re: pkg/23963

[Philippe Oechslin <philippe.oechslin%objectif-securite.ch@localhost>]

The following reply was made to PR pkg/23963; it has been noted by GNATS.

From: Philippe Oechslin <philippe.oechslin%objectif-securite.ch@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: re: pkg/23963
Date: Mon, 06 Jun 2005 00:35:55 +0200

 Hello there,
 I have tested tnftp 20050511. The behaviour has changed, but there still 
 is a bug.
 
 I have downloaded 20050511 and compiled it (./configure, make) on my 
 Linux Suse 9.2 distribution.
 
 When I give a username that is too long, the rest of the username stays 
 in a buffer and is inserted in the next username. At least there is no 
 interaction with later comands. 
 
 Here is an example: the commands that I typed are
 - o ftp.microsoft.com
 - user AAA..AAcheck_this_outBBB..BBB
 - <blank password>
 - user <blank username>
 - <blank password>
 
 tp> o ftp.microsoft.com
 Connected to ftp.microsoft.com.
 220 Microsoft FTP Service
 Name (ftp.microsoft.com:oechslin): 
 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcheck_this_outBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
 331 Password required for 
 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcheck_th.
 Password:
 530 User 
 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcheck_th 
 cannot log in.
 ftp: Login failed.
 ftp> user
 (username) 331 Password required for 
 
s_outBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.
 Password:
 530 User 
 
s_outBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
 
 cannot log in.
 Login failed.
    
 As you can see from the screen dump and from looking at the trafic, the 
 username is trunctated after 78 characters after the initial user 
 command with a long username. When I type a second  user command without 
 argument, the rest of the previous username is transmitted. However, the 
 extra data does not seem to interact with later commands as it did when 
 I discovered the bug.
 
  regards,
 
    Philippe