Mailing List Archive

[Bug 690] sftp quoted filename parsing bug in get and put commands
http://bugzilla.mindrot.org/show_bug.cgi?id=690

Summary: sftp quoted filename parsing bug in get and put commands
Product: Portable OpenSSH
Version: -current
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: sftp
AssignedTo: openssh-bugs@mindrot.org
ReportedBy: admorten@umich.edu


When doing a get or put of a quoted filename, sftp misinterprets the location of the terminating
quote. In sftp-int.c, when the terminating quote is located, the path is NUL terminated, but the
location counter is not updated, causing the source filename's end quote to be interpreted as the
opening quote of a destination filename. This causes 'get "filename"' to fail with an Unterminated
quote error, and causes 'get "src-filename" "dest-filename"' to write src-filename to a file named "
" rather than dest-filename. Unquoted transfer commands--e.g., get src-filename dest-filename--
are not affected.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 690] sftp quoted filename parsing bug in get and put commands [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=690





------- Additional Comments From admorten@umich.edu 2003-09-20 00:03 -------
Created an attachment (id=437)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=437&action=view)
Patch fixing increment bug in get_pathname function of sftp-int.c




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 690] sftp quoted filename parsing bug in get and put commands [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=690

admorten@umich.edu changed:

What |Removed |Added
----------------------------------------------------------------------------
Keywords| |openbsd, patch





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 690] sftp quoted filename parsing bug in get and put commands [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=690

admorten@umich.edu changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 690] sftp quoted filename parsing bug in get and put commands [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=690





------- Additional Comments From admorten@umich.edu 2003-09-24 01:43 -------
Fixed in OpenSSH 3.7.1p2.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.