AV when using sftp plugin

The behaviour described in the bug report is either by design, or would be far too complex/time-consuming to be changed

Moderators: white, Hacker, petermad, Stefan2

Post Reply
MrCricket
Junior Member
Junior Member
Posts: 49
Joined: 2009-05-04, 15:30 UTC

AV when using sftp plugin

Post by *MrCricket »

1) clean install b10
2) install sftpplug.zip (+llibeay32.dll + libssh2.dll)
3) sftp: add new connection (F7) to ubuntu server, define IP + user + pass
4) sftp: connect using new connecrtion, accept fingerprint
5) sftp: now we see ubuntu's FS; choose big dir and press <space> - TC starts evaluating that dir in order to get its size. We see a lot of Get directory messages in log:
Image: https://s25.postimg.org/c4b0bxhyn/2016_08_31_13_41_31.png
6) sftp: now press Disconnect button: sftp disconnects and re-connects after 2 seconds, continuing to enumerate remote FS (actually we can't stop till it finishes).
7) we don't want to wait: press Close button on main TC window: getting AV:
Image: https://s25.postimg.org/g1ya1c4rz/2016_08_31_13_34_37.png

TC 8.52a crashes in the same manner.
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Where did you get the dlls? I'm not getting any crash here, so it may be a problem with outdated ssh dlls.
Author of Total Commander
https://www.ghisler.com
MrCricket
Junior Member
Junior Member
Posts: 49
Joined: 2009-05-04, 15:30 UTC

Post by *MrCricket »

I don't remember where these files were taken from..
Where can I get a newer versions?

"Win32 2000/XP 7.40.0 libcurl SSL enabled Günter Knauf 2.84 MB" is not present on curl.haxx.se anymore (as mentioned in sftp plugin description on http://www.ghisler.com/plugins.htm)
User avatar
sqa_wizard
Power Member
Power Member
Posts: 3854
Joined: 2003-02-06, 11:41 UTC
Location: Germany

Post by *sqa_wizard »

For 7.40.0 versions see here
#5767 Personal license
MrCricket
Junior Member
Junior Member
Posts: 49
Joined: 2009-05-04, 15:30 UTC

Post by *MrCricket »

2sqa_wizard - thanks for the files.

Crashes at same address.

(I'm running 32bit TC on 64bit Win7)
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

2MrCricket
I'm not getting any crashes here with these dlls. Could you create a test account (read only, 1-2 test files for download) for me on your server, so I can test it myself?
Author of Total Commander
https://www.ghisler.com
MrCricket
Junior Member
Junior Member
Posts: 49
Joined: 2009-05-04, 15:30 UTC

Post by *MrCricket »

Sorry, this machine has no public IP..

Are you sure you can't recreate the issue?

Refined scenario:

Win7 64b pro sp1

1) clean install b10

2) install sftpplug.zip (+llibeay32.dll + libssh2.dll from http://curl.haxx.se/gknw.net/7.40.0/dist-w32/curl-7.40.0-devel-mingw32.zip)

3) sftp: add new connection (F7) to ubuntu server, define IP + user + pass

4) sftp: connect using new connecrtion, accept fingerprint

5) sftp: choose big dir and press <space> - TC starts traversing that dir.

6) sftp: press Disconnect button: sftp disconnects and re-connects after 2 seconds, continuing to traverse remote FS.

7) don't wait: press Close button on main TC window.
MrCricket
Junior Member
Junior Member
Posts: 49
Joined: 2009-05-04, 15:30 UTC

Post by *MrCricket »

The AV occurres even w/o step 6, FYI
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Just tried with these dlls and beta 10 32-bit, no problems. It may be the server software, since I'm connecting to Linux Mint 17 and CentOS here. They problably use different versions of SFTP server software.

I can try to install Ubuntu in a VM, but would need to know which version exactly you are using (and which download, if possible).
Author of Total Commander
https://www.ghisler.com
MrCricket
Junior Member
Junior Member
Posts: 49
Joined: 2009-05-04, 15:30 UTC

Post by *MrCricket »

Hmm, just tried same scenario on CentOS 7 (7.2.1511) - crashes as well.

Probably the problem is with my win7..
I will try on another workstation and update you.
MrCricket
Junior Member
Junior Member
Posts: 49
Joined: 2009-05-04, 15:30 UTC

Post by *MrCricket »

Hi, tested it on another win7 machine - crashes as well: https://s25.postimg.org/ghgwgc9pr/2016_09_10_19_12_56_Total_Commander_9_0_13.png
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Sorry, no idea. It could be the server software returning data which openssh cannot handle.
Author of Total Commander
https://www.ghisler.com
MrCricket
Junior Member
Junior Member
Posts: 49
Joined: 2009-05-04, 15:30 UTC

Post by *MrCricket »

Hi, the AV does not reproduce on TC9.0a - FYI (with same .wfx & .dll
files)
Post Reply