Filezilla Server and KB4338818

[rtovar]

Hi,

I have a Windows Web Server 2018 R2 with Filezilla Server 0.9.60.2 installed.

Today Filezilla Server began to hang. I have seen that some update were installed on server, specifically KB4338818.

After unninstall that KB, server is running correctly again.

I am at your disposal for any information you need.

Regards.
Roberto

[pod614]

We have the same issue today - with our windows 2012 R2 which was updated this AM. We are not sure which patch is causing the issue currently.

[botg]

Does it not work at all or does it only happen after some time?

Are you using plaintext FTP over FTP over TLS?

How have you configured FileZilla Server wrt. to the passive mode settings?

[pod614]

I can tell you that upon a reboot the ftp service works, then after a period of time it hangs. I would say between 35-60 minutes. We have our server setup for plaintext and ftp over tls. We do have it setup for passive mode. If you need something more specific please let me know.

We did end up uninstalling this mornings windows updates just the security rollup and that has corrected the problem.

[boco]

Here, with Security-only updates installed (KB4338823, KB4339093, KB4340004), I haven't noticed any adverse effects, yet. Could be one of the "quality" updates doing it.

[pod614]

The server is actually windows 2012 here are the KBs that got applied this AM:

4340557
4338830 **** This is the one we uninstalled.
4338832
890830

[botg]

Which kind of CPU are you using? Which microcode version for the CPU?

[pod614]

Intel Xeon E5-2690 v4 @2.6ghz

identifier: Intel64 Family 6 Model 79 Stepping 1
update revision: 00 00 00 00 25 00 00 0b
prev update revision: 00 00 00 00 25 00 00 0b
Platform Specific Field 1

I am hoping this is what you are looking for.

[pod614]

BTW: once we uninstall the windows update all is well for the time being.

[rtovar]

Hi,

Sorry for my delay.

In my case, after reboot FTP is working fine for 5-10 minutes and then it hangs.

As pod614, i am using plaintext and FTP over TLS.

CPU is Intel Core i5-4460 3.2GHz.

Uninstalling only KB4338818 problem was solved.

[thegfw]

call trace:

ntdll.dll!NtClose() 未知
mswsock.dll!SockCloseSocket() 未知
mswsock.dll!WSPCloseSocket() 未知
ws2_32.dll!closesocket() 未知
> FileZilla server.exe!CAsyncSocketEx::Close() 行 933 C++ <--------------------------------------------------------here
FileZilla server.exe!CAsyncSocketEx::~CAsyncSocketEx() 行 727 C++
FileZilla server.exe!CTransferSocket::~CTransferSocket() 行 125 C++
FileZilla server.exe!CTransferSocket::`scalar deleting destructor'(unsigned int) C++
FileZilla server.exe!CControlSocket::ResetTransferSocket(bool send_info) 行 2330 C++
FileZilla server.exe!CControlSocket::ResetTransferstatus(bool send_info) 行 2337 C++
FileZilla server.exe!CControlSocket::ParseCommand() 行 718 C++
FileZilla server.exe!CControlSocket::OnReceive(int nErrorCode) 行 161 C++
FileZilla server.exe!CAsyncSocketExHelperWindow::WindowProc(HWND__ * hWnd, unsigned int message, unsigned __int64 wParam, __int64 lParam) 行 317 C++
user32.dll!UserCallWinProcCheckWow() 未知
user32.dll!DispatchMessageWorker() 未知
FileZilla server.exe!CThread::Run() 行 95 C++
FileZilla server.exe!CThread::ThreadProc(void * lpParameter) 行 81 C++
kernel32.dll!BaseThreadInitThunk() 未知
ntdll.dll!RtlUserThreadStart() 未知


code:
void CAsyncSocketEx::Close()
{
#ifndef NOSOCKETSTATES
m_nPendingEvents = 0;
#endif //NOSOCKETSTATES
if (m_pFirstLayer)
m_pFirstLayer->Close();
if (m_SocketData.hSocket != INVALID_SOCKET) {
VERIFY((closesocket(m_SocketData.hSocket) != SOCKET_ERROR)); <---------------------- HANG
DetachHandle();
}

--------------------------------------------------------------
I HAVE UNINSTALL UPDATE KB4338818 NOW........(server 2008 r2/xeon 1230 v2)

[botg]

Thanks. So it hangs in a syscall. Unfortunately there's nothing that can be done from this side of the call.

Would be interesting to know what happens inside the kernel. Probably something only Microsoft can do.

FileZilla server.exe!CControlSocket::ParseCommand() 行 718 C++

So far I have not been able to reproduce the issue. Do you by chance know what the last command is that is being processed here?

[thegfw]

i have uninstalled...
i remember last command is 'PASV',not sure.

[daichi42]

Just FYI, the same thing was happening to me since yesterday, but on Microsoft FTP Service. I don't know how it could be related.
I've just uninstalled KB4338818 and looking it closely.

[pocci]

I had the same problem with FileZilla and also another program that uses connection through TCP ports, accusing the message "port in use" being that the program was closed.

I also noticed problems stopping a service, where the status was forever "stopping ..." and never ending.

I removed KB4338818 and everything went back to normal.

Note: I use Windows 2008 R2 Enterprise