check_by_ssh crashes with exit status 139. We confirmed the crash by
re-running it in a fresh debian unstable installation.

The attachment [1] contains a testcase (under ./crash) crashing the
program. It ensures that you can easily reproduce the bug. Additionally,
under ./crash_info/, we include more information about the crash such as
a core dump, the dmesg generated by the crash, and its output.

Regards,
The Mayhem Team (Alexandre Rebert, Thanassis Avgerinos, Sang Kil Cha, David Brumley, Manuel Egele)
Cylab, Carnegie Mellon University

[1] http://www.forallsecure.com/bug-reports/78818bc2162c22e3afdde46b7a95eea2b42c352d/full_report

I believe the problem is caused by the 'fix' to bug 709297.
The package maintainer has tried to introduce the ability to pass parameters
to Nagios checks by changing them from:

command_line    /usr/lib/nagios/plugins/check_ssh '$HOSTADDRESS$'

to:

command_line    /usr/lib/nagios/plugins/check_ssh '$HOSTADDRESS$' '$ARG1$'

If no extra arguments are passed, it forces an empty parameter to be passed
to the command which causes a problem.

I suspect the fix it not to wrap the $ARG1$ within quotes like so:

command_line    /usr/lib/nagios/plugins/check_ssh '$HOSTADDRESS$' $ARG1$

This means the parameters passed by the user can still be done, but if nothing was
passed, does not result in an empty positional parameter being passed to the command.

Regards,

Jim Barber

Hi Jim,

Am 22.07.2013 05:11, schrieb Jim Barber:

there is no relation between those bugs. Bug #715730 is about a
command definition, this bug is about crashing the check_by_ssh binary
with garbage in as value.

Are you in troubles with check_by_ssh in some other ways? If so, it
would be cool to report it into a new bug report.

Many thanks, Jan.