[Bug 690] sftp quoted filename parsing bug in get and put commands

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=690

           Summary: sftp quoted filename parsing bug in get and put commands
           Product: Portable OpenSSH
           Version: -current
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sftp
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: admorten at umich.edu


When doing a get or put of a quoted filename, sftp misinterprets the location of the terminating 
quote. In sftp-int.c, when the terminating quote is located, the path is NUL terminated, but the 
location counter is not updated, causing the source filename's end quote to be interpreted as the 
opening quote of a destination filename. This causes 'get "filename"' to fail with an Unterminated 
quote error, and causes 'get "src-filename" "dest-filename"' to write src-filename to a file named " 
" rather than dest-filename. Unquoted transfer commands--e.g., get src-filename dest-filename--
are not affected.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.