Closed Bug 1590447 Opened 6 years ago Closed 6 years ago

FTP hangs when receiving 2xx response to RETR/STOR without prior 1xx response

Categories

(Core Graveyard :: Networking: FTP, defect)

x86_64
Linux
defect
Not set
normal

Tracking

(firefox-esr68 wontfix, firefox70 wontfix, firefox71 wontfix, firefox72 fixed)

RESOLVED FIXED
mozilla72
Tracking Status
firefox-esr68 --- wontfix
firefox70 --- wontfix
firefox71 --- wontfix
firefox72 --- fixed

People

(Reporter: decoder, Assigned: decoder)

References

Details

(Keywords: sec-other, Whiteboard: [post-critsmash-triage][adv-main72+r])

Attachments

(1 file)

The same bug with LIST that I fixed in bug 1584490 also affects the RETR and STOR commands. I reproduced the RETR hang almost immediately with the fuzzer.

The fix is very simple using the same technique as in bug 1584490. Patch coming up.

Marking s-s because the bug about adding RETR fuzzing (bug 1589374) is still s-s.

Keywords: sec-other
Group: core-security → network-core-security
Group: network-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla72

Sounds like we can let this fix ride the trains, but feel free to nominate for uplift if you feel strongly otherwise.

Flags: qe-verify-
Whiteboard: [post-critsmash-triage]
Whiteboard: [post-critsmash-triage] → [post-critsmash-triage][adv-main72+r]
Group: core-security-release
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: