ) < 0) ! fprintf(stderr, "command truncated: %s\n", bp); } if (verbose_mode) fprintf(stderr, "Executing: %s\n", bp); *************** *** 417,423 **** if (remin == -1) { len = strlen(targ) + CMDNEEDS + 20; bp = xmalloc(len); ! (void) snprintf(bp, len, "%s -t %s", cmd, targ); host = cleanhostname(thost); if (do_cmd(host, tuser, bp, &remin, &remout, argc) < 0) --- 425,432 ---- if (remin == -1) { len = strlen(targ) + CMDN...

...39;%s%s%s:%s'", ssh_program, verbose_mode ? " -v" : "", @@ -468,8 +463,6 @@ suser = argv[i]; if (*suser == '\0') suser = pwd->pw_name; - else if (!okname(suser)) - continue; } host = cleanhostname(host); len = strlen(src) + CMDNEEDS + 20; @@ -1017,28 +1010,6 @@ } run_err("%s: %s", cp, strerror(errno)); exit(1); -} - -int -okname(cp0) - char *cp0; -{ - int c; - char *cp; - - cp = cp0; - do { - c = *cp; - if (c & 0200) - goto bad; - if (!isalpha(c) && !isdigit(c) && - c != '_...

...ory = 1; @@ -388,7 +394,7 @@ if (*src == 0) src = "."; host = strchr(argv[i], '@'); - len = strlen(SSH_PROGRAM) + strlen(argv[i]) + + len = strlen(ssh_program) + strlen(argv[i]) + strlen(src) + (tuser ? strlen(tuser) : 0) + strlen(thost) + strlen(targ) + CMDNEEDS + 32; bp = xmalloc(len); @@ -402,7 +408,7 @@ continue; (void) sprintf(bp, "%s%s -x -o'FallBackToRsh no' -n -l %s %s %s %s '%s%s%s:%s'", - SSH_PROGRAM, verbose_mode ? " -v" : "", + ssh_program, verbose_m...

...bles resume mode for default */ +int resume_mode = 0; + /* This is set to zero if the progressmeter is not desired. */ int showprogress = 1; @@ -202,6 +224,7 @@ uid_t userid; int errs, remin, remout; int pflag, iamremote, iamrecursive, targetshouldbedirectory; +off_t rate_limit = 0; #define CMDNEEDS 64 char cmd[CMDNEEDS]; /* must hold "rcp -r -p -d\0" */ @@ -223,7 +246,10 @@ char *targ; extern char *optarg; extern int optind; - + int factor, i; /* For rate limit */ + const char factors[] = "kMMGGG"; + char *c; + __progname = get_progname(argv[0]); args.l...

...from the Index: scp.c --- scp.c.prev +++ scp.c Fri Aug 18 04:14:40 2000 @@ -253,5 +253,5 @@ struct passwd *pwd; uid_t userid; int errs, remin, remout; -int pflag, iamremote, iamrecursive, targetshouldbedirectory; +int linkflag, pflag, iamremote, iamrecursive, targetshouldbedirectory; #define CMDNEEDS 64 @@ -280,5 +280,5 @@ main(argc, argv) memset(sshoptions,0,sizeof(sshoptions)); sshoptionsend = sshoptions; - while ((ch = getopt(argc, argv, "dfprtvBCc:i:P:o:S:q46")) != EOF) + while ((ch = getopt(argc, argv, "adfLprtvBCc:i:P:o:S:q46")) != EOF) switch (ch) { /* User...

...scp: command not found" FAQ entry but I'm not quite sure why we can't do this, unless it's because enhancements to scp are no longer a priority. Any other reason why it "is the way it is" other than that? The patch is below, all I've really done is replaced char cmd[CMDNEEDS] with char *rspcmd throughout. Forgive any dodgy coding, I'm not a developer during the day :). I haven't been able to test the patch below because I don't have a handy openbsd box, I have tested a patch under the portable version that seems to work fine. Let me know if I'm bett...

....7.1p2/scp.c --- openssh-3.7.1p2.orig/scp.c Fri Aug 22 01:34:41 2003 +++ openssh-3.7.1p2/scp.c Tue Oct 7 08:22:02 2003 @@ -201,6 +201,9 @@ uid_t userid; int errs, remin, remout; int pflag, iamremote, iamrecursive, targetshouldbedirectory; +#ifdef CHARSET_EBCDIC +int binary=0; +#endif #define CMDNEEDS 64 char cmd[CMDNEEDS]; /* must hold "rcp -r -p -d\0" */ @@ -231,7 +234,11 @@ addargs(&args, "-oClearAllForwardings yes"); fflag = tflag = 0; - while ((ch = getopt(argc, argv, "dfl:prtvBCc:i:P:q1246S:o:F:")) != -1) + while ((ch = getopt(argc, argv, "df...