summaryrefslogtreecommitdiff
path: root/libexec/ftpd/ftpd.c
AgeCommit message (Collapse)Author
2006-04-21lint cleanup; ok ray moritz dhillTheo de Raadt
2005-12-03remove shadowing variables; ok pvalTheo de Raadt
2005-12-01fix double var declarations in same scope, found by lint; ok deraadt cloderPeter Valchev
2005-08-22EOF in ascii mode may also mean EOF so avoid printing a bogus error and ↵Michael Shalayeff
behave same as bin mode; beck@ deraadt@ millert@ ok
2005-07-14let root create the data socket. fixes PR 4287.Moritz Jodeit
ok millert@ henning@
2005-05-24readd endpwent()Moritz Jodeit
2005-05-24no need for endpwent()Moritz Jodeit
2005-04-21make code prettier so we can tell it is safe when we read it; ok beck cloderTheo de Raadt
2005-03-15better handling of cases where getnameinfo() returns non-zero.Niall O'Higgins
upon failure, don't try to print the contents of the char buffers we passed it. ok & feedback henning@, moritz@ (thanks!)
2004-12-06seperate reply_r, like earlier change but safer; moritz okTheo de Raadt
2004-12-04reply() used to play a lot with stdout, expecially fflush(stdout).Theo de Raadt
The recent change is to avoid stdio. That's good, except there are nearly 130 calls to this function, yet what if one of them depended on fflush() or something else in this code? The semantic change was never checked. That is not how we do development -- back this out until we know that checking work has been done.
2004-12-03make reply() reentrant. fixes a signal race.Moritz Jodeit
ok henning@
2004-11-28logging fixes:Henning Brauer
-don't prefix ftpd: in syslog(), it does that for us -replace a bad (too late) err() by syslog + exit from moritz
2004-11-28bump versionHenning Brauer
2004-11-28fix ttyline setting, fixes proctitle.Henning Brauer
notice independently by theo and pval, fix from moritz jodeit
2004-11-28privilege seperate ftpdHenning Brauer
handle the pre-authentication phase (minus a tiny tiny tiny amount of code after accept()) in an unprivileged process, asking the privileged monitor for help where needed. work by Moritz Jodeit <moritz@jodeit.org> with help from theo and me tests theo ian@ matthieu@ ben@networkinsanity.com a.schlichting@lemarit.com
2004-11-22More sensible error when both the -n and -A flags are used. Text OK jmc@Todd C. Miller
2004-09-30cope nicer with accept() failures, from freebsd; millert okTheo de Raadt
2003-12-12knfTheo de Raadt
2003-12-10spacingTheo de Raadt
2003-12-09knfTheo de Raadt
2003-12-09fix PR 3596 by making root create the socket, ok millert@Bob Beck
2003-11-20ftpd.8:Jason McIntyre
- simpler macros - sort options - some updates ftpd.c: - sync usage()
2003-11-12Don't hold on to the bind() while we loop around waiting to see if we canTodd C. Miller
make our connection. Adapted from FreeBSD via danh@
2003-10-01listen to bodh IPv4/v6 ftp port on -D by default. deraadt ok.Jun-ichiro itojun Hagino
comments from markus, millert. tested by fries
2003-09-30usage():Jason McIntyre
- add missing -n (from Jeff Ito PR 3496) - remove deprecated -h - sort -T and -t to match man page
2003-07-29spacesTheo de Raadt
2003-07-07make this match protos; millert okTheo de Raadt
2003-06-11ansi cleanup; ok ian markusTheo de Raadt
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2003-04-10Replace strcpy() w/ strlcpy() from espie@Todd C. Miller
Don't try to free pw_dir -- it is no longer allocated separately. Instead, add an extra param to sgetpwnam() to allow it to dupe an existing struct passwd * (instead of doing a lookup by username) and use this to reallocate pw in the case where pw_dir is the NULL string. deraadt@ OK
2003-02-17reply() -> perror_reply().Mike Pechkin
millert@ ok
2002-11-25Change a setuid() that should be seteuid(), not iced by grange@Todd C. Miller
Move a va_end so it gets called in an error condition as well
2002-11-15o Once a user is logged in, don't allow a change to another user.Todd C. Miller
o Run more code with the effective uid of the logged in user. From Frank Denis
2002-10-13Avoid potential printf format string problem with challenge fromTodd C. Miller
auth_challenge(). Currently, none of the auth modules put non-sanitized data in the prompt so there are no real security implications with this fix. Patch from Moritz Jodeit.
2002-08-29remove extra arg; jmegq@post.harvard.eduTheo de Raadt
2002-08-20-n: disallow anon ftp even if ftp account existsTheo de Raadt
2002-07-24Also check for snprintf() returning < 0Todd C. Miller
2002-07-24What on earth possessed me to use %p instead of %m in syslog() toTodd C. Miller
indicate the error string?
2002-07-20Exit on setusercontext() failure; noticed by deraadt@Todd C. Miller
2002-07-14make ftpd always listen to a high tcp port for passive data connections.Jakob Schlyter
deprecate and ignore the -h option. ok deraadt@.
2002-07-02* use lostconn() as the SIGALRM handler in receive_data() as originallyDan Harnett
done by downsj@ in revision 1.54. * some -Wall cleanup - only declare check_host() if TCPWRAPPERS is defined. - use socklen_t where appropriate instead of int (pointer signedness warnings). - {u_}char * pointer signedness warnings. ok millert@
2002-06-17Initialize SIGALRM handler once in main(), instead of in severalDan Harnett
different locations. This fixes a problem where the SIGALRM handler was being set to an uninitialized pointer in receive_data(). Originally reported to the misc@ list by Colin Harford. ok millert@
2002-06-09do not present scopeid on wire format (as it is local to a node).Jun-ichiro itojun Hagino
2002-05-29a few more strlcatTheo de Raadt
2002-05-26pid_t cleanupTheo de Raadt
2002-03-30correct an auth_close() misuse; millert okTheo de Raadt
2002-03-16o Don't allow password-less accounts to login (like in 2.9 and below)Todd C. Miller
o Stash copy of struct passwd via auth_setpwd() to avoid extra needless getpwnam() calls.
2002-03-12bsd_auth.h requires other headers so it can't be firstTodd C. Miller
2002-03-12Fix a couple mis-sorted headers and sync usage() with man page.Todd C. Miller
From Brian Poole