kio_sftp changes to fix reported and discovered data corruption bugs (please review)
Michael Pyne
mpyne at kde.org
Sat Jan 5 04:21:12 UTC 2013
Hello,
As indicated in the title I've committed a couple of changes ([1], [2]) to
kio_sftp to fix some data corruption bugs in time for KDE 4.10.
The first is bug 312320 [3], which is where an extra 61440 bytes are added to
files that are downloaded and have a size that is an exact multiple of 61440
bytes. I was able to reproduce and although I'm still mystified as to the
exact sequence of errors leading to the corrupt file, I can confirm the
reporter's proposed fix seems to work.
In the sequence of trying to figure out why the fix work I dove into the
libssh source code and to cut a long story short, it's not a good idea to mix
the "async read setup" and "async read perform" calls, which kio_sftp
currently does. It's more of a theoretical concern but if this bug is
triggered the data corruption will be much more difficult to notice for a user
who isn't using checksums or cryptographic hashes. The commit log entries have
more details for both.
I'm very confident that both changes are at the very least no worse than what
was present before given how near we are to 4.10 but I wanted to post the
heads-up to the list in case it is decided to revert and aim for 4.10.1
instead.
Regards,
- Michael Pyne
[1] http://commits.kde.org/kde-
runtime/7f87a968f622d95b5279fece58a1717d52ba23b9
[2] http://commits.kde.org/kde-
runtime/829de23454b3a6bb07641a810bb436ef230d60ef
[3] https://bugs.kde.org/show_bug.cgi?id=312320
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/release-team/attachments/20130104/cba594ff/attachment.sig>
More information about the release-team
mailing list