Bug 15383

Summary: rsync: The fix for CVE-2022-29154 introduced a bug that causes rsync to hang forever with --relative
Product: [Build System, Metadata & Runtime] OE-Core Reporter: Matthias Schmitz <matthias.schmitz>
Component: devtools / tool chainAssignee: Matthias Schmitz <matthias.schmitz>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Medium+ CC: meta.mr.watcher, meta.watcher, randy.macleod, simone.p.weiss, steve, tim.orling
Version: 3.1.31   
Target Milestone: 3.1.33   
Hardware: x86   
OS: x86_64   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: No (bug/feature does not impact docs)

Description Matthias Schmitz 2024-02-05 11:25:23 UTC

    
Comment 1 Matthias Schmitz 2024-02-05 11:31:22 UTC
To reproduce the issue, build a standard image including rsync and ssh (eg dropbear) and
try to rsync data with the following command line

rsync -v --relative user@somehost:/tmp/somefile  /tmp/

The issue was also reported upstream an already fixed. 
https://github.com/WayneD/rsync/issues/346


As fix for our Dunfell based distro I added this diff (as a patch via .bbappend) :

https://github.com/WayneD/rsync/commit/fabef23bea6e9963c06e218586fda1a823e3c6bf.diff
Comment 2 Simone Weiß 2024-02-05 16:57:38 UTC
Hi Matthias, I saw you sent a patch already. I'll assign it back to you. Hint there were patchtest issues. Should you need any help for the patchtest, feel free to ping me. (I assume from the list this is your first submission, excuse me if this is not the case. I am also new here :))
Comment 3 Matthias Schmitz 2024-02-05 19:08:43 UTC
Hi Simone,

you guessed right, that is my first encounter with yoctoprotjects bugzilla & first patch i sent. 

I just reworked my patch, lets see if patchtest ist now happy.