Bug 947021

Summary: sftp segfault using TAB autocompletion on remote side
Product: [Fedora] Fedora Reporter: Michael Petlan <mpetlan>
Component: opensshAssignee: Petr Lautrbach <plautrba>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 17CC: mattias.ellert, mgrepl, plautrba, tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: openssh-5.9p1-30.fc17 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-07-01 01:41:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
A tarball with the evil file... none

Description Michael Petlan 2013-04-01 08:49:45 UTC
Created attachment 730211 [details]
A tarball with the evil file...

Description of problem:

When connected to remote server, browsing remote directory tree using tab key to autocomplete dir/file names, SFTP client gets SIGSEGV.

It happens only if the filename contains some "bad" characters - for example czech diacritics or some strange characters. It's obvious that it's very nasty habit to put those characters into filenames, but it should be handled somehow, as they are handled in standard FS or in shell.


Version-Release number of selected component (if applicable):

openssh-clients-5.9p1-29.fc17.x86_64
openssh-5.9p1-29.fc17.x86_64

How reproducible:


Steps to Reproduce:
1. Place somewhere the bad file (attached to this report and packed in a tarrball).
2. Connect the machine with sftp. It's enough to use localhost, so
$ sftp username@localhost
3. Try to get the file and autocomplete the file name with tab key:
Type "get jede" and press TAB key.
  
Actual results:

SIGSEGV

Expected results:

The program handles this somehow - it autocompletes the path as expected or not, but it does not fall down.

Additional info:

These are my locale settings:

LANG=cs_CZ.UTF-8
LC_CTYPE="cs_CZ.UTF-8"
LC_NUMERIC="cs_CZ.UTF-8"
LC_TIME="cs_CZ.UTF-8"
LC_COLLATE="cs_CZ.UTF-8"
LC_MONETARY="cs_CZ.UTF-8"
LC_MESSAGES="cs_CZ.UTF-8"
LC_PAPER="cs_CZ.UTF-8"
LC_NAME="cs_CZ.UTF-8"
LC_ADDRESS="cs_CZ.UTF-8"
LC_TELEPHONE="cs_CZ.UTF-8"
LC_MEASUREMENT="cs_CZ.UTF-8"
LC_IDENTIFICATION="cs_CZ.UTF-8"
LC_ALL=

Comment 1 Fedora Update System 2013-06-20 10:37:35 UTC
openssh-6.1p1-9.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/openssh-6.1p1-9.fc18

Comment 2 Fedora Update System 2013-06-20 10:37:35 UTC
openssh-5.9p1-30.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/openssh-5.9p1-30.fc17

Comment 3 Fedora Update System 2013-06-21 01:59:53 UTC
Package openssh-5.9p1-30.fc17:
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing openssh-5.9p1-30.fc17'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-11392/openssh-5.9p1-30.fc17
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2013-06-27 01:59:19 UTC
openssh-6.1p1-9.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 5 Fedora Update System 2013-07-01 01:41:38 UTC
openssh-5.9p1-30.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.