Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b918fc0803
NetBSD/usr.bin/ftp
History
lukem b918fc0803 Forbid filenames returned from mget that aren't in (or below) the 
current directory.
The previous behaviour (of trusting the remote server's response when
retrieving the list of files to mget with prompting disabled) has been
in ftp ~forever, and has been a "known issue" for a long time.
Recently an advisory was published by D.J. Bernstein on behalf of
Yosef Klein warning of the problems with the previous behaviour, so
to alleviate concern I've fixed this with a sledgehammer.

Remember the local cwd after any operation which may change it.
Use "remotecwd" instead of "remotepwd".
2005-01-03 09:50:09 +00:00
..
cmds.c Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
cmdtab.c Fix bug in Christos' recent cleanup which broke the "help" and "rhelp" commands. 2004-07-15 08:50:10 +00:00
complete.c
domacro.c Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
extern.h Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
fetch.c * Always decode %xx in a url's user & pass components. 2004-12-10 06:44:15 +00:00
ftp_var.h Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
ftp.1 Fix typo. 2004-12-01 12:03:55 +00:00
ftp.c If an ftp auto-fetch transfer is interrupted by SIGINT (usually ^C), 2004-07-20 10:40:21 +00:00
main.c Slightly rework SIGINT handling; if we're exiting the auto-fetch stuff 2004-07-21 00:09:14 +00:00
Makefile Save approximately 8K by not including http authentication, extended status 2004-06-06 01:37:41 +00:00
progressbar.c Allow custom text printed before (left of) the progress bar from progress(1): 2004-03-09 17:04:24 +00:00
progressbar.h Allow custom text printed before (left of) the progress bar from progress(1): 2004-03-09 17:04:24 +00:00
ruserpass.c Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
util.c Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
version.h Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00