1 From 11b88754cadcad0ba79b4ffcc127223248dccb54 Mon Sep 17 00:00:00 2001
2 From: "dtucker@openbsd.org" <dtucker@openbsd.org>
3 Date: Wed, 23 Jan 2019 08:01:46 +0000
4 Subject: upstream: Sanitize scp filenames via snmprintf. To do this we move
6 the progressmeter formatting outside of signal handler context and have the
7 atomicio callback called for EINTR too. bz#2434 with contributions from djm
8 and jjelen at redhat.com, ok djm@
10 OpenBSD-Commit-ID: 1af61c1f70e4f3bd8ab140b9f1fa699481db57d8
14 Origin: backport, https://anongit.mindrot.org/openssh.git/commit/?id=8976f1c4b2721c26e878151f52bdf346dfe2d54c
15 Bug-Debian: https://bugs.debian.org/793412
16 Last-Update: 2019-02-08
18 Patch-Name: sanitize-scp-filenames-via-snmprintf.patch
20 atomicio.c | 20 ++++++++++++++-----
21 progressmeter.c | 53 ++++++++++++++++++++++---------------------------
22 progressmeter.h | 3 ++-
24 sftp-client.c | 16 ++++++++-------
25 5 files changed, 51 insertions(+), 42 deletions(-)
27 diff --git a/atomicio.c b/atomicio.c
28 index f854a06f5..d91bd7621 100644
32 -/* $OpenBSD: atomicio.c,v 1.28 2016/07/27 23:18:12 djm Exp $ */
33 +/* $OpenBSD: atomicio.c,v 1.29 2019/01/23 08:01:46 dtucker Exp $ */
35 * Copyright (c) 2006 Damien Miller. All rights reserved.
36 * Copyright (c) 2005 Anil Madhavapeddy. All rights reserved.
37 @@ -65,9 +65,14 @@ atomicio6(ssize_t (*f) (int, void *, size_t), int fd, void *_s, size_t n,
38 res = (f) (fd, s + pos, n - pos);
42 + if (errno == EINTR) {
43 + /* possible SIGALARM, update callback */
44 + if (cb != NULL && cb(cb_arg, 0) == -1) {
49 - if (errno == EAGAIN || errno == EWOULDBLOCK) {
50 + } else if (errno == EAGAIN || errno == EWOULDBLOCK) {
51 #ifndef BROKEN_READ_COMPARISON
52 (void)poll(&pfd, 1, -1);
54 @@ -122,9 +127,14 @@ atomiciov6(ssize_t (*f) (int, const struct iovec *, int), int fd,
55 res = (f) (fd, iov, iovcnt);
59 + if (errno == EINTR) {
60 + /* possible SIGALARM, update callback */
61 + if (cb != NULL && cb(cb_arg, 0) == -1) {
66 - if (errno == EAGAIN || errno == EWOULDBLOCK) {
67 + } else if (errno == EAGAIN || errno == EWOULDBLOCK) {
68 #ifndef BROKEN_READV_COMPARISON
69 (void)poll(&pfd, 1, -1);
71 diff --git a/progressmeter.c b/progressmeter.c
72 index fe9bf52e4..add462dde 100644
76 -/* $OpenBSD: progressmeter.c,v 1.45 2016/06/30 05:17:05 dtucker Exp $ */
77 +/* $OpenBSD: progressmeter.c,v 1.46 2019/01/23 08:01:46 dtucker Exp $ */
79 * Copyright (c) 2003 Nils Nordman. All rights reserved.
