opendir("ssh2.sftp://..") fails after upgrade to 7.0.13 from xenial-updates

[David Hedberg]

opendir() for a "ssh2.sftp://.."-style url fails after upgrade to php 7.0.13 from xenial-updates.

This is a known bug fixed upstream in php-ssh2, commit 17680cf039f0cfac53b5a2531fdb715b95e9cc42.

I've rebuilt the package locally using the attached patch.

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "Patch against php-ssh2-0.12-39-g3dfe336+0.12" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

[David Hedberg (david-hedberg-t)]

Further testing suggests that cherry-picking this particular commit might be insufficient for our usage scenario. I'll test a bit with the master branch of ssh2.

What's clear is that the version currently being shipped in xenial is broken when used with php from xenial-updates.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Jan Kellermann (jan-kellermann)]

After php-common-update from 2017.08-04 this affects ubuntu 14.04 with php5.5, too.

Circumvention:

In place of: 'ssh2.sftp://' . $sftp . '/...'
write: 'ssh2.sftp://' . intval($sftp) . '/...'

see:
https://bugs.php.net/bug.php?id=69981
https://bugs.php.net/bug.php?id=73597

I suggest this problem occurs due the backport of parse_url()-Bug in php5-common https://bugs.php.net/bug.php?id=73192 and CVE-2016-10397

[Marco Scholl (traxanos)]

Under 14.04 i have use this patch for php-ssh2

https://launchpadlibrarian.net/193989033/fix-segfault.patch

[Marco Scholl (traxanos)]

With the last patch the segvault are fixed but the connection doesn't work.

[Marc Deslauriers (mdeslaur)]

For php5 code:
http://git.php.net/?p=pecl/networking/ssh2.git;a=commit;h=093906ec1c065e86ad1cd4dabbc89b1ccae11938

For php7 code:
http://git.php.net/?p=pecl/networking/ssh2.git;a=commit;h=17680cf039f0cfac53b5a2531fdb715b95e9cc42
http://git.php.net/?p=pecl/networking/ssh2.git;a=commit;h=756e2f1369f2d5ff006222d978806f4fd91659e1

[Leonidas S. Barbosa (leosilvab)]

For trusty and precise/esm patches worked fine. But for Xenial it didn't fix the issue. Need more info/investigation for xenial.