X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=vz7mobiT1WNQC9bcoxV53wbgWHvT9urBOyFXSayZXkZRQ59mUDGpI
	Z0A/W3uEqip4Q+881FKJPa1mqA61J+32UV4APZH0c5/UUsFATk3r8BlPWVWQWyjK
	nv4ZRFKYheZd0k/fhqMUVW4eFm9SIwy5oTTgBi3mRe6hnTSRxlvuzM=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=Izmi5oZ+iAkIIwDSM8iO6xkevTE=; b=rkJBn/vjCCg8dGpZUw5emWhqBQZX
	SCs78yMUCnA03a/2OCGr6VA37lXuSrhYVK+TAQfkwHQy8EhrYTYR++buml4i9X4j
	gYZRzgSlIWdIQknDDi+IYafChw6PPWRW0y9RRhS6pdwjWLmwvHKZ8+y9slpfnQiD
	Pa8v0+2UDVszhEg=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-93.9 required=5.0 tests=BAYES_50,KAM_LAZY_DOMAIN_SECURITY,KHOP_DYNAMIC,RCVD_IN_PBL,RDNS_DYNAMIC,USER_IN_WHITELIST autolearn=no version=3.3.2 spammy=despair, x64, 10000000, 2311
X-HELO:	calimero.vinschen.de
Date:	Fri, 29 Jan 2016 12:44:45 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: sshd refuses connections since upgrade to 2.4.0-1
Message-ID:	<20160129114445.GA14874@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<trinity-931878d8-4e31-4c79-b1b1-d034981445fc-1454007393135 AT 3capp-gmx-bs40>
MIME-Version:	1.0
In-Reply-To:	<trinity-931878d8-4e31-4c79-b1b1-d034981445fc-1454007393135@3capp-gmx-bs40>
User-Agent:	Mutt/1.5.24 (2015-08-30)

--6c2NcOVqGQ03X4Wi
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jan 28 19:56, prs_cygwin AT quantentunnel DOT de wrote:
> Hi!
>=20
> Long time Cygwin user but first time error reporter to this mailing list.
> Since upgrading my 32-bit Cygwin installation on Win7SP1 x64 from
> 2.3.1-1 to the current 2.4.0-1 (and also 2.5.0-0.1 in my despair) I
> can't connect to sshd running as a service anymore.
> The service starts and spawns a child in order to handle the
> connection request, but that fails even when connecting from
> localhost.
> I triaged the problem by trying snapshots between the two releases and
> traced it to a change after 20151129:
> cygwin1-20151129.dll works
> cygwin1-20151203.dll fails
>=20
> The sshd.log remains empty.
> In order to create more information to go on I ran strace on the
> parent (cyg_server spawned) sshd and tried to connect, the strace-log
> (sshd_cygwin2.4.0_20160109) is attached together with a slightly
> redacted cygcheck.out
>=20
> Thanks for looking into this!
>=20
> P.S. As can be seen from the strace I'm running Agnitum Outpost
> Firewall Pro and the current EMET - both has never been a problem with
> Cygwin's sshd (in this installation since May 2010).

An "Access denied" error occurs, apparently in a Windows DLL while
loading Windows DLLs.  It's hard to tell what the reason is, but what
strikes me as weird is that the crash occurs right after this Agnitum
thingy has been injected into the process:

--- Process 17828 loaded C:\PROGRA~1\Agnitum\OUTPOS~1\wl_hook.dll at 100000=
00
--- Process 17828 unloaded DLL at 10000000
--- Process 17828 loaded C:\PROGRA~1\Agnitum\OUTPOS~1\wl_hook.dll at 012800=
00
--- Process 17828 loaded C:\Windows\SysWOW64\shell32.dll at 762F0000
--- Process 17828 loaded C:\Windows\SysWOW64\shlwapi.dll at 75DE0000
--- Process 17828 thread 18284 exited with status 0xc0000022
--- Process 17828 thread 18412 exited with status 0xc0000022
--- Process 17828 thread 17624 exited with status 0xc0000022
--- Process 17828 exited with status 0xc0000022
154769 11583429 [waitproc] sshd 8404 pinfo::status_exit: *** STATUS_0xC0000=
022

Did you try excluding sshd from the checks of that scanner?


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--6c2NcOVqGQ03X4Wi
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=y3Xr
-----END PGP SIGNATURE-----

--6c2NcOVqGQ03X4Wi--

- Raw text -