From nobody@FreeBSD.org  Mon Aug 29 13:38:02 2011
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id E5974106568A
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 29 Aug 2011 13:38:02 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22])
	by mx1.freebsd.org (Postfix) with ESMTP id BCAC38FC18
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 29 Aug 2011 13:38:02 +0000 (UTC)
Received: from red.freebsd.org (localhost [127.0.0.1])
	by red.freebsd.org (8.14.4/8.14.4) with ESMTP id p7TDc26F047186
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 29 Aug 2011 13:38:02 GMT
	(envelope-from nobody@red.freebsd.org)
Received: (from nobody@localhost)
	by red.freebsd.org (8.14.4/8.14.4/Submit) id p7TDc2kW047185;
	Mon, 29 Aug 2011 13:38:02 GMT
	(envelope-from nobody)
Message-Id: <201108291338.p7TDc2kW047185@red.freebsd.org>
Date: Mon, 29 Aug 2011 13:38:02 GMT
From: HIROSHI OOTA <nil@mad.dog.cx>
To: freebsd-gnats-submit@FreeBSD.org
Subject: sshd truncates the data when `HPNDisabled no'
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         160279
>Category:       bin
>Synopsis:       sshd(8): sshd truncates the data when `HPNDisabled no'
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    brooks
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Aug 29 13:40:11 UTC 2011
>Closed-Date:    Wed Sep 28 20:06:16 UTC 2011
>Last-Modified:  Wed Sep 28 20:06:16 UTC 2011
>Originator:     HIROSHI OOTA
>Release:        9--BETA2 (Aug 29 2011)
>Organization:
>Environment:
FreeBSD XXX 9.0-BETA2 FreeBSD 9.0-BETA2 #156 r225239M: Mon Aug 29 10:57:13 JST 2011     root@  amd64

>Description:
When HPN is enable, The data transmitted with plink(ssh client for windows) is truncated.
When `HPNDisabled yes' is set in sshd_config, the bug doesn't occur. 
The size of the data is different at every execution. 

client:
OS: Windows XpSP3
ssh-client:  plink(SSH-2.0-PuTTY_Release_0.60)

server:  FreeBSD 9.0-BETA2
>How-To-Repeat:
When I send data.dat(5,747,152 bytes), sshd truncates it.

Y:\test>plink -v  my-server.example.com dd of=/dev/null < data.dat
Looking up host "my-server.example.com"
Connecting to xxx.xxx.xxx.xxx port 22
Server version: SSH-2.0-OpenSSH_5.8p2_hpn13v11 FreeBSD-20110503
We claim version: SSH-2.0-PuTTY_Release_0.60
Using SSH protocol version 2
Doing Diffie-Hellman group exchange
Doing Diffie-Hellman key exchange with hash SHA-256
Host key fingerprint is:
ssh-rsa 2048 xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
Initialised AES-256 SDCTR client->server encryption
Initialised HMAC-SHA1 client->server MAC algorithm
Initialised AES-256 SDCTR server->client encryption
Initialised HMAC-SHA1 server->client MAC algorithm
Pageant is running. Requesting keys.
Pageant has 1 SSH-2 keys
Using username "xxx".
Trying Pageant key #0
Authenticating with public key "xxxx" from agent
Sending Pageant's response
Access granted
Opened channel for session
Started a shell/command
Sent EOF message
11155+37 records in
11173+1 records out
5720935 bytes transferred in 25.294115 secs (226177 bytes/sec) <== incorrect size
Server sent command exit status 0
Disconnected: All channels closed

Y:\test>dir
 Volume in drive Y has no label.
 Volume Serial Number is 000A-E626

 Directory of Y:\test

2011/08/29  21:52    <DIR>          .
2011/08/29  21:52    <DIR>          ..
2008/08/26  20:37         5,747,152 data.dat
               1 File(s)      5,747,152 bytes
               2 Dir(s)     440,913,920 bytes free
>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->brooks 
Responsible-Changed-By: delphij 
Responsible-Changed-When: Fri Sep 9 21:31:04 UTC 2011 
Responsible-Changed-Why:  
Assign to brooks@ who added the HPN support. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=160279 

From: Brooks Davis <brooks@FreeBSD.org>
To: HIROSHI OOTA <nil@mad.dog.cx>
Cc: freebsd-gnats-submit@FreeBSD.org
Subject: Re: bin/160279: sshd truncates the data when `HPNDisabled no'
Date: Wed, 14 Sep 2011 11:49:13 -0500

 I'm sorry to hear that you are having trouble with plink and the hpn
 patch.  I've been unable to replicate this problem with either plink
 0.60 or 0.61.  These systems I'm testing are and XP VM and a slightly
 post BETA1 9.0 system on different subnets in the same building.  Is
 there anything different about your configuration?
 
