Date: Thu, 15 Oct 1998 07:42:29 -0400 (EDT) From: Gregory A Lundberg To: WU-FTPD Discussion List Subject: [VR9] More enhancements and bug fixes for beta-18 The VR9 patch set for WU-FTPD 2.4.2 (beta-18) is now available. This set adds additional features requested over the years by the user community and includes a number of bug fixes for both the base (beta-18) release and earlier VR patch sets. These are available as both patches and pre-patched tarballs at my ftp site: ftp://ftp.vr.net/pub/wu-ftpd/ If you take just the patch files, please remember: they are cumulative. you cannot apply fixes from one set without earlier sets already having been applied. The first set for BETA-18 is VR3; VR1 and VR2 were for BETA-17 only. Several pre-compiled binaries for VR9 are also available. These include: Solaris/SunOS/Sparc ------------- sunos41x-ftpbin.tar.gz (FTP support executables, ls etc.) FTP242b18.wu-ftpd.2.4.2-beta18-VR9.SPARC.ULTRASparc.2.5.1.2.5.pkg.tar.Z FTP242b18.wu-ftpd.2.4.2-beta18-VR9.SPARC.ULTRASparc.2.5.1.2.5.pkg.tar.gz wu-ftpd-2.4.2-beta-18-vr9-SunOS-4.1.3_U1.tar.gz wu-ftpd-2.4.2-beta-18-vr9-SunOS-5.6.tar.gz SGI/IRIX -------- irix62-ftpbin.tar.gz (FTP support executables, ls etc.) wu-ftpd-2.4.2-beta-18-vr9.irix62.bin.tar.gz IBM/AIX ------- wu-ftpd-2.4.2-beta-18-vr9-AIX.3.2.5.tar.gz Intel/BSDI ---------- wu-ftpd-2.4.2-beta-18-vr9-BSDI-2.1.tar.gz wu-ftpd-2.4.2-beta-18-vr9-BSDI-3.1.tar.gz Intel/Linux ----------- wu-ftpd-2.4.2-beta-18-vr9.linux.i386.tar.gz Thanks to all those who helped with debugging and built the pre-compiled binaries. This is a list of fixes to BETA 18 with VR8 applied from lundberg@vr.net --------------------------------------------------------------------------- realpath() needs root permissions to prevent errors under certain security models. Noted by Jim_Marnell@cca-int.com running VR7. xferlog does not indicate success or failure. From a request on the mailing list from shein@us.ibm.com on July 2, 1997. Patch from pschwan@cmu.edu submitted privately on September 27, 1998. Allow access control commands to use address/netmask or CIDR. This closes Stan's TODO item 20. Patch submitted privately from ayamura@ayamura.org on September 15, 1998. Also corrected a hostname matching bug reported by swcxt@boco.co.gov on August 18, 1995. The change also includes scott@galileo.cuug.ab.ca request of December 10, 1996, to allow host names instead of IP numbers and a request from October 13, 1997, by whn@topelo.lopi.com. to reduce the number of DNS lookups needed for virtual host support. ayamura@ayamura.org reported on October 2, 1998, his changes for DEC Unix with C2 security were incorrect. He has confirmed these changes on OSF1 V3.2 41 alpha. Support regular expressions in noretrieve. From a patch submitted to the mailing list by wls@astro.umd.edu on Apr 22, 1997. Add 'allow-retrieve' to allow retrieval of files which would be denied by earlier 'noretrieve' clauses. From a request sent to the mailing list by mikedoug@texas.net on Oct 7, 1997. bero@microsoft.sucks.eu.org reported on October 5, 1998, the extensions for 'absolute' or 'relative' pathname comparison in earlier VR patches were not case-insensitive. They should have been. Ayamura Kikuchi submmitted the following patch on September 28, 1998. It adds support for OPIE (One-time Passwords In Everything). You will need OPIE libraries installed to use this. OPIE is available from ftp://ftp.inner.net/pub/opie/opie-2.32.tar.gz This feature was originally submitted by kjm@rins.ryukoku.ac.jp on March 21, 1997, for use with SunOS 4.1 with C2 security. Other features of that patch have not been included. Support globbing/wildcards throughout ftpaccess file for file and directory comparisons. bero@microsoft.sucks.eu.org spotted another discrepancy between the ANSI and K&R funciton definitions. thianlengvictor.tan@bnpgroup.com reports errors on AIX with malloc. chapan@ci.mil.wi.us confirms a problem in send_data(). This patch is experimental against VR8 to attempt to correct the problem. I'm working on the supposition that the problem is data alignment; the 'blksize' is off_t and malloc() wants a size_t. I've added a conversion step which should eliminate the problem. Added regular expression matching to deny-mail. Noted a number of places where strcmp was used but strcasecmp would be more appropriate. This makes the ftpaccess file easier to maintain since small typographical errors won't matter so much any more. bero@microsoft.sucks.eu.org reports dead code left laying arround from debugging VR8. Deleted it. Changed my mind. Regular expressions don't work well unless there's some way to tell they're there. Backed out all regular expression matching for file/path names in the ftpaccess file. This issue will be re-evaluated in a later VR patch set. Globbing still works everywhere it's reasonable to use it. Cleaned up a few large, confusing 'if' statements in the code. -- Gregory A Lundberg Senior Partner, VRnet Company 1441 Elmdale Drive lundberg+wuftpd@vr.net Kettering, OH 45409-1615 USA 1-800-809-2195