Subject: Re: bin/4231 (ftp(1) doesn't create directories)
To: None <gnats-bugs@NetBSD.org>
From: Luke Mewburn <lukem@NetBSD.org>
List: netbsd-bugs
Date: 10/02/2006 12:00:21
--4zI0WCX1RcnW9Hbu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sat, Sep 23, 2006 at 11:15:43PM +0000, tls@netbsd.org wrote:
| Synopsis: ftp(1) doesn't create directories
|=20
| State-Changed-From-To: open->feedback
| State-Changed-By: tls@netbsd.org
| State-Changed-When: Sat, 23 Sep 2006 23:15:42 +0000
| State-Changed-Why:
| Should this stay open?
IIRC, I wasn't happy with parts of the original proposed implementation,
especially with the client-side security implications of creating
local directories based on server-provided paths.
A while ago I implemented a fileindir() function that could
potentially be used to help sanity check the paths provided by the
server during the auto-creation of local directories. If someone
wanted to reimplement the original proposal using this function to
validate stuff, feel free. I personally don't have the time to
look at this myself.
Luke.
--4zI0WCX1RcnW9Hbu
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (NetBSD)
iD8DBQFFIHK1pBhtmn8zJHIRAo42AJ9Ln4icV4maMRPYILY/KL9qhC0QlACgmsrr
31dTnUmST0KefQW7Inb1jJ0=
=hFDI
-----END PGP SIGNATURE-----
--4zI0WCX1RcnW9Hbu--