| Age | Commit message (Expand) | Author |
|---|
| 2019-07-03 | snprintf/vsnprintf return < 0 on error, rather than -1. | Theo de Raadt |
| 2019-06-28 | When system calls indicate an error they return -1, not some arbitrary | Theo de Raadt |
| 2019-05-08 | rm dead code and simplify ftpd_popen. this code has only called | Ted Unangst |
| 2018-12-11 | Flip snprintf(3) error check to align it with the man page example. | Alexander Bluhm |
| 2018-12-11 | Convert some variables with non-negative values to unsigned type | Alexander Bluhm |
| 2016-09-03 | Use a single "opt" variable for all setsockopt calls in getdatasock(). | Jeremie Courreges-Anglas |
| 2016-09-03 | Set "lowdelay" and "throughput" Traffic Class on command & data IPv6 sockets. | Jeremie Courreges-Anglas |
| 2016-08-31 | Don't attempt to support IPv4-mapped IPv6 addresses. | Jeremie Courreges-Anglas |
| 2016-08-30 | remove ifdef for all the features we have. | Ted Unangst |
| 2016-08-26 | trim down some NBBY references. 8 bits ought to be enough for anyone. | Ted Unangst |
| 2016-08-14 | Convert %q to %ll with long long casts for printf() | Philip Guenther |
| 2016-07-04 | Use fstatat() instead of crafting a filename to use with stat() | Philip Guenther |
| 2016-05-04 | Kill #ifdef INET6 occurrences in userland. | Jeremie Courreges-Anglas |
| 2016-04-25 | prefer setres{u,g}id() rather than manipulating both real and effective | Theo de Raadt |
| 2016-04-06 | compare pointer to NULL instead of 0 | Sebastien Marie |
| 2016-03-16 | More "(<blah> *)0" -> NULL, avoiding any stdarg functions. | Kenneth R Westerback |
| 2015-12-12 | Remove NULL-checks before free(). ok tb@ | mmcc |
| 2015-11-16 | don't need to ifdef setproctitle | Ted Unangst |
| 2015-10-25 | No longer create /var/run/ftpd.pid in daemon mode; OK jung@ jca@ | Todd C. Miller |
| 2015-10-04 | fix custom popen to return pid to caller instead of tracking in a giant | Ted Unangst |
| 2015-09-01 | test pointers with NULL not '\0' | Jonathan Gray |
| 2015-01-19 | CMASK went out of scope with the recent <sys/param.h> removal. But oh | Theo de Raadt |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
| 2014-10-25 | Remove unnecessary netinet/in_systm.h include. | Lawrence Teo |
| 2014-08-25 | Delete secret or secret-derived data with explicit_bzero. | Doug Hogan |
| 2014-03-24 | remove tcpwrappers support. ok deraadt | Ted Unangst |
| 2014-03-17 | args! fix argstr. from LEVAI Daniel. | Stuart Henderson |
| 2014-03-17 | typo, spotted by okan@ | Stuart Henderson |
| 2014-03-17 | Add an option to disallow ftp access to accounts with uid below a certain | Stuart Henderson |
| 2014-01-08 | If the file size is zero, there's nothing to transmit so avoid spamming | Jeremie Courreges-Anglas |
| 2013-08-22 | Correct format string mismatches turned up by -Wformat=2 | Philip Guenther |
| 2013-07-26 | Make sure tmpline[] is always NUL terminated, to avoid possible | Philip Guenther |
| 2012-12-04 | remove some unnecessary sys/param.h inclusions | Theo de Raadt |
| 2012-03-04 | In preparation for getline and getdelim additions to libc, rename getline() | Federico G. Schwindt |
| 2011-12-14 | Add a new '-W' option to prevent saving login records to /var/run/wtmp. | Antoine Jacoutot |
| 2011-02-09 | Set SO_KEEPALIVE on sockets. OK miod@. Also tested by landry@ | Todd C. Miller |
| 2010-08-27 | In revision 1.14 of ftpd.c the ident variable was removed from its only meani... | lum |
| 2010-08-01 | Properly reset states when a login phase is interrupted by another one. | Tobias Stoeckmann |
| 2010-07-30 | Don't set "success" flags before error checks. | Ray Lai |
| 2010-06-18 | Prevent a segmentation fault on ftpd_popen error (memory, file descriptor, | Tobias Stoeckmann |
| 2010-06-13 | Adjust FTP reply codes (in error conditions) to conform to RFC 959. | Tobias Stoeckmann |
| 2009-10-28 | rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and | Theo de Raadt |
| 2009-04-20 | When receiving a new connection, log the remote IP number | Ingo Schwarze |
| 2008-09-30 | Always say "User %s access denied", in all cases, to avoid some stupid | Theo de Raadt |
| 2008-09-12 | Don't split large commands into multiple commands on a 512-byte | Moritz Jodeit |
| 2008-06-30 | Include file order must be "monitor.h" before "extern.h" otherwise enum | Anders Magnusson |
| 2008-04-13 | Use arc4random_buf() when requesting more than a single word of output | Damien Miller |
| 2007-09-02 | use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsg | Theo de Raadt |
| 2007-07-31 | From Gilles Chehade: | Ray Lai |
| 2007-07-27 | Fix potential memory leak, when snprintf(3) returns an empty buffer. | Moritz Jodeit |