90 #include "progressmeter.h"
95 #define DEFAULT_WINSIZE 80
96 #define MAX_WINSIZE 512
97 @@ -61,7 +63,7 @@ static void setscreensize(void);
98 void refresh_progress_meter(void);
100 /* signal handler for updating the progress meter */
101 -static void update_progress_meter(int);
102 +static void sig_alarm(int);
104 static double start; /* start progress */
105 static double last_update; /* last progress update */
106 @@ -74,6 +76,7 @@ static long stalled; /* how long we have been stalled */
107 static int bytes_per_second; /* current speed in bytes per second */
108 static int win_size; /* terminal window size */
109 static volatile sig_atomic_t win_resized; /* for window resizing */
110 +static volatile sig_atomic_t alarm_fired;
112 /* units for format_size */
113 static const char unit[] = " KMGT";
114 @@ -126,9 +129,17 @@ refresh_progress_meter(void)
117 int hours, minutes, seconds;
121 + if ((!alarm_fired && !win_resized) || !can_output())
130 transferred = *counter - (cur_pos ? cur_pos : start_pos);
132 now = monotime_double();
133 @@ -158,16 +169,11 @@ refresh_progress_meter(void)
137 - file_len = win_size - 35;
138 + file_len = win_size - 36;
140 - len = snprintf(buf, file_len + 1, "\r%s", file);
143 - if (len >= file_len + 1)
145 - for (i = len; i < file_len; i++)
147 - buf[file_len] = '\0';
149 + snmprintf(buf+1, sizeof(buf)-1 , &file_len, "%*s",
150 + file_len * -1, file);
153 /* percent of transfer done */
154 @@ -228,22 +234,11 @@ refresh_progress_meter(void)
158 -update_progress_meter(int ignore)
159 +sig_alarm(int ignore)
163 - save_errno = errno;
170 - refresh_progress_meter();
172 - signal(SIGALRM, update_progress_meter);
173 + signal(SIGALRM, sig_alarm);
175 alarm(UPDATE_INTERVAL);
176 - errno = save_errno;
180 @@ -259,10 +254,9 @@ start_progress_meter(const char *f, off_t filesize, off_t *ctr)
181 bytes_per_second = 0;
185 - refresh_progress_meter();
186 + refresh_progress_meter();
188 - signal(SIGALRM, update_progress_meter);
189 + signal(SIGALRM, sig_alarm);
190 signal(SIGWINCH, sig_winch);
191 alarm(UPDATE_INTERVAL);
193 @@ -286,6 +280,7 @@ stop_progress_meter(void)
197 + signal(SIGWINCH, sig_winch);
201 diff --git a/progressmeter.h b/progressmeter.h
202 index bf179dca6..8f6678060 100644
203 --- a/progressmeter.h
204 +++ b/progressmeter.h
206 -/* $OpenBSD: progressmeter.h,v 1.3 2015/01/14 13:54:13 djm Exp $ */
207 +/* $OpenBSD: progressmeter.h,v 1.4 2019/01/23 08:01:46 dtucker Exp $ */
209 * Copyright (c) 2002 Nils Nordman. All rights reserved.
214 void start_progress_meter(const char *, off_t, off_t *);
215 +void refresh_progress_meter(void);
216 void stop_progress_meter(void);
217 diff --git a/scp.c b/scp.c
218 index 7163d33dc..80308573c 100644
221 @@ -593,6 +593,7 @@ scpio(void *_cnt, size_t s)
222 off_t *cnt = (off_t *)_cnt;
225 + refresh_progress_meter();
227 bandwidth_limit(&bwlimit, s);
229 diff --git a/sftp-client.c b/sftp-client.c
230 index 4986d6d8d..2bc698f86 100644
233 @@ -101,7 +101,9 @@ sftpio(void *_bwlimit, size_t amount)
235 struct bwlimit *bwlimit = (struct bwlimit *)_bwlimit;
237 - bandwidth_limit(bwlimit, amount);
238 + refresh_progress_meter();
239 + if (bwlimit != NULL)
240 + bandwidth_limit(bwlimit, amount);
244 @@ -121,8 +123,8 @@ send_msg(struct sftp_conn *conn, struct sshbuf *m)
245 iov[1].iov_base = (u_char *)sshbuf_ptr(m);
246 iov[1].iov_len = sshbuf_len(m);
248 - if (atomiciov6(writev, conn->fd_out, iov, 2,
249 - conn->limit_kbps > 0 ? sftpio : NULL, &conn->bwlimit_out) !=
250 + if (atomiciov6(writev, conn->fd_out, iov, 2, sftpio,
251 + conn->limit_kbps > 0 ? &conn->bwlimit_out : NULL) !=
252 sshbuf_len(m) + sizeof(mlen))
253 fatal("Couldn't send packet: %s", strerror(errno));
255 @@ -138,8 +140,8 @@ get_msg_extended(struct sftp_conn *conn, struct sshbuf *m, int initial)
257 if ((r = sshbuf_reserve(m, 4, &p)) != 0)
258 fatal("%s: buffer error: %s", __func__, ssh_err(r));
259 - if (atomicio6(read, conn->fd_in, p, 4,
260 - conn->limit_kbps > 0 ? sftpio : NULL, &conn->bwlimit_in) != 4) {
261 + if (atomicio6(read, conn->fd_in, p, 4, sftpio,
262 + conn->limit_kbps > 0 ? &conn->bwlimit_in : NULL) != 4) {
263 if (errno == EPIPE || errno == ECONNRESET)
264 fatal("Connection closed");
266 @@ -157,8 +159,8 @@ get_msg_extended(struct sftp_conn *conn, struct sshbuf *m, int initial)
268 if ((r = sshbuf_reserve(m, msg_len, &p)) != 0)
269 fatal("%s: buffer error: %s", __func__, ssh_err(r));
270 - if (atomicio6(read, conn->fd_in, p, msg_len,
271 - conn->limit_kbps > 0 ? sftpio : NULL, &conn->bwlimit_in)
272 + if (atomicio6(read, conn->fd_in, p, msg_len, sftpio,
273 + conn->limit_kbps > 0 ? &conn->bwlimit_in : NULL)
276 fatal("Connection closed");