Subject: Re: tftpd: writing files with relative pathnames?
To: None <current-users@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: current-users
Date: 10/27/1998 10:01:06
>>         if (mode != RRQ || !strncmp(filename, "../", 3))
>>             return (EACCESS);

> Looking at the man page [...] it says that

> Files containing the string ``/../'' are not allowed.

> which should be corrected to the string "../" :-)

Actually, it should be corrected by adding a note like "File names
beginning with `../' are also disallowed except for read requests".
The code already contains a strstr check for "/../", right at the top
of validate_access().  (Also, the existing note should be changed
s/Files/File names/.)

					der Mouse

			       mouse@rodents.montreal.qc.ca
		     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B