[illumos-Developer] Webrev for bug 1102: Resource exhaustion in sftp client

Garrett D'Amore garrett at nexenta.com
Thu Jun 23 10:55:50 PDT 2011


Looks ok to me, but admittedly this is low priority since it only
affects a local client process (and is therefore also a problem for
basic shell globbing.)

	- Garrett

On Thu, 2011-06-23 at 12:46 -0500, Gary Mills wrote:
> On Tue, Jun 14, 2011 at 10:27:40AM -0400, Gordon Ross wrote:
> > On Tue, Jun 14, 2011 at 8:25 AM, Gary Mills <mills at cc.umanitoba.ca> wrote:
> > > On Fri, Jun 10, 2011 at 10:05:25AM -0500, Gary Mills wrote:
> > >> This is for illumos bug 1102: Resource exhaustion in sftp client.
> > >> It's essentially the netbsd patches applied to the private glob
> > >> library used by sftp.  This is not a security vulnerability as it's on
> > >> the client side only.  Nevertheless, the BSD variants have been
> > >> patched to prevent resource exhaustion.  My webrev is at:
> > >>
> > >>     http://cr.illumos.org/view/qle4ugwg/illumos1102/
> > >
> > > Is there no interest in this one?
> > 
> > Sorry, I guess everyone was busy.
> 
> What's the status of this bug fix?  Is it ready for integration,
> or should I be making more changes?
> 
> I'll see if I can submit the patches upstream.
> 





More information about the Developer mailing list