Date: Thu, 15 Oct 1998 07:42:29 -0400 (EDT)
From: Gregory A Lundberg <[email protected]>
To: WU-FTPD Discussion List <[email protected]>
Subject: [VR9] More enhancements and bug fixes for beta-18

The VR9 patch set for WU-FTPD 2.4.2 (beta-18) is now available.

This set adds additional features requested over the years by the user
community and includes a number of bug fixes for both the base (beta-18)
release and earlier VR patch sets.

These are available as both patches and pre-patched tarballs at my ftp
site:

 ftp://ftp.vr.net/pub/wu-ftpd/

If you take just the patch files, please remember: they are cumulative.
you cannot apply fixes from one set without earlier sets already having
been applied.  The first set for BETA-18 is VR3; VR1 and VR2 were for
BETA-17 only.

Several pre-compiled binaries for VR9 are also available.  These include:

 Solaris/SunOS/Sparc
 -------------
 sunos41x-ftpbin.tar.gz  (FTP support executables, ls etc.)
 FTP242b18.wu-ftpd.2.4.2-beta18-VR9.SPARC.ULTRASparc.2.5.1.2.5.pkg.tar.Z
 FTP242b18.wu-ftpd.2.4.2-beta18-VR9.SPARC.ULTRASparc.2.5.1.2.5.pkg.tar.gz
 wu-ftpd-2.4.2-beta-18-vr9-SunOS-4.1.3_U1.tar.gz
 wu-ftpd-2.4.2-beta-18-vr9-SunOS-5.6.tar.gz

 SGI/IRIX
 --------
 irix62-ftpbin.tar.gz  (FTP support executables, ls etc.)
 wu-ftpd-2.4.2-beta-18-vr9.irix62.bin.tar.gz

 IBM/AIX
 -------
 wu-ftpd-2.4.2-beta-18-vr9-AIX.3.2.5.tar.gz

 Intel/BSDI
 ----------
 wu-ftpd-2.4.2-beta-18-vr9-BSDI-2.1.tar.gz
 wu-ftpd-2.4.2-beta-18-vr9-BSDI-3.1.tar.gz

 Intel/Linux
 -----------
 wu-ftpd-2.4.2-beta-18-vr9.linux.i386.tar.gz

Thanks to all those who helped with debugging and built the pre-compiled
binaries.

This is a list of fixes to BETA 18 with VR8 applied from [email protected]
---------------------------------------------------------------------------
realpath() needs root permissions to prevent errors under certain security
models.  Noted by [email protected] running VR7.

xferlog does not indicate success or failure.  From a request on the
mailing list from [email protected] on July 2, 1997.  Patch from
[email protected] submitted privately on September 27, 1998.

Allow access control commands to use address/netmask or CIDR.  This closes
Stan's TODO item 20.  Patch submitted privately from [email protected]
on September 15, 1998.  Also corrected a hostname matching bug reported by
[email protected] on August 18, 1995.  The change also includes
[email protected] request of December 10, 1996, to allow host names
instead of IP numbers and a request from October 13, 1997, by
[email protected]. to reduce the number of DNS lookups needed for
virtual host support.

[email protected] reported on October 2, 1998, his changes for DEC Unix
with C2 security were incorrect.  He has confirmed these changes on OSF1
V3.2 41 alpha.

Support regular expressions in noretrieve.  From a patch submitted to the
mailing list by [email protected] on Apr 22, 1997.

Add 'allow-retrieve' to allow retrieval of files which would be denied by
earlier 'noretrieve' clauses.  From a request sent to the mailing list by
[email protected] on Oct 7, 1997.

[email protected] reported on October 5, 1998, the extensions
for 'absolute' or 'relative' pathname comparison in earlier VR patches
were not case-insensitive.  They should have been.

Ayamura Kikuchi <[email protected]> submmitted the following patch on
September 28, 1998.  It adds support for OPIE (One-time Passwords In
Everything).  You will need OPIE libraries installed to use this.  OPIE is
available from ftp://ftp.inner.net/pub/opie/opie-2.32.tar.gz This feature
was originally submitted by [email protected] on March 21, 1997, for
use with SunOS 4.1 with C2 security.  Other features of that patch have
not been included.

Support globbing/wildcards throughout ftpaccess file for file and
directory comparisons.

[email protected] spotted another discrepancy between the ANSI
and K&R funciton definitions.

[email protected] reports errors on AIX with malloc.
[email protected] confirms a problem in send_data().  This patch is
experimental against VR8 to attempt to correct the problem.  I'm working
on the supposition that the problem is data alignment; the 'blksize' is
off_t and malloc() wants a size_t.  I've added a conversion step which
should eliminate the problem.

Added regular expression matching to deny-mail.

Noted a number of places where strcmp was used but strcasecmp would be
more appropriate.  This makes the ftpaccess file easier to maintain since
small typographical errors won't matter so much any more.

[email protected] reports dead code left laying arround from
debugging VR8.  Deleted it.

Changed my mind.  Regular expressions don't work well unless there's some
way to tell they're there.  Backed out all regular expression matching for
file/path names in the ftpaccess file.  This issue will be re-evaluated in
a later VR patch set.  Globbing still works everywhere it's reasonable to
use it.

Cleaned up a few large, confusing 'if' statements in the code.

--

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195