]> git.ipfire.org Git - thirdparty/curl.git/commitdiff
ssh-libssh: fix infinite connect loop on invalid private key
authorKamil Dudka <kdudka@redhat.com>
Tue, 14 Aug 2018 10:47:18 +0000 (12:47 +0200)
committerKamil Dudka <kdudka@redhat.com>
Tue, 14 Aug 2018 20:08:06 +0000 (22:08 +0200)
Added test 656 (based on test 604) to verify the fix.

Bug: https://bugzilla.redhat.com/1595135

Closes #2879

lib/ssh-libssh.c
tests/data/Makefile.inc
tests/data/test656 [new file with mode: 0644]

index f40f074b9877a823cee22058386be139baa61c03..12d618cfe2a5214af60515c772031aff7866e94e 100644 (file)
@@ -663,6 +663,7 @@ static CURLcode myssh_statemach_act(struct connectdata *conn, bool *block)
         if(rc != SSH_OK) {
           failf(data, "Could not load private key file %s",
                 data->set.str[STRING_SSH_PRIVATE_KEY]);
+          MOVE_TO_ERROR_STATE(CURLE_LOGIN_DENIED);
           break;
         }
 
index 20274b37c0e8a0cab1e42e36e9be95a79951c07c..518a5a543bd06d652f51286363adea6e6a0dd04f 100644 (file)
@@ -83,7 +83,7 @@ test617 test618 test619 test620 test621 test622 test623 test624 test625 \
 test626 test627 test628 test629 test630 test631 test632 test633 test634 \
 test635 test636 test637 test638 test639 test640 test641 test642 \
 test643 test644 test645 test646 test647 test648 test649 test650 test651 \
-test652 test653 test654 test655 \
+test652 test653 test654 test655 test656 \
 \
 test700 test701 test702 test703 test704 test705 test706 test707 test708 \
 test709 test710 test711 test712 test713 test714 test715 \
diff --git a/tests/data/test656 b/tests/data/test656
new file mode 100644 (file)
index 0000000..4107d3d
--- /dev/null
@@ -0,0 +1,33 @@
+<testcase>
+<info>
+<keywords>
+SFTP
+FAILURE
+</keywords>
+</info>
+
+#
+# Client-side
+<client>
+<server>
+sftp
+</server>
+ <name>
+SFTP retrieval with nonexistent private key file
+ </name>
+ <command>
+--key DOES_NOT_EXIST --pubkey curl_client_key.pub -u %USER: sftp://%HOSTIP:%SSHPORT%PWD/not-a-valid-file-moooo --insecure --connect-timeout 8
+</command>
+</client>
+
+#
+# Verify data after the test has been "shot"
+<verify>
+<valgrind>
+disable
+</valgrind>
+<errorcode>
+67
+</errorcode>
+</verify>
+</testcase>