Bug 947021 - sftp segfault using TAB autocompletion on remote side
Summary: sftp segfault using TAB autocompletion on remote side
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: openssh
Version: 17
Hardware: Unspecified
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Petr Lautrbach
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-04-01 08:49 UTC by Michael Petlan
Modified: 2013-07-01 01:41 UTC (History)
4 users (show)

Fixed In Version: openssh-5.9p1-30.fc17
Clone Of:
Environment:
Last Closed: 2013-07-01 01:41:38 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
A tarball with the evil file... (137 bytes, application/x-gzip)
2013-04-01 08:49 UTC, Michael Petlan
no flags Details

Description Michael Petlan 2013-04-01 08:49:45 UTC
Created attachment 730211 [details]
A tarball with the evil file...

Description of problem:

When connected to remote server, browsing remote directory tree using tab key to autocomplete dir/file names, SFTP client gets SIGSEGV.

It happens only if the filename contains some "bad" characters - for example czech diacritics or some strange characters. It's obvious that it's very nasty habit to put those characters into filenames, but it should be handled somehow, as they are handled in standard FS or in shell.


Version-Release number of selected component (if applicable):

openssh-clients-5.9p1-29.fc17.x86_64
openssh-5.9p1-29.fc17.x86_64

How reproducible:


Steps to Reproduce:
1. Place somewhere the bad file (attached to this report and packed in a tarrball).
2. Connect the machine with sftp. It's enough to use localhost, so
$ sftp username@localhost
3. Try to get the file and autocomplete the file name with tab key:
Type "get jede" and press TAB key.
  
Actual results:

SIGSEGV

Expected results:

The program handles this somehow - it autocompletes the path as expected or not, but it does not fall down.

Additional info:

These are my locale settings:

LANG=cs_CZ.UTF-8
LC_CTYPE="cs_CZ.UTF-8"
LC_NUMERIC="cs_CZ.UTF-8"
LC_TIME="cs_CZ.UTF-8"
LC_COLLATE="cs_CZ.UTF-8"
LC_MONETARY="cs_CZ.UTF-8"
LC_MESSAGES="cs_CZ.UTF-8"
LC_PAPER="cs_CZ.UTF-8"
LC_NAME="cs_CZ.UTF-8"
LC_ADDRESS="cs_CZ.UTF-8"
LC_TELEPHONE="cs_CZ.UTF-8"
LC_MEASUREMENT="cs_CZ.UTF-8"
LC_IDENTIFICATION="cs_CZ.UTF-8"
LC_ALL=

Comment 1 Fedora Update System 2013-06-20 10:37:35 UTC
openssh-6.1p1-9.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/openssh-6.1p1-9.fc18

Comment 2 Fedora Update System 2013-06-20 10:37:35 UTC
openssh-5.9p1-30.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/openssh-5.9p1-30.fc17

Comment 3 Fedora Update System 2013-06-21 01:59:53 UTC
Package openssh-5.9p1-30.fc17:
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing openssh-5.9p1-30.fc17'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-11392/openssh-5.9p1-30.fc17
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2013-06-27 01:59:19 UTC
openssh-6.1p1-9.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 5 Fedora Update System 2013-07-01 01:41:38 UTC
openssh-5.9p1-30.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.