Subject: Re: tftpd: writing files with relative pathnames?
To: None <current-users@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: current-users
Date: 10/27/1998 10:01:06
>> if (mode != RRQ || !strncmp(filename, "../", 3))
>> return (EACCESS);
> Looking at the man page [...] it says that
> Files containing the string ``/../'' are not allowed.
> which should be corrected to the string "../" :-)
Actually, it should be corrected by adding a note like "File names
beginning with `../' are also disallowed except for read requests".
The code already contains a strstr check for "/../", right at the top
of validate_access(). (Also, the existing note should be changed
s/Files/File names/.)
der Mouse
mouse@rodents.montreal.qc.ca
7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B