similar to: [Bug 73] sftp segfaults on an attempt to up/download a nonexistent file

http://bugzilla.mindrot.org/show_bug.cgi?id=73 Summary: sftp segfaults on an attempt to up/download a nonexistent file Product: Portable OpenSSH Version: -current Platform: ix86 URL: http://www.FreeBSD.org/cgi/query-pr.cgi?pr=34019 OS/Version: FreeBSD Status: NEW Severity: normal

Do not pass GLOB_MARK as flag for glob(3) in the daemon implementation of glob, so names of directories will not have a trailing slash. This allows users to have filenames that can be used with other tools, such as rm. Add a new test to check this (based on RHBZ#1293271). A mild behaviour change is that users of the glob API now need to append the slash when building paths using its results.

https://bugzilla.mindrot.org/show_bug.cgi?id=2395 Bug ID: 2395 Summary: Error with sftp get wildcard when number of files is over 130 Product: Portable OpenSSH Version: 6.6p1 Hardware: amd64 OS: Linux Status: NEW Severity: normal Priority: P5 Component: sftp

http://bugzilla.mindrot.org/show_bug.cgi?id=450 ------- Additional Comments From tim at multitalents.net 2002-12-05 15:57 ------- I can not duplicate this problem on UnixWare or Linux ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

Hi folks. We were made aware of a MITRE CVE assignment on OpenSSH for a remote DoS in sftp, described as: The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via

As you might know, LFTP is a popular FTP/SFTP command-line client for most systems. One feature that is lacking from this tool is the ability to do a globbed ls via sftp. I have a patch ready for LFTP that incorporates some of the knowledge [like oddball systems glob() handling] and some of the code from sftp-glob.c for this tool to add this capability. I do, however, have some questions about

Add a new optional bool "directoryslash" to indicate whether the caller wants trailing slashes in names of directories, defaulting to true (the current behaviour); this helps with interoperability with other tools (such as rm). Related to RHBZ#1293271. --- daemon/glob.c | 11 +++++++++-- generator/actions.ml | 21 ++++++++++++++++----- gobject/Makefile.inc | 2 ++ po/POTFILES

http://bugzilla.mindrot.org/show_bug.cgi?id=778 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED AssignedTo|openssh-bugs at mindrot.org |djm at mindrot.org Attachment #1295 is|0

https://bugzilla.mindrot.org/show_bug.cgi?id=2463 Bug ID: 2463 Summary: Conflict with openbsd compat glob() function in shared libraries Product: Portable OpenSSH Version: 7.1p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component:

http://bugzilla.mindrot.org/show_bug.cgi?id=778 --- Comment #1 from Damien Miller <djm at mindrot.org> 2007-05-17 18:41:41 --- Created an attachment (id=1284) --> (http://bugzilla.mindrot.org/attachment.cgi?id=1284) Report error on read/write failures I'm not sure how much logspam this patch will generate, so I'm going to run with it for a little while. -- Configure

https://bugzilla.mindrot.org/show_bug.cgi?id=1655 Summary: sftp is unhappy with asterisks in filenames Product: Portable OpenSSH Version: 5.2p1 Platform: Other OS/Version: Mac OS X Status: NEW Severity: normal Priority: P2 Component: sftp AssignedTo: unassigned-bugs at mindrot.org

https://bugzilla.mindrot.org/show_bug.cgi?id=2181 Bug ID: 2181 Summary: error message changed for sftp(get command) Product: Portable OpenSSH Version: 6.0p1 Hardware: Other OS: Other Status: NEW Severity: enhancement Priority: P5 Component: sftp Assignee: unassigned-bugs at

http://bugzilla.mindrot.org/show_bug.cgi?id=739 Summary: A .cshrc that gives output causes sftp-server to reject sftp Product: Portable OpenSSH Version: 3.6.1p2 Platform: Sparc OS/Version: Solaris Status: NEW Severity: minor Priority: P2 Component: sftp-server AssignedTo:

https://bugzilla.mindrot.org/show_bug.cgi?id=2123 Bug ID: 2123 Summary: does not seem to support sftp protocol version 5 rename flag for overwriting files Product: Portable OpenSSH Version: 6.2p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5

https://bugzilla.mindrot.org/show_bug.cgi?id=2694 Bug ID: 2694 Summary: sftp ls command ignores sorting flags for globbed listing Product: Portable OpenSSH Version: -current Hardware: Other OS: Other Status: NEW Severity: normal Priority: P5 Component: sftp

https://bugzilla.mindrot.org/show_bug.cgi?id=2098 Bug ID: 2098 Summary: sftp doesn't handle '#' within filenames for transfer Classification: Unclassified Product: Portable OpenSSH Version: 5.8p2 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component:

https://bugzilla.mindrot.org/show_bug.cgi?id=1990 Bug #: 1990 Summary: sftp segfaults when tab-completing a directory which contains umlauts Classification: Unclassified Product: Portable OpenSSH Version: 5.9p1 Platform: amd64 OS/Version: Linux Status: NEW Severity: normal

On Wed, 27 Sep 2017, Martin Hecht wrote: > all tests passed on > > Ubuntu 16.04.3 LTS and > Scientific Linux release 6.9 (Carbon) > > On SUSE Linux Enterprise Server 11 SP3 LTSS I had to provide a local > installation of a newer openssl. I have chosen their current LTS version > 1.0.2l with shared library support enabled, and I had to tweak with > CFLAGS and LDFLAGS

Add a new optional bool "nodirectoryslash", to indicate that the caller does not want trailing slashes in names of directories; this helps with interoperability with other tools (such as rm). Related to RHBZ#1293271. --- daemon/glob.c | 8 ++++++-- generator/actions.ml | 17 ++++++++++++----- gobject/Makefile.inc | 2 ++ po/POTFILES | 1 + 4 files changed, 21

https://bugzilla.mindrot.org/show_bug.cgi?id=1956 Bug #: 1956 Summary: sftp segfaults in parse_args() when argv[0] is NULL Classification: Unclassified Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sftp