The following reply was made to PR bin/4231; it has been noted by GNATS.

From: Luke Mewburn <lukem@NetBSD.org>
To: gnats-bugs@NetBSD.org
Cc: lukem@NetBSD.org, netbsd-bugs@netbsd.org, gnats-admin@netbsd.org,
	tls@netbsd.org, dolecek@ics.muni.cz
Subject: Re: bin/4231 (ftp(1) doesn't create directories)
Date: Mon, 2 Oct 2006 12:00:21 +1000

 --4zI0WCX1RcnW9Hbu
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 On Sat, Sep 23, 2006 at 11:15:43PM +0000, tls@netbsd.org wrote:
   | Synopsis: ftp(1) doesn't create directories
   |=20
   | State-Changed-From-To: open->feedback
   | State-Changed-By: tls@netbsd.org
   | State-Changed-When: Sat, 23 Sep 2006 23:15:42 +0000
   | State-Changed-Why:
   | Should this stay open?
 
 IIRC, I wasn't happy with parts of the original proposed implementation,
 especially with the client-side security implications of creating
 local directories based on server-provided paths.
 
 A while ago I implemented a fileindir() function that could
 potentially be used to help sanity check the paths provided by the
 server during the auto-creation of local directories.  If someone
 wanted to reimplement the original proposal using this function to
 validate stuff, feel free.  I personally don't have the time to
 look at this myself.
 
 
 Luke.
 
 --4zI0WCX1RcnW9Hbu
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.5 (NetBSD)
 
 iD8DBQFFIHK1pBhtmn8zJHIRAo42AJ9Ln4icV4maMRPYILY/KL9qhC0QlACgmsrr
 31dTnUmST0KefQW7Inb1jJ0=
 =hFDI
 -----END PGP SIGNATURE-----
 
 --4zI0WCX1RcnW9Hbu--