<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div dir="ltr">
<div></div>
<div>
<div>Yes, I can confirm that the initial reported problem received an fix and the stock 15SP3PRC install I tried did. again show this (or a similar) problem including the crash shown in the mail.</div>
<div dir="ltr"><br>
</div>
<div>The shown crash was freshly replicated with SLES 15SP3 Public RC (no online updates). it is OpenSSH-Server 8.4p1-1.28 it seems.</div>
<div dir="ltr"><br>
</div>
<div>I can later on try with GMC and upload a report if you can provide me with an upload location.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Gruss</div>
<div dir="ltr">Bernd</div>
<div id="ms-outlook-mobile-signature">
<div style="direction: ltr">-- </div>
<div style="direction: ltr">http://bernd.eckenfels.net</div>
</div>
</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Von:</b> Vincent Moutoussamy <vmoutoussamy@suse.com><br>
<b>Gesendet:</b> Monday, May 17, 2021 11:24:14 AM<br>
<b>An:</b> Bernd <ecki@zusammenkunft.net><br>
<b>Cc:</b> sle-beta@lists.suse.com <sle-beta@lists.suse.com><br>
<b>Betreff:</b> Re: 15.3 PRC: ssh audit race crashes</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Hello,<br>
<br>
> On 16 May 2021, at 05:39, Bernd <ecki@zusammenkunft.net> wrote:<br>
> <br>
> Hello,<br>
> <br>
> a while back (15.1) I had an support ticket (00202015) open for sshd crashing or closing connections if sftp with high frequency of logins is used. This was supposed to be fixed by this:Bz#1174162 (openssh-7.1p2-audit-race-condition.patch) which I do not
see in the changelog, and the rejections and crashes happen again.<br>
<br>
I see, bsc#1174162 was opened for SLES 15 SP1 which should have a fix with openssh-7.9p1-6.22.1 (also openssh-7.9p1-lp151.4.18.1 for openSUSE Leap 15.1).<br>
<br>
> Have all those fixes be backported to this or will there be an update to this package available after the release?<br>
> <br>
> localhost sshd[31128]: fatal: mm_request_receive_expect: read: rtype 123 != type 115<br>
> localhost sshd[32288]: fatal: mm_request_receive_expect: read: rtype 115 != type 123<br>
> localhost kernel: [10140.368402] sshd[32288]: segfault at 308 ip 00005560d39aa1f2 sp 00007fffe4488b60 error 4 in sshd[5560d3951000+d6000]<br>
> localhost kernel: [10140.368418] Code: 00 0f 1f 80 00 00 00 00 b8 fd ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 48 85 ff 74 3b 48 8b 87 20 01 00 00 48 85 c0 74 2f 53 <8b> 40 18 48 89 fb a8 02 75 2c a8 04 75 40 48 8b 7b 08 e8 77 4a fb<br>
> localhost systemd[1]: Started Process Core Dump (PID 32289/UID 0).<br>
> localhost systemd-coredump[32290]: Process 32288 (sshd) of user 1000 dumped core.#012#012Stack trace of thread 32288:#012#0 0x00005560d39aa1f2 n/a (sshd + 0x591f2)#012#1 0x00005560d39b0f30 n/a (sshd + 0x5ff30)#012#2 0x00005560d3963da4 n/a (sshd + 0x12da4)#012#3
0x00005560d39aa70b n/a (sshd + 0x5970b)#012#4 0x00005560d398243e n/a (sshd + 0x3143e)#012#5 0x00005560d398504c n/a (sshd + 0x3404c)#012#6 0x00005560d39ae65d n/a (sshd + 0x5d65d)#012#7 0x00005560d3974cac n/a (sshd + 0x23cac)#012#8 0x00005560d39769fc n/a
(sshd + 0x259fc)#012#9 0x00005560d3977ba1 n/a (sshd + 0x26ba1)#012#10 0x00005560d39786f8 n/a (sshd + 0x276f8)#012#11 0x00005560d396cbee n/a (sshd + 0x1bbee)#012#12 0x00005560d39b64ea n/a (sshd + 0x654ea)#012#13 0x00005560d39b6599 n/a (sshd + 0x65599)#012#14
0x00005560d396e5ec n/a (sshd + 0x1d5ec)#012#15 0x00005560d3977233 n/a (sshd + 0x26233)#012#16 0x00005560d3961234 n/a (sshd + 0x10234)#012#17 0x00007fc44a5d034d __libc_start_main (libc.so.6 + 0x2534d)#012#18 0x00005560d3962eea n/a (sshd + 0x11eea)<br>
> <br>
> Its a bit hard to replicate, but it is Apacke Mina sshd doing simple sftp file uploads with some parallelity. I also tried internal-sftp subsystem, ut it does not really help.<br>
> <br>
<br>
Just to be 100% sure, you were able to reproduce with 15SP3 Beta right? and this is a fresh error output?<br>
<br>
Anyway, I’ll dig around to check for this with 15SP3 and report here.<br>
<br>
Have a nice day,<br>
<br>
> Gruss<br>
> Bernd<br>
<br>
Regards,<br>
--<br>
Vincent Moutoussamy<br>
SUSE Beta Program Manager<br>
JeOS Technical Project Manager<br>
Paris, France<br>
<br>
<br>
</div>
</span></font></div>
</body>
</html>