From owner-freebsd-bugs@FreeBSD.ORG Mon Aug 29 13:40:12 2011 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 30BA31065672 for ; Mon, 29 Aug 2011 13:40:12 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 0EC2B8FC14 for ; Mon, 29 Aug 2011 13:40:12 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p7TDeB6A033957 for ; Mon, 29 Aug 2011 13:40:11 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p7TDeBNL033956; Mon, 29 Aug 2011 13:40:11 GMT (envelope-from gnats) Resent-Date: Mon, 29 Aug 2011 13:40:11 GMT Resent-Message-Id: <201108291340.p7TDeBNL033956@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, HIROSHI OOTA Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E5974106568A for ; Mon, 29 Aug 2011 13:38:02 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22]) by mx1.freebsd.org (Postfix) with ESMTP id BCAC38FC18 for ; Mon, 29 Aug 2011 13:38:02 +0000 (UTC) Received: from red.freebsd.org (localhost [127.0.0.1]) by red.freebsd.org (8.14.4/8.14.4) with ESMTP id p7TDc26F047186 for ; Mon, 29 Aug 2011 13:38:02 GMT (envelope-from nobody@red.freebsd.org) Received: (from nobody@localhost) by red.freebsd.org (8.14.4/8.14.4/Submit) id p7TDc2kW047185; Mon, 29 Aug 2011 13:38:02 GMT (envelope-from nobody) Message-Id: <201108291338.p7TDc2kW047185@red.freebsd.org> Date: Mon, 29 Aug 2011 13:38:02 GMT From: HIROSHI OOTA To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: bin/160279: sshd truncates the data when `HPNDisabled no' X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Aug 2011 13:40:12 -0000 >Number: 160279 >Category: bin >Synopsis: sshd truncates the data when `HPNDisabled no' >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Aug 29 13:40:11 UTC 2011 >Closed-Date: >Last-Modified: >Originator: HIROSHI OOTA >Release: 9--BETA2 (Aug 29 2011) >Organization: >Environment: FreeBSD XXX 9.0-BETA2 FreeBSD 9.0-BETA2 #156 r225239M: Mon Aug 29 10:57:13 JST 2011 root@ amd64 >Description: When HPN is enable, The data transmitted with plink(ssh client for windows) is truncated. When `HPNDisabled yes' is set in sshd_config, the bug doesn't occur. The size of the data is different at every execution. client: OS: Windows XpSP3 ssh-client: plink(SSH-2.0-PuTTY_Release_0.60) server: FreeBSD 9.0-BETA2 >How-To-Repeat: When I send data.dat(5,747,152 bytes), sshd truncates it. Y:\test>plink -v my-server.example.com dd of=/dev/null < data.dat Looking up host "my-server.example.com" Connecting to xxx.xxx.xxx.xxx port 22 Server version: SSH-2.0-OpenSSH_5.8p2_hpn13v11 FreeBSD-20110503 We claim version: SSH-2.0-PuTTY_Release_0.60 Using SSH protocol version 2 Doing Diffie-Hellman group exchange Doing Diffie-Hellman key exchange with hash SHA-256 Host key fingerprint is: ssh-rsa 2048 xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx Initialised AES-256 SDCTR client->server encryption Initialised HMAC-SHA1 client->server MAC algorithm Initialised AES-256 SDCTR server->client encryption Initialised HMAC-SHA1 server->client MAC algorithm Pageant is running. Requesting keys. Pageant has 1 SSH-2 keys Using username "xxx". Trying Pageant key #0 Authenticating with public key "xxxx" from agent Sending Pageant's response Access granted Opened channel for session Started a shell/command Sent EOF message 11155+37 records in 11173+1 records out 5720935 bytes transferred in 25.294115 secs (226177 bytes/sec) <== incorrect size Server sent command exit status 0 Disconnected: All channels closed Y:\test>dir Volume in drive Y has no label. Volume Serial Number is 000A-E626 Directory of Y:\test 2011/08/29 21:52 . 2011/08/29 21:52 .. 2008/08/26 20:37 5,747,152 data.dat 1 File(s) 5,747,152 bytes 2 Dir(s) 440,913,920 bytes free >Fix: >Release-Note: >Audit-Trail: >Unformatted: