NetBSD/usr.bin
lukem b918fc0803 Forbid filenames returned from mget that aren't in (or below) the
current directory.
The previous behaviour (of trusting the remote server's response when
retrieving the list of files to mget with prompting disabled) has been
in ftp ~forever, and has been a "known issue" for a long time.
Recently an advisory was published by D.J. Bernstein on behalf of
Yosef Klein warning of the problems with the previous behaviour, so
to alleviate concern I've fixed this with a sledgehammer.

Remember the local cwd after any operation which may change it.
Use "remotecwd" instead of "remotepwd".
2005-01-03 09:50:09 +00:00
..
apply Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
apropos Add (unsigned char) cast to ctype functions 2004-10-30 15:51:20 +00:00
asa
at Add (unsigned char) cast to ctype functions 2004-10-30 16:55:06 +00:00
audio Add (unsigned char) cast to ctype functions 2004-10-30 16:57:27 +00:00
awk Add article. 2004-06-06 04:04:36 +00:00
banner
basename
bdes Use strtoul() for integer conversion 2004-10-30 17:02:20 +00:00
biff
bzip2 Add hook for SMALL 2004-06-06 06:39:43 +00:00
bzip2recover
cal
calendar New sentence, new line. Bump date for **. 2004-12-08 15:44:21 +00:00
cap_mkdb Drop extra space before a dot. 2004-09-26 21:19:47 +00:00
cdplay Add (unsigned char) cast to ctype functions 2004-10-30 17:08:12 +00:00
checknr Standardize usage: print it to stderr, add brackets around all optional 2004-07-09 11:41:26 +00:00
chflags
chpass Add (unsigned char) cast to ctype functions 2004-10-30 17:08:12 +00:00
cksum -p, -s, -t, and -x are mutually exclusive -- make it obvious in 2004-07-09 11:47:59 +00:00
cmp Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
col safer use of realloc 2003-10-16 06:45:22 +00:00
colcrt
colrm
column safer use of realloc 2003-10-16 06:45:22 +00:00
comm Add -f to usage. From Kouichirou Hiratsuka in PR 26196. 2004-07-09 11:50:21 +00:00
compile_et Don't include ${DESTDIR}/usr/include/krb5 if HOSTPROG. It's not needed and 2004-06-22 02:44:11 +00:00
compress Sync usage with man page. From Kouichirou Hiratsuka in PR 26197. 2004-07-09 12:14:37 +00:00
crontab
crunch Add (unsigned char) cast to ctype functions 2004-10-30 17:17:35 +00:00
ctags Completely rework how tools/compat is done. Purge all uses/references to 2004-06-20 22:20:14 +00:00
cut
db When vis encoding with -S, only remove the trailing NUL if -N isn't used and 2004-10-04 10:56:12 +00:00
dirname
du Use open address hashtable with multiplicative double hash probing 2004-06-13 11:30:10 +00:00
eject Add (unsigned char) cast to ctype functions 2004-10-30 17:17:35 +00:00
elf2aout s/the the/to the/. 2004-04-23 02:55:11 +00:00
elf2ecoff Overhaul how `build.sh tools' are used: 2003-10-27 00:12:41 +00:00
env
error Spell the plural of suffix "suffixes", not "suffices". 2004-02-13 17:56:17 +00:00
expand
extattr Add RCS Id, bump date for when it appeared in NetBSD, mention 2005-01-02 18:41:23 +00:00
false Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
fdformat PR/15897: Ryo HAYASAKA: fdformat does not know about terminal width. 2004-04-23 15:04:27 +00:00
fgen Add -d level to usage. From Kouichirou Hiratsuka in PR 26198. 2004-07-09 12:10:43 +00:00
file Force LANG=C before doing the shell glob to avoid collation issues on hosts 2004-06-16 01:33:35 +00:00
find Attack of the whiteout police, including the "fix whitespace problems" 2004-12-28 05:11:07 +00:00
finger Print the full pty name; reported by atatat 2004-11-16 04:52:46 +00:00
fmt Add (unsigned char) cast to ctype functions 2004-10-30 17:17:35 +00:00
fold safer use of realloc 2003-10-16 06:45:22 +00:00
fpr safer use of realloc 2003-10-16 06:45:22 +00:00
from isupper(x) can be true for x in [128..255], but since tolower(x) is required 2004-10-30 17:25:34 +00:00
fsplit No need to call isupper() before tolower() 2004-10-30 17:27:28 +00:00
fstat Slurp in the struct mount at vp->v_mount and the struct specinfo at 2004-12-14 03:10:23 +00:00
ftp Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
gcore Fix typo reported by Jeff Ito in PR 28496. 2004-12-01 12:02:08 +00:00
gencat Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
getconf pathconf(2), not (3). 2004-11-10 13:43:39 +00:00
getent add some HISTORY about the inspiration for this command 2004-12-03 23:05:32 +00:00
getopt Use `-ne' to compare numbers instead of `!=' in the example. 2003-05-10 17:02:04 +00:00
gprof
grep Add (unsigned char) cast to ctype functions 2004-10-30 17:37:09 +00:00
gzip Fixed for PR#28581. If stdin is the input stream, fstat it and check if it's 2004-12-08 06:38:40 +00:00
head Mention -c explicitly, use Nm, drop trailing space, 2004-05-04 23:44:21 +00:00
hesinfo Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
hexdump Add (unsigned char) cast to ctype functions 2004-10-30 17:43:02 +00:00
iconv scmp: don't discard const qualifiers needlessly. 2004-12-21 11:33:07 +00:00
id WARNS=3 clean. 2004-11-22 17:32:08 +00:00
indent Add (unsigned char) cast to ctype functions 2004-10-30 17:43:02 +00:00
innetgr Sort options and add -v to usage. From Kouichirou Hiratsuka in PR 26219, 2004-07-10 16:12:29 +00:00
ipcrm Clean up getopt() usage, removing unnecessary warnx()'s. 2003-11-02 17:43:01 +00:00
ipcs Change copyright to 2-clause BSD-copyright. 2004-09-15 19:45:17 +00:00
join Add missing -j to usage; sort as in man page; 2004-07-13 11:53:57 +00:00
jot Sort options, standardize usage message. 2004-11-22 17:34:24 +00:00
kdestroy
kdump Ensure a non-zero 'word_size' is passed to hexdump_buf for unknown 2004-08-23 20:49:28 +00:00
kgetcred Add kgetcred, a tool that fetches a credential from the KDC 2004-05-25 10:31:45 +00:00
kinit rearrange lib stuff so that these link on non-shared-lib platforms. 2003-12-13 22:07:35 +00:00
klist split MKKERBEROS4 from MKKERBEROS. based on work by lha at stacken.kth.se 2003-07-23 08:01:24 +00:00
ktrace - If fktrace(2) failed, just exit rather than waiting for trace output. 2004-07-16 23:52:01 +00:00
ktruss Add prefix "${PROG}-" to filename of automatically created list of 2004-07-10 12:12:49 +00:00
lam
last use sockaddr_snprintf() 2004-11-19 21:41:25 +00:00
lastcomm Add (unsigned char) cast to ctype functions 2004-10-30 19:34:01 +00:00
ldd Fix default format so that not to print NULL (e.g., ldd mozilla-bin). 2004-09-07 02:54:40 +00:00
leave Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
less Add (unsigned char) cast to ctype functions 2004-10-30 20:17:19 +00:00
lex Add (unsigned char) cast to ctype functions - Char is unsigned char. 2004-10-30 20:37:35 +00:00
locale consistently quote all values printed in the summary of 2004-07-12 08:51:56 +00:00
locate Rework "ignorefs" behaviour: 2004-04-19 01:05:22 +00:00
lock Usage -> usage; add missing -n to usage. From Kouichirou Hiratsuka in PR 26221. 2004-07-13 11:55:02 +00:00
logger
login Only include Kerberos 4 headers when compiling in a Kerberos enviroment 2004-12-22 01:28:56 +00:00
logname
look
lorder
m4 Add (unsigned char) cast to ctype functions 2004-10-30 20:39:35 +00:00
machine
mail Add (unsigned char) cast to ctype functions 2004-10-30 20:39:35 +00:00
make Add comments in the pmake style, and factor out a local variable. 2004-12-29 01:55:25 +00:00
man Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
menuc In procese_menu, make sure we initializie the menus 2004-09-17 18:27:28 +00:00
mesg
midiplay Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
mixerctl Mention mixerctl.conf in FILES and SEE ALSO. While here, tidy up some 2004-01-23 21:12:07 +00:00
mk_cmds
mkcsmapper KNF, from kevlo@openbsd 2004-01-05 19:20:10 +00:00
mkdep Sync usage with man page. From Kouichirou Hiratsuka in PR 26224. 2004-07-13 12:00:30 +00:00
mkesdb use snprintf, dude 2004-01-02 12:09:48 +00:00
mkfifo mkfifo is creating fifos, not directories. Noted by Andrew Doran. 2004-10-08 22:32:35 +00:00
mklocale Some fixes from jmc@openbsd. 2004-01-24 17:03:26 +00:00
mkstr
mktemp Bump date for previous. 2004-04-02 11:47:55 +00:00
modstat Update a comment to say that the returned size is in KB. 2004-10-22 09:50:54 +00:00
msgc Add (unsigned char) cast to ctype functions 2004-11-05 20:45:48 +00:00
msgs Fix obvious grammar mistake. Most of this file could do with a rewrite. 2004-09-03 14:24:50 +00:00
netgroup Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
netstat NI_WITHSCOPEID was not picked up by IETF standardization process 2004-11-16 06:04:12 +00:00
newsyslog Add (unsigned char) cast to ctype functions 2004-10-30 20:56:20 +00:00
nfsstat in "summary" output (-w), 2004-08-26 13:29:05 +00:00
nice
nl
nohup
openssl NO_* have been changed to OPENSSL_NO_* in more recent OpenSSL releases, 2003-08-27 20:18:41 +00:00
pagesize
passwd Add (unsigned char) cast to ctype functions 2004-10-30 21:05:53 +00:00
paste
patch Fix an array overrun in option parsing. 2004-12-09 18:06:10 +00:00
pathchk
pkill Make usage() not overflow 80 char lines. 2004-02-15 17:03:30 +00:00
pmap sync with kernel. (vm_map_entry::flags) 2005-01-01 21:17:47 +00:00
pmc Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
pr
printenv
printf WARNS=3, and remove comment about WFORMAT issues. 2004-10-30 19:28:35 +00:00
progress Support strsuftoll(3) suffixes for '-l length'. 2004-04-03 06:19:22 +00:00
pwhash Merge single-letter options; sync order in man page and usage. 2004-11-17 14:57:48 +00:00
qsubst Make fn arg 'unsigned char' to avoid passing 'char' to isalnum() 2004-11-01 21:36:11 +00:00
quota Replaced strncpy with strlcpy. Thanks to Peter Postma who 2004-09-07 13:20:39 +00:00
radioctl Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
rdist Patch from Olaf Siebert in PR 12688 to handle hard links correctly when 2004-08-06 15:50:02 +00:00
renice Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
rev
rlogin Dead code clean up: 2004-12-21 02:39:00 +00:00
rpcgen Add (unsigned char) cast to ctype functions 2004-11-01 21:39:32 +00:00
rpcinfo Add (unsigned char) cast to ctype functions 2004-11-01 21:39:32 +00:00
rs Add (unsigned char) cast to ctype functions 2004-11-01 21:39:32 +00:00
rsh remove unused variable 2004-10-16 07:36:08 +00:00
rup Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
ruptime
rusers Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
rwall Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
rwho Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
script Add -d to usage; use getprogname(3). From Kouichirou Hiratsuka in PR 26227. 2004-07-13 12:07:51 +00:00
sed no trailing comma at end of enum. 2004-11-20 06:40:01 +00:00
shar
shlock * add [] to -p 2004-07-13 12:16:12 +00:00
showmount Patch from PR 15181 to try using TCP first, fixing problems with long 2004-08-06 16:10:54 +00:00
shuffle Mike Cheponis noted that I didn't list the edition of Knuth that the 2004-12-01 00:03:45 +00:00
skey Add (unsigned char) cast to ctype functions 2004-11-01 21:52:07 +00:00
skeyinfo
skeyinit Document -x, from Jeff Ito in PR 28494. 2004-12-01 12:01:05 +00:00
soelim Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
sort Add (unsigned char) cast to ctype functions 2004-11-03 20:10:08 +00:00
split Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
ssh Style/consistency cleanup: 2005-01-03 06:05:50 +00:00
stat Add "dirname"- and "basename"-like functionality to stat(1) by way of 2004-12-31 03:24:31 +00:00
string2key
su Remove a leftover line apparently from rev. 1.17; also from Juha Hyttinen 2004-04-27 10:26:22 +00:00
systat Show more information about page types in use, and free pages. 2004-11-23 03:11:33 +00:00
tail do not use long for file offset, use off_t. otto@openbsd 2004-02-16 21:57:04 +00:00
talk PR/24862: Peter Postma: From Andrey Matveev via OpenBSD: 2004-03-20 17:07:33 +00:00
tcopy
tee
telnet Move linking with libdes to the common kerberos section since 2004-12-22 01:25:05 +00:00
tftp Move declaration of local variables to start of function instead of 2004-10-10 22:15:34 +00:00
time Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
tip Add (unsigned char) cast to ctype functions 2004-11-04 07:29:09 +00:00
tn3270 Fix a typo, dependancy -> dependency 2004-11-19 14:18:53 +00:00
top Add (unsigned char) cast to ctype functions 2004-11-04 07:35:15 +00:00
touch Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
tput Sync usage with man page; use getprogname(). 2004-07-23 13:33:22 +00:00
tr As in other man pages, use .Dq for strings, and .Sq for single characters. 2004-03-24 11:38:27 +00:00
true
tset pass data to a function via arguments instead of via global variables. 2004-09-01 01:46:28 +00:00
tsort Overhaul how `build.sh tools' are used: 2003-10-27 00:12:41 +00:00
tty
ul
uname Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
unexpand
unifdef Sort sections and other fixes. 2003-11-11 13:48:50 +00:00
uniq
units Add (unsigned char) cast to ctype functions 2004-11-04 07:38:43 +00:00
unvis Add -h to decode RFC 1808 URI style encoding (VIS_HTTPSTYLE). 2004-04-22 06:55:15 +00:00
usbhidaction Add (unsigned char) cast to ctype functions 2004-11-05 21:56:01 +00:00
usbhidctl Add (unsigned char) cast to ctype functions 2004-11-05 21:56:01 +00:00
users Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
uudecode Add (unsigned char) cast to ctype functions 2004-11-04 07:38:43 +00:00
uuencode
uuidgen Sync usage with man page. 2004-09-13 23:44:19 +00:00
vacation New sentence, new line; punctuation fixes; 2004-08-25 12:47:57 +00:00
vgrind Add (unsigned char) cast to ctype functions 2004-11-04 07:38:43 +00:00
vi bump version: coredump fixed when autocompleting a filename wider than screen 2004-11-23 14:36:50 +00:00
vis Sync usage with man page; use getprogname(). From Kouichirou Hiratsuka 2004-07-23 13:44:17 +00:00
vmstat Correct typo in an error message: allocatior -> allocator 2004-12-20 08:20:50 +00:00
w New sentence, new line. Add a comma. 2004-12-23 01:55:30 +00:00
wall Call check_sender with NULL atime, meaning no strict checking. 2004-10-27 17:49:19 +00:00
wc
what
whatis Use isalnum((unsigned char)x) instead of testing both isdigit() and isalpha() 2004-11-05 19:54:47 +00:00
whereis PR/25680: Christian Biere: whereis/which return invalid information with 2004-05-23 02:24:06 +00:00
who Sort options. 2004-11-22 17:20:02 +00:00
whois Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
window . wait only for 10 ms instead of 100 ms before updating the screen 2004-12-10 16:27:29 +00:00
write PR/28474: Geoff C. Wing: write does some weird checking and can't handle ptyfs 2004-11-30 04:08:38 +00:00
xargs Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 11:13:06 +00:00
xinstall Completely rework how tools/compat is done. Purge all uses/references to 2004-06-20 22:20:14 +00:00
xlint Shift assignment operators were handled incorrectly. On 64 bit machines, 2005-01-02 17:59:47 +00:00
xstr Some improvements from jmc@openbsd. 2004-07-26 16:05:33 +00:00
yacc Completely rework how tools/compat is done. Purge all uses/references to 2004-06-20 22:20:14 +00:00
yes
ypcat Modify the licences of code written by Theo De Raadt from a 4-clause 2003-12-10 12:06:25 +00:00
ypmatch Homogenize usage messages: make the 'usage' word all lowercase, as this seems 2004-01-05 23:23:32 +00:00
ypwhich strlcpy 2003-07-12 13:57:49 +00:00
Makefile Add a getextattr(1)/setextattr(1)/rmextattr(1)/lsextattr(1) utility 2005-01-02 17:55:48 +00:00
Makefile.inc