 -- Brooks
 
 C:\Program Files\PuTTY>dir h:\aws*
  Volume in drive H is xxxxxxxxxxx
  Volume Serial Number is ####-####
 
  Directory of h:\
 
 09/14/2011  11:27 AM         7,790,519 aws-2.10.0.tbz
                1 File(s)      7,790,519 bytes
                0 Dir(s)  312,152,576,000 bytes free
 
 C:\Program Files\PuTTY>h:\plink-60 -v -l XXXXXXXX XXXXXXX.example.org dd of=/dev/null < h:\aws-2.10.0.tbz
 
 Looking up host "XXXXXXX.example.org"
 Connecting to ###.###.###.### port 22
 Server version: SSH-2.0-OpenSSH_5.8p2_hpn13v11 FreeBSD-20110503
 We claim version: SSH-2.0-PuTTY_Release_0.60
 Using SSH protocol version 2
 Doing Diffie-Hellman group exchange
 Doing Diffie-Hellman key exchange with hash SHA-256
 Host key fingerprint is:
 ssh-rsa 2048 ##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##
 Initialised AES-256 SDCTR client->server encryption
 Initialised HMAC-SHA1 client->server MAC algorithm
 Initialised AES-256 SDCTR server->client encryption
 Initialised HMAC-SHA1 server->client MAC algorithm
 Pageant is running. Requesting keys.
 Pageant has 1 SSH-2 keys
 Using username "XXXXXXXX".
 Trying Pageant key #0
 Authenticating with public key "imported-openssh-key" from agent
 Sending Pageant's response
 Access granted
 Opened channel for session
 Started a shell/command
 Sent EOF message
 Server sent command exit status 0
 15215+1 records in
 15215+1 records out
 7790519 bytes transferred in 5.267356 secs (1479019 bytes/sec)
 Disconnected: All channels closed
 
 C:\Program Files\PuTTY>h:\plink -v -l XXXXXXXX XXXXXXX.example.org dd of=/dev/null < h:\aws-2.10.0.tbz
 Looking up host "XXXXXXX.example.org"
 Connecting to ###.###.###.### port 22
 Server version: SSH-2.0-OpenSSH_5.8p2_hpn13v11 FreeBSD-20110503
 Using SSH protocol version 2
 We claim version: SSH-2.0-PuTTY_Release_0.61
 Doing Diffie-Hellman group exchange
 Doing Diffie-Hellman key exchange with hash SHA-256
 Host key fingerprint is:
 ssh-rsa 2048 ##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##
 Initialised AES-256 SDCTR client->server encryption
 Initialised HMAC-SHA1 client->server MAC algorithm
 Initialised AES-256 SDCTR server->client encryption
 Initialised HMAC-SHA1 server->client MAC algorithm
 Pageant is running. Requesting keys.
 Pageant has 1 SSH-2 keys
 Using username "XXXXXXXX".
 Trying Pageant key #0
 Authenticating with public key "imported-openssh-key" from agent
 Sending Pageant's response
 Access granted
 Opened channel for session
 Started a shell/command
 Sent EOF message
 Server sent command exit status 0
 15213+5 records in
 15215+1 records out
 7790519 bytes transferred in 1.955582 secs (3983734 bytes/sec)
 Disconnected: All channels closed
 
 C:\Program Files\PuTTY>
 
State-Changed-From-To: open->closed 
State-Changed-By: brooks 
State-Changed-When: Wed Sep 28 20:05:23 UTC 2011 
State-Changed-Why:  
Could not replicate with either the putty version the reporter was using 
or the latest.  Will reopen if more information is provided. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=160279 
>Unformatted:
