git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Exit code 255 after large clone (32-bit PowerPC)

From
Junio C Hamano <gitster@pobox.com>
Date
Jul 27, 2021, 02:20 UTC
Message-ID
<xmqq8s1sfqez.fsf@gitster.g>
In-Reply-To
<YP9jU194U7S1PFxS@camp.crustytoothpaste.net>
"brian m. carlson" <sandals@crustytoothpaste.net> writes:
Show 16 quoted lines
> That message comes from OpenSSH.  I've seen it quite frequently in
> various other (non-Git) cases.  I think it's fair for us to exit
> unsuccessfully if OpenSSH exits unsuccessfully in this case.  For
> example, an attacker could try to tamper with the connection and send
> additional data, which OpenSSH would detect and exit unsuccessfully for.
> We also in general need to detect truncation attacks, which OpenSSH will
> do for us here.
>
> It's possible that if there's an older version of OpenSSH being used,
> that the problem happens to be related to a bug of some sort.  There
> were some versions which had various bugs that could be triggered by a
> rekey, which, if the threshold is set low enough, could be the cause of
> this particular problem.
>
> I think the fact that it's not being seen with HTTPS is the ultimate
> clue here.

This suspiously sounds familiar. Asking for "close ssh connection" in the lore.kernel.org archive finds this:

  https://lore.kernel.org/git/YKTg8nYjSGpKbq8W@coredump.intra.peff.net/
Previous: brian m. carlsonNext: Evan Miller
Message 6 of 9 in “Exit code 255 after large clone (32-bit PowerPC)”
  1. Evan MillerJul 26, 2021
  2. brian m. carlsonJul 26, 2021
  3. Evan MillerJul 26, 2021
  4. Ævar Arnfjörð BjarmasonJul 27, 2021
  5. brian m. carlsonJul 27, 2021
  6. Junio C HamanoJul 27, 2021
  7. Evan MillerJul 27, 2021
  8. Jeff KingJul 27, 2021
  9. Evan MillerJul 27, 2021

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.