On Fri, 11 Mar 2011, Sean Purdy said:
> I'm getting a buffer overflow when connecting to certain ssh servers
> with lftp.
 
> SSH-2.0-VShell_3_0_4_656 VShell
> SSH-2.0-VShell_3_5_0_351 VShell
> SSH-2.0-WS_FTP-SSH_6.1.1

Now same problem with
SSH-2.0-1.03 FlowSsh: WinSSHD 5.09
(lftp 4.0.6)

Setting sftp:protocol-version 2 mitigates the problem as before.
4.2.1-test1 works also.


$ lftp -u user,pass -p 22 sftp://someserver -e 'ls;quit'
*** buffer overflow detected ***: lftp terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x50)[0xb76ca390]
/lib/tls/i686/cmov/libc.so.6(+0xe12ca)[0xb76c92ca]
/lib/tls/i686/cmov/libc.so.6(+0xe0a08)[0xb76c8a08]
/lib/tls/i686/cmov/libc.so.6(_IO_default_xsputn+0x9e)[0xb7651afe]
/lib/tls/i686/cmov/libc.so.6(_IO_vfprintf+0xe24)[0xb7625a34]
/lib/tls/i686/cmov/libc.so.6(__vsprintf_chk+0xad)[0xb76c8abd]
/lib/tls/i686/cmov/libc.so.6(__sprintf_chk+0x2d)[0xb76c89fd]
....


Sean

Reply via email to