NetBSD-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: bin/59278 (tests/lib/librumphijack/t_tcpip:ssh failing since openssh 10.0 update)
The following reply was made to PR bin/59278; it has been noted by GNATS.
From: Christos Zoulas <christos%zoulas.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: christos%netbsd.org@localhost,
gnats-admin%netbsd.org@localhost,
netbsd-bugs%netbsd.org@localhost,
"riastradh%netbsd.org@localhost" <riastradh%NetBSD.org@localhost>,
campbell+netbsd%mumble.net@localhost
Subject: Re: bin/59278 (tests/lib/librumphijack/t_tcpip:ssh failing since
openssh 10.0 update)
Date: Fri, 11 Apr 2025 13:53:43 -0400
--Apple-Mail=_B4B2CBC7-8D1C-4CC3-9FA4-2B69F0FE87EE
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
The LDAP problem has been fixed, but the new sshd-session wants to exec =
sshd-auth with stdin/out the network socket so the hijack
code tries to dup(128, 0) and fails in:
if (fd_isrump(oldd)) {
int (*op_close)(int) =3D GETSYSCALL(host, CLOSE);
=20
/* only allow fd 0-2 for cross-kernel dup */
if (!(newd >=3D 0 && newd <=3D 2 && !fd_isrump(newd))) {
errno =3D EBADF; <-----
return -1;
}
The server client portion of the test works without rump...
christos
--Apple-Mail=_B4B2CBC7-8D1C-4CC3-9FA4-2B69F0FE87EE
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iF0EARECAB0WIQS+BJlbqPkO0MDBdsRxESqxbLM7OgUCZ/lXJwAKCRBxESqxbLM7
OulyAKCLCsYWA3V+z5+LjK3T//6bf7XiXwCg77YszwfVrReC1pDukGPhMTju0Pk=
=A9Ax
-----END PGP SIGNATURE-----
--Apple-Mail=_B4B2CBC7-8D1C-4CC3-9FA4-2B69F0FE87EE--
Home |
Main Index |
Thread Index |
Old Index