Subject: Re: bin/4231 (ftp(1) doesn't create directories)
To: None <gnats-bugs@NetBSD.org>
From: Luke Mewburn <lukem@NetBSD.org>
List: netbsd-bugs
Date: 10/02/2006 12:00:21
--4zI0WCX1RcnW9Hbu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Sep 23, 2006 at 11:15:43PM +0000, tls@netbsd.org wrote:
  | Synopsis: ftp(1) doesn't create directories
  |=20
  | State-Changed-From-To: open->feedback
  | State-Changed-By: tls@netbsd.org
  | State-Changed-When: Sat, 23 Sep 2006 23:15:42 +0000
  | State-Changed-Why:
  | Should this stay open?

IIRC, I wasn't happy with parts of the original proposed implementation,
especially with the client-side security implications of creating
local directories based on server-provided paths.

A while ago I implemented a fileindir() function that could
potentially be used to help sanity check the paths provided by the
server during the auto-creation of local directories.  If someone
wanted to reimplement the original proposal using this function to
validate stuff, feel free.  I personally don't have the time to
look at this myself.


Luke.

--4zI0WCX1RcnW9Hbu
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (NetBSD)

iD8DBQFFIHK1pBhtmn8zJHIRAo42AJ9Ln4icV4maMRPYILY/KL9qhC0QlACgmsrr
31dTnUmST0KefQW7Inb1jJ0=
=hFDI
-----END PGP SIGNATURE-----

--4zI0WCX1RcnW9Hbu--