Bug 15383 - rsync: The fix for CVE-2022-29154 introduced a bug that causes rsync to hang forever with --relative
Summary: rsync: The fix for CVE-2022-29154 introduced a bug that causes rsync to hang ...
Status: RESOLVED FIXED
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: devtools / tool chain (show other bugs)
Version: 3.1.31
Hardware: x86 x86_64
: Medium+ normal
Target Milestone: 3.1.33
Assignee: Matthias Schmitz
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2024-02-05 11:25 UTC by Matthias Schmitz
Modified: 2024-04-25 14:42 UTC (History)
6 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Schmitz 2024-02-05 11:25:23 UTC 

    


    


      



        
          Comment 1
        

        
          Matthias Schmitz

        

        
        

        
          2024-02-05 11:31:22 UTC
        

      






To reproduce the issue, build a standard image including rsync and ssh (eg dropbear) and
try to rsync data with the following command line

rsync -v --relative user@somehost:/tmp/somefile  /tmp/

The issue was also reported upstream an already fixed. 
https://github.com/WayneD/rsync/issues/346


As fix for our Dunfell based distro I added this diff (as a patch via .bbappend) :

https://github.com/WayneD/rsync/commit/fabef23bea6e9963c06e218586fda1a823e3c6bf.diff

    


    


      



        
          Comment 2
        

        
          Simone Weiß

        

        
        

        
          2024-02-05 16:57:38 UTC
        

      






Hi Matthias, I saw you sent a patch already. I'll assign it back to you. Hint there were patchtest issues. Should you need any help for the patchtest, feel free to ping me. (I assume from the list this is your first submission, excuse me if this is not the case. I am also new here :))

    


    


      



        
          Comment 3
        

        
          Matthias Schmitz

        

        
        

        
          2024-02-05 19:08:43 UTC
        

      






Hi Simone,

you guessed right, that is my first encounter with yoctoprotjects bugzilla & first patch i sent. 

I just reworked my patch, lets see if patchtest ist now happy.