Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-04-05 | string fixes; ok miod henning | Theo de Raadt | |
2003-03-31 | Treat empty environment variables the same as NULL. henning@ OK | Todd C. Miller | |
2003-03-31 | ascii -> ASCII | Jason McIntyre | |
2003-03-18 | small typos; | Jason McIntyre | |
ok miod@ | |||
2003-03-11 | getnameinfo buffer has to be NI_MAXHOST | Jun-ichiro itojun Hagino | |
2003-03-11 | check error on getnameinfo failure. | Jun-ichiro itojun Hagino | |
2003-03-10 | correct use of getnameinfo. PR 3138 | Jun-ichiro itojun Hagino | |
2003-02-17 | Fix double free; Brian Poole | Todd C. Miller | |
2003-01-22 | line2 may overrun if line is too long (> 200). be more careful on strcpy. | Jun-ichiro itojun Hagino | |
XXX strlen(argv[x]) should be checked before copies. netbsd 1.18 -> 1.19, requested by David Krause | |||
2003-01-03 | be more aware of directory change failures; s@msmith.net | Theo de Raadt | |
2002-12-30 | minor KNF | Theo de Raadt | |
2002-12-19 | only do "Trying ..." if verbose | Theo de Raadt | |
2002-11-08 | http redirect support; adapted from NetBSD. | Federico G. Schwindt | |
2002-07-12 | malloc/strdup failure not handled; cloder@acm.org | Theo de Raadt | |
2002-07-04 | document port allocation | Jakob Schlyter | |
2002-07-04 | use tcp high portrange for active data connections. ok deraadt@ | Jakob Schlyter | |
2002-06-09 | strlcpy fix, PR 2727 | Jun-ichiro itojun Hagino | |
2002-06-09 | do not present scopeid on wire format, as it is local to node | Jun-ichiro itojun Hagino | |
2002-06-04 | We want sync usage() w/ manual since -4/-6 options have been added. | Mike Pechkin | |
millert@ ok | |||
2002-06-01 | more snprintf | Theo de Raadt | |
2002-05-30 | -4 and -6 options; kanai@big.or.jp; itojun ok | Theo de Raadt | |
2002-04-25 | avoid buffer overrun on PASV from malicious server. | Jun-ichiro itojun Hagino | |
http://online.securityfocus.com/archive/1/269356/2002-04-22/2002-04-28/0 | |||
2002-03-30 | stretch banners | Theo de Raadt | |
2002-02-19 | We live in an ANSI C world. Remove lots of gratuitous #ifdef __STDC__ cruft. | Todd C. Miller | |
2002-02-19 | Fix gethostname() usage. | Mike Pechkin | |
deraadt@ ok | |||
2002-02-17 | Manual cleanup of remaining userland __P use (excluding packages maintained ↵ | Todd C. Miller | |
outside the tree) | |||
2002-02-16 | Part one of userland __P removal. Done with a simple regexp with some minor ↵ | Todd C. Miller | |
hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically. | |||
2002-01-04 | Don't longjmp(..., 0) | Artur Grabowski | |
2001-11-14 | o Don't accept URLs with user:pass@ and an extra unencoded @. | Heikki Korpela | |
@ should be encoded as %40 for passwords and usernames. @ in the pathname portion of the URL is ok. o decode usernames and passwords as per FTP URL specification. spotted by krw@, input from krw@ and fgs@ millert@ ok | |||
2001-10-27 | Send User-Agent: OpenBSD ftp to WWW servers and proxies. | Heikki Korpela | |
``User agents SHOULD include this field with requests'', from RFC 2616: http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.43 Patch from and problem reported by Diana Eichert <deicher@sandia.gov> when using proxies with specific browser requirements. Tested by me with the ports mirror-maker makefile / fetch-all script (with and without a proxy). ok millert@ | |||
2001-10-24 | Misplaced space in fprintf "Execute get, put orappend to initiate transfer" | Todd C. Miller | |
2001-10-04 | More accurate help. | Paul Janzen | |
2001-10-03 | o Only send port number in the HTTP request 'Host: ' specification | Heikki Korpela | |
if it is non-default (i.e., != 80) to circumvent bugs in some broken HTTP servers. naddy@ got hit by this with a port, lebel@ spotted the problem. o Print the HTTP request if debug (the ``-d'' flag) is specified. millert@ ok | |||
2001-10-01 | Typo, assign the new restart point to nrestart_point, not restart_point. | Todd C. Miller | |
Fixes an uninitialized use of nrestart_point. | |||
2001-08-22 | ftp-proxy | Bob Beck | |
2001-08-03 | Add back NUL termination of 'word' in complete() that was erroneously | Todd C. Miller | |
removed in strlcpy() conversion. Previously we were trying to strlcpy() a pointer that could be NULL. Now we check that the length != 0 and use memcpy() instead, then NUL terminate by hand to catch the other cases. Core dump noticed by fgs@ | |||
2001-07-12 | first pass at a -Wall cleanup | Theo de Raadt | |
2001-06-26 | use strlcpy vs strncpy+a[len-1]='\0'. millert@ ok. | lebel | |
2001-06-23 | remove evil #ifdef __GNUC__ garbage to avoid longjmp clobbering and use ↵ | Todd C. Miller | |
volatile instead | |||
2001-06-18 | Change default transfer type from ascii to binary; closes PR 1626 | Todd C. Miller | |
Similar to patch from mpech@prosoft.org.lv | |||
2001-03-09 | Add a missing newline in debug mode to separate debug output from | Todd C. Miller | |
line containing command completion; "Brian J. Kifiak" <bk@rt.fm> | |||
2001-03-09 | Typo in Synopsis; there's a -v option, not -u | Todd C. Miller | |
"Brian J. Kifiak" <bk@rt.fm> | |||
2000-12-24 | Spelling: tripple -> triple | Aaron Campbell | |
2000-11-09 | Change all option list specifications to ".Bl -tag -width Ds". Most man | Aaron Campbell | |
pages just needed their -width parameter tweaked to "Ds", which provides a nice width of 6 constant characters. For consistency more than anything. | |||
2000-10-18 | emit more easier-to-understand error message on port name error. from deraadt | Jun-ichiro itojun Hagino | |
2000-09-07 | bogus comment police | Todd T. Fries | |
2000-09-03 | Boring... Add :L modifier to all tweakable variables tests. | Marc Espie | |
Closes PR 1246 | |||
2000-07-27 | If the HOME environment variable is not set, do not try to read | Todd C. Miller | |
.netrc from cwd. Mostly paranoia but good practive. Closes PR 1332. | |||
2000-06-30 | warnx?/errx? paranoia (use "%s" not a bare string unless it is a | Todd C. Miller | |
constant). These are not security holes but it is worth fixing them anyway both for robustness and so folks looking for examples in the tree are not misled into doing something potentially dangerous. Furthermore, it is a bad idea to assume that pathnames will not include '%' in them and that error routines don't return strings with '%' in them (especially in light of the possibility of locales). | |||
2000-06-27 | initialize result. this fixes the recent problem that makes ftp coredump | Federico G. Schwindt | |
if epsv4 is disabled. problem reported by price@netdoor.com on misc. |