From owner-freebsd-bugs  Tue Oct 23 11:30:16 2001
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id E028E37B406
	for <freebsd-bugs@hub.freebsd.org>; Tue, 23 Oct 2001 11:30:00 -0700 (PDT)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.4/8.11.4) id f9NIU0i57383;
	Tue, 23 Oct 2001 11:30:00 -0700 (PDT)
	(envelope-from gnats)
Received: from smtp-2.enteract.com (smtp-2.enteract.com [207.229.143.4])
	by hub.freebsd.org (Postfix) with ESMTP id E57EC37B401
	for <FreeBSD-gnats-submit@freebsd.org>; Tue, 23 Oct 2001 11:21:05 -0700 (PDT)
Received: from bjorn.goddamnbastard.org (bjorn.goddamnbastard.org [216.80.6.225])
	by smtp-2.enteract.com (Postfix) with SMTP id 0681B69C6
	for <FreeBSD-gnats-submit@freebsd.org>; Tue, 23 Oct 2001 13:21:05 -0500 (CDT)
Received: (qmail 23220 invoked by uid 1000); 23 Oct 2001 18:21:04 -0000
Message-Id: <20011023182104.23219.qmail@bjorn.goddamnbastard.org>
Date: 23 Oct 2001 18:21:04 -0000
From: ryanb@goddamnbastard.org
Reply-To: ryanb@goddamnbastard.org
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.2
Subject: bin/31457: OpenSSH 2.9 login(1) support broken
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-bugs.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-bugs>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-bugs>
X-Loop: FreeBSD.org


>Number:         31457
>Category:       bin
>Synopsis:       OpenSSH 2.9 login(1) support broken
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Oct 23 11:30:00 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     ryan beasley
>Release:        FreeBSD 4.4-STABLE i386
>Organization:
>Environment:

    FreeBSD backup.enteract.com 4.4-STABLE FreeBSD 4.4-STABLE #1: Tue Oct 16 17:35:08 CDT 2001 ryanb@backup.enteract.com:/usr/obj/usr/src/sys/BACKUP  i386
    (snapshot taken at 2001.10.01 00:00:00 GMT)

    sshd version OpenSSH_2.9 FreeBSD localisations 20010713
    SSH Version OpenSSH_2.3.0 green@FreeBSD.org 20010321, protocol versions 1.5/2.0.  Compiled with SSL (0x0090601f)
    OpenSSH_2.9 FreeBSD localisations 20010713, SSH protocols 1.5/2.0, OpenSSL 0x0090601f

>Description:

    When UseLogin is set to 1 in sshd(8)'s config, all login attempts
    without a command to execute remotely cause the sshd child process
    to catch SIGSEGV and most likely dump core.  Peeking at such a dump,
    we find a problem in the code that handles setting up the user's
    environment.  Please the check the following URL for what I think is
    useful debugging info.

    http://www.freebsd.org/cgi/getmsg.cgi?fetch=547458+0+/usr/local/www/db/text/2001/freebsd-stable/20011021.freebsd-stable

>How-To-Repeat:

    Easy.  Set UseLogin to yes in your sshd configuration and start the
    daemon.  Follow that up with a standard SSH login:

	server: backup
	client: akerfeldt

	> [ryanb@akerfeldt ~] $ date
	> Tue Oct 23 12:38:34 CDT 2001
	> [ryanb@akerfeldt ~] $ ssh backup
	> ryanb@backup's password: 
	> Connection to backup closed.
	> 
	> Oct 23 12:38:37 backup /kernel: pid 20327 (sshd), uid 0: exited on signal 11 (core dumped)


>Fix:

    I'm going to look into this again in the near future, but I have no
    idea whatsoever.
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message