search for: remote_glob

https://bugzilla.mindrot.org/show_bug.cgi?id=3069 Bug ID: 3069 Summary: sftp issues with [ or ] in path name Product: Portable OpenSSH Version: 8.0p1 Hardware: Other OS: Linux Status: NEW Severity: normal Priority: P5 Component: sftp Assignee: unassigned-bugs at mindrot.org

Hi folks. We were made aware of a MITRE CVE assignment on OpenSSH for a remote DoS in sftp, described as: The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that...

Hello all Im using sftp 1:4.7p1-8ubuntu1.2 in a batchjob Ive noticed that sftp needs a long time for sending a filelist. The timespan increases exponential if many files are on the remoteserver. for example "ls -la *.txt" needs 10 seconds for 2000 files but needs 50 seconds for 4000 files. For 150.000 Files i have to wait 15 minutes for example but the

...d give feedback. - Ben Index: sftp.c =================================================================== RCS file: /cvs/src/usr.bin/ssh/sftp.c,v retrieving revision 1.80 diff -u -r1.80 sftp.c --- sftp.c 27 Mar 2006 23:15:46 -0000 1.80 +++ sftp.c 31 Mar 2006 23:31:13 -0000 @@ -64,6 +64,9 @@ int remote_glob(struct sftp_conn *, const char *, int, int (*)(const char *, int), glob_t *); /* proto for sftp-glob.c */ +/* sftp connection structure */ +struct sftp_conn *conn; + /* Separators for interactive commands */ #define WHITESPACE " \t\r\n" @@ -108,42 +111,49 @@ struct CMD {...

...on the list. =) - Ben Index: sftp.c =================================================================== RCS file: /cvs/src/usr.bin/ssh/sftp.c,v retrieving revision 1.97 diff -u -r1.97 sftp.c --- sftp.c 24 Oct 2007 03:30:02 -0000 1.97 +++ sftp.c 12 Dec 2007 03:19:32 -0000 @@ -71,6 +71,12 @@ int remote_glob(struct sftp_conn *, const char *, int, int (*)(const char *, int), glob_t *); /* proto for sftp-glob.c */ +/* sftp connection structure */ +struct sftp_conn *conn; + +/* sftp remote path */ +char *remote_path; + /* Separators for interactive commands */ #define WHITESPACE " \t\r\n&q...

...ty: P5 Component: sftp Assignee: unassigned-bugs at mindrot.org Reporter: orion at cora.nwra.com Created attachment 2454 --> https://bugzilla.mindrot.org/attachment.cgi?id=2454&action=edit Patch to detect GLOB_NOSPACE and return better error message sftp uses remote_glob() with ls and get, which sets GLOB_LIMIT, so it is possible that a "get a*" command could exhaust the default limit. In this case you get the unhelpful error message: sftp> get ssw* File "/data/cora1/leka/AIA/ssw*" not found. With the attached patch you get a better error...

Is there anyone actively working on adding recursive operations to sftp? I've got a recent snapshot of the source (Dec 6th), and I see extended options for ls and the inclusion of history, both of which are welcome, but there doesn't seem to be any hint of recursive operation support. If there are people working quietly on recursive op patches, I'd like to hear from you. I've

...--- cut here to get patch ------ bash-3.2$ diff -u /net/grok.czech/ws-local/onnv-clone/usr/src/cmd/ssh/sftp/sftp.c sftp.c --- /net/grok.czech/ws-local/onnv-clone/usr/src/cmd/ssh/sftp/sftp.c Wed Oct 15 00:41:07 2008 +++ sftp.c Fri Nov 21 17:05:48 2008 @@ -1185,18 +1185,26 @@ remote_glob(conn, path1, GLOB_NOCHECK, NULL, &g); for (i = 0; g.gl_pathv[i] && !interrupted; i++) { if (!(aa = do_stat(conn, g.gl_pathv[i], 0))) { - if (err != 0 && err_abort) + if (err_abort...

...id); else send_status(id, SSH2_FX_OP_UNSUPPORTED); /* MUST */ xfree(request); Index: ssh/sftp.c =================================================================== --- ssh.orig/sftp.c 2009-02-10 14:54:58.000000000 +0100 +++ ssh/sftp.c 2009-02-10 15:15:19.000000000 +0100 @@ -98,6 +98,7 @@ int remote_glob(struct sftp_conn *, cons #define I_GET 5 #define I_HELP 6 #define I_LCHDIR 7 +#define I_LINK 25 #define I_LLS 8 #define I_LMKDIR 9 #define I_LPWD 10 @@ -135,6 +136,7 @@ static const struct CMD cmds[] = { { "help", I_HELP }, { "lcd", I_LCHDIR }, { "lchdir&qu...

https://bugzilla.mindrot.org/show_bug.cgi?id=2463 Bug ID: 2463 Summary: Conflict with openbsd compat glob() function in shared libraries Product: Portable OpenSSH Version: 7.1p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component:

Hi, The 4.4p1 release is approaching now, so we are now asking people to actively test snapshots or CVS and report back to the mailing list. Snapshots are available from http://www.mindrot.org/openssh_snap or from any of the mirrors listed on http://www.openssh.org/portable.html The latter page also includes instructions for checking out portable OpenSSH via anonymous CVS. This release