ports/144041: sftp coredumps when 'ls'ing

[Julian Fagir]

>Number:         144041
>Category:       ports
>Synopsis:       sftp coredumps when 'ls'ing
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Feb 17 15:40:01 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Julian Fagir
>Release:        7.2-STABLE Dec 1
>Organization:
>Environment:
FreeBSD $JAILNAMENAME 7.2-STABLE FreeBSD 7.2-STABLE #0: Tue Dec  1 17:39:38 CET 2009     master@$HOSTNAME:/usr/obj/usr/src/sys/GENERIC  amd64
>Description:
When using sftp, it crashes with a 'Bus error: 10 (core dumped)' as soon as doing 'ls'.

It is an openssh-gssapi-5.2.p1_2,1 built from ports with the options (before, it was an openssh-5.0 and had the same problems):
cat /var/db/ports/openssh/options 
# This file is auto-generated by 'make config'.
# No user-servicable parts inside!
# Options for openssh-gssapi-5.2.p1_2,1
_OPTIONS_READ=openssh-gssapi-5.2.p1_2,1
WITH_PAM=true
WITH_TCP_WRAPPERS=true
WITH_LIBEDIT=true
WITH_KERBEROS=true
WITHOUT_SUID_SSH=true
WITHOUT_BSM=true
WITH_GSSAPI=true
WITHOUT_KERB_GSSAPI=true
WITHOUT_OPENSSH_CHROOT=true
WITHOUT_OPENSC=true
WITHOUT_OPENSCPINPATCH=true
WITHOUT_HPN=true
WITHOUT_LPK=true
WITHOUT_X509=true
WITHOUT_OVERWRITE_BASE=true


When attaching a truss to the process, you see:
read(0,"l",1)                                    = 1 (0x1)
write(1,"l",1)                                   = 1 (0x1)
read(0,"s",1)                                    = 1 (0x1)
write(1,"s",1)                                   = 1 (0x1)
read(0,"\n",1)                                   = 1 (0x1)
write(1,"\n",1)                                  = 1 (0x1)
ioctl(0,TIOCSETAW,0x1810a04)                     = 0 (0x0)
sigprocmask(SIG_BLOCK,SIGHUP|SIGINT|SIGQUIT|SIGTERM|SIGSTOP|SIGTSTP|SIGCONT|SIGWINCH,0x0) = 0 (0x0)
sigaction(SIGINT,{ SIG_IGN SA_RESTART ss_t },{ 0x801194c80 SA_RESTART ss_t }) = 0 (0x0)
sigaction(SIGTSTP,{ SIG_DFL SA_RESTART ss_t },{ 0x801194c80 SA_RESTART ss_t }) = 0 (0x0)
sigaction(SIGQUIT,{ SIG_DFL SA_RESTART ss_t },{ 0x801194c80 SA_RESTART ss_t }) = 0 (0x0)
sigaction(SIGHUP,{ 0x4039f0 SA_RESTART ss_t },{ 0x801194c80 SA_RESTART ss_t }) = 0 (0x0)
sigaction(SIGTERM,{ 0x4039f0 SA_RESTART ss_t },{ 0x801194c80 SA_RESTART ss_t }) = 0 (0x0)
sigaction(SIGCONT,{ SIG_DFL SA_RESTART ss_t },{ 0x801194c80 SA_RESTART ss_t }) = 0 (0x0)
sigaction(SIGWINCH,{ SIG_DFL SA_RESTART ss_t },{ 0x801194c80 SA_RESTART ss_t }) = 0 (0x0)
sigprocmask(SIG_SETMASK,0x0,0x0)                 = 0 (0x0)
sigaction(SIGINT,0x0,{ SIG_IGN SA_RESTART ss_t }) = 0 (0x0)
sigaction(SIGINT,{ 0x406e00 0x0 ss_t },0x0)      = 0 (0x0)
SIGNAL 10 (SIGBUS)
process exit, rval = 0

>How-To-Repeat:
Just login and do ls:
sftp $SERVER
sftp> ls
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: