Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-04-21 | lint cleanup; ok ray moritz dhill | Theo de Raadt | |
2005-12-03 | remove shadowing variables; ok pval | Theo de Raadt | |
2005-12-01 | fix double var declarations in same scope, found by lint; ok deraadt cloder | Peter Valchev | |
2005-08-22 | EOF in ascii mode may also mean EOF so avoid printing a bogus error and ↵ | Michael Shalayeff | |
behave same as bin mode; beck@ deraadt@ millert@ ok | |||
2005-07-14 | let root create the data socket. fixes PR 4287. | Moritz Jodeit | |
ok millert@ henning@ | |||
2005-05-24 | readd endpwent() | Moritz Jodeit | |
2005-05-24 | no need for endpwent() | Moritz Jodeit | |
2005-04-21 | make code prettier so we can tell it is safe when we read it; ok beck cloder | Theo de Raadt | |
2005-03-15 | better handling of cases where getnameinfo() returns non-zero. | Niall O'Higgins | |
upon failure, don't try to print the contents of the char buffers we passed it. ok & feedback henning@, moritz@ (thanks!) | |||
2004-12-06 | seperate reply_r, like earlier change but safer; moritz ok | Theo de Raadt | |
2004-12-04 | reply() used to play a lot with stdout, expecially fflush(stdout). | Theo de Raadt | |
The recent change is to avoid stdio. That's good, except there are nearly 130 calls to this function, yet what if one of them depended on fflush() or something else in this code? The semantic change was never checked. That is not how we do development -- back this out until we know that checking work has been done. | |||
2004-12-03 | make reply() reentrant. fixes a signal race. | Moritz Jodeit | |
ok henning@ | |||
2004-11-28 | logging fixes: | Henning Brauer | |
-don't prefix ftpd: in syslog(), it does that for us -replace a bad (too late) err() by syslog + exit from moritz | |||
2004-11-28 | bump version | Henning Brauer | |
2004-11-28 | fix ttyline setting, fixes proctitle. | Henning Brauer | |
notice independently by theo and pval, fix from moritz jodeit | |||
2004-11-28 | privilege seperate ftpd | Henning Brauer | |
handle the pre-authentication phase (minus a tiny tiny tiny amount of code after accept()) in an unprivileged process, asking the privileged monitor for help where needed. work by Moritz Jodeit <moritz@jodeit.org> with help from theo and me tests theo ian@ matthieu@ ben@networkinsanity.com a.schlichting@lemarit.com | |||
2004-11-22 | More sensible error when both the -n and -A flags are used. Text OK jmc@ | Todd C. Miller | |
2004-09-30 | cope nicer with accept() failures, from freebsd; millert ok | Theo de Raadt | |
2003-12-12 | knf | Theo de Raadt | |
2003-12-10 | spacing | Theo de Raadt | |
2003-12-09 | knf | Theo de Raadt | |
2003-12-09 | fix PR 3596 by making root create the socket, ok millert@ | Bob Beck | |
2003-11-20 | ftpd.8: | Jason McIntyre | |
- simpler macros - sort options - some updates ftpd.c: - sync usage() | |||
2003-11-12 | Don't hold on to the bind() while we loop around waiting to see if we can | Todd C. Miller | |
make our connection. Adapted from FreeBSD via danh@ | |||
2003-10-01 | listen to bodh IPv4/v6 ftp port on -D by default. deraadt ok. | Jun-ichiro itojun Hagino | |
comments from markus, millert. tested by fries | |||
2003-09-30 | usage(): | Jason McIntyre | |
- add missing -n (from Jeff Ito PR 3496) - remove deprecated -h - sort -T and -t to match man page | |||
2003-07-29 | spaces | Theo de Raadt | |
2003-07-07 | make this match protos; millert ok | Theo de Raadt | |
2003-06-11 | ansi cleanup; ok ian markus | Theo de Raadt | |
2003-06-02 | Remove the advertising clause in the UCB license which Berkeley | Todd C. Miller | |
rescinded 22 July 1999. Proofed by myself and Theo. | |||
2003-04-10 | Replace strcpy() w/ strlcpy() from espie@ | Todd C. Miller | |
Don't try to free pw_dir -- it is no longer allocated separately. Instead, add an extra param to sgetpwnam() to allow it to dupe an existing struct passwd * (instead of doing a lookup by username) and use this to reallocate pw in the case where pw_dir is the NULL string. deraadt@ OK | |||
2003-02-17 | reply() -> perror_reply(). | Mike Pechkin | |
millert@ ok | |||
2002-11-25 | Change a setuid() that should be seteuid(), not iced by grange@ | Todd C. Miller | |
Move a va_end so it gets called in an error condition as well | |||
2002-11-15 | o Once a user is logged in, don't allow a change to another user. | Todd C. Miller | |
o Run more code with the effective uid of the logged in user. From Frank Denis | |||
2002-10-13 | Avoid potential printf format string problem with challenge from | Todd C. Miller | |
auth_challenge(). Currently, none of the auth modules put non-sanitized data in the prompt so there are no real security implications with this fix. Patch from Moritz Jodeit. | |||
2002-08-29 | remove extra arg; jmegq@post.harvard.edu | Theo de Raadt | |
2002-08-20 | -n: disallow anon ftp even if ftp account exists | Theo de Raadt | |
2002-07-24 | Also check for snprintf() returning < 0 | Todd C. Miller | |
2002-07-24 | What on earth possessed me to use %p instead of %m in syslog() to | Todd C. Miller | |
indicate the error string? | |||
2002-07-20 | Exit on setusercontext() failure; noticed by deraadt@ | Todd C. Miller | |
2002-07-14 | make ftpd always listen to a high tcp port for passive data connections. | Jakob Schlyter | |
deprecate and ignore the -h option. ok deraadt@. | |||
2002-07-02 | * use lostconn() as the SIGALRM handler in receive_data() as originally | Dan Harnett | |
done by downsj@ in revision 1.54. * some -Wall cleanup - only declare check_host() if TCPWRAPPERS is defined. - use socklen_t where appropriate instead of int (pointer signedness warnings). - {u_}char * pointer signedness warnings. ok millert@ | |||
2002-06-17 | Initialize SIGALRM handler once in main(), instead of in several | Dan Harnett | |
different locations. This fixes a problem where the SIGALRM handler was being set to an uninitialized pointer in receive_data(). Originally reported to the misc@ list by Colin Harford. ok millert@ | |||
2002-06-09 | do not present scopeid on wire format (as it is local to a node). | Jun-ichiro itojun Hagino | |
2002-05-29 | a few more strlcat | Theo de Raadt | |
2002-05-26 | pid_t cleanup | Theo de Raadt | |
2002-03-30 | correct an auth_close() misuse; millert ok | Theo de Raadt | |
2002-03-16 | o Don't allow password-less accounts to login (like in 2.9 and below) | Todd C. Miller | |
o Stash copy of struct passwd via auth_setpwd() to avoid extra needless getpwnam() calls. | |||
2002-03-12 | bsd_auth.h requires other headers so it can't be first | Todd C. Miller | |
2002-03-12 | Fix a couple mis-sorted headers and sync usage() with man page. | Todd C. Miller | |
From Brian Poole |