| Summary: | I found that SSHD will crash when I start the application, another applications are same | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Portable OpenSSH | Reporter: | Chengyao Diao <chengyao.diao> | ||||
| Component: | sshd | Assignee: | Assigned to nobody <unassigned-bugs> | ||||
| Status: | CLOSED WONTFIX | ||||||
| Severity: | enhancement | ||||||
| Priority: | P5 | ||||||
| Version: | 7.7p1 | ||||||
| Hardware: | ARM | ||||||
| OS: | Linux | ||||||
| Attachments: |
|
||||||
|
Description
Chengyao Diao
2018-09-25 02:08:14 AEST
I found the root cause. I tested it in different version from 5.9~7.8. I found that this issue only happens after version 6.5. I checked the release notes. Found the following notes. After adding options "--with-pie --without-hardening --without-stackprotect", it works well. So it is not the issue Portable OpenSSH: * Please note that this is the last version of Portable OpenSSH that will support versions of OpenSSL prior to 0.9.6. Support (i.e. SSH_OLD_EVP) will be removed following the 6.5p1 release. * Portable OpenSSH will attempt compile and link as a Position Independent Executable on Linux, OS X and OpenBSD on recent gcc- like compilers. Other platforms and older/other compilers may request this using the --with-pie configure flag. * A number of other toolchain-related hardening options are used automatically if available, including -ftrapv to abort on signed integer overflow and options to write-protect dynamic linking information. The use of these options may be disabled using the --without-hardening configure flag. * If the toolchain supports it, one of the -fstack-protector-strong, -fstack-protector-all or -fstack-protector compilation flag are used to add guards to mitigate attacks based on stack overflows. The use of these options may be disabled using the --without-stackprotect configure option. closing resolved bugs as of 8.6p1 release |