On Fri, 11 Mar 2011, Sean Purdy said: > I'm getting a buffer overflow when connecting to certain ssh servers > with lftp. > SSH-2.0-VShell_3_0_4_656 VShell > SSH-2.0-VShell_3_5_0_351 VShell > SSH-2.0-WS_FTP-SSH_6.1.1
Now same problem with SSH-2.0-1.03 FlowSsh: WinSSHD 5.09 (lftp 4.0.6) Setting sftp:protocol-version 2 mitigates the problem as before. 4.2.1-test1 works also. $ lftp -u user,pass -p 22 sftp://someserver -e 'ls;quit' *** buffer overflow detected ***: lftp terminated ======= Backtrace: ========= /lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x50)[0xb76ca390] /lib/tls/i686/cmov/libc.so.6(+0xe12ca)[0xb76c92ca] /lib/tls/i686/cmov/libc.so.6(+0xe0a08)[0xb76c8a08] /lib/tls/i686/cmov/libc.so.6(_IO_default_xsputn+0x9e)[0xb7651afe] /lib/tls/i686/cmov/libc.so.6(_IO_vfprintf+0xe24)[0xb7625a34] /lib/tls/i686/cmov/libc.so.6(__vsprintf_chk+0xad)[0xb76c8abd] /lib/tls/i686/cmov/libc.so.6(__sprintf_chk+0x2d)[0xb76c89fd] .... Sean