You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ssh/tailssh
Joe Tsai 61886e031e
ssh/tailssh: fix double race condition with non-pty command (#8405)
There are two race conditions in output handling.

The first race condition is due to a misuse of exec.Cmd.StdoutPipe.
The documentation explicitly forbids concurrent use of StdoutPipe
with exec.Cmd.Wait (see golang/go#60908) because Wait will
close both sides of the pipe once the process ends without
any guarantees that all data has been read from the pipe.
To fix this, we allocate the os.Pipes ourselves and
manage cleanup ourselves when the process has ended.

The second race condition is because sshSession.run waits
upon exec.Cmd to finish and then immediately proceeds to call ss.Exit,
which will close all output streams going to the SSH client.
This may interrupt any asynchronous io.Copy still copying data.
To fix this, we close the write-side of the os.Pipes after
the process has finished (and before calling ss.Exit) and
synchronously wait for the io.Copy routines to finish.

Fixes #7601

Signed-off-by: Joe Tsai <joetsai@digital-static.net>
Co-authored-by: Maisem Ali <maisem@tailscale.com>
1 year ago
..
incubator.go ssh/tailssh: fix double race condition with non-pty command (#8405) 1 year ago
incubator_linux.go all: update copyright and license headers 2 years ago
privs_test.go ssh/tailssh: fix privilege dropping on FreeBSD; add tests 2 years ago
tailssh.go ssh/tailssh: fix double race condition with non-pty command (#8405) 1 year ago
tailssh_test.go ssh/tailssh: fix double race condition with non-pty command (#8405) 1 year ago
user.go ssh/tailssh: Max Username Length 256 for linux 1 year ago