Index: CHANGES
===================================================================
RCS file: /cvsroot/wu-ftpd/CHANGES,v
retrieving revision 1.44
retrieving revision 1.45
diff -u -r1.44 -r1.45
--- CHANGES 2000/07/01 19:03:45 1.44
+++ CHANGES 2000/07/07 22:05:27 1.45
@@ -20,9 +20,16 @@
If you did not receive a copy of the license, it may be obtained online
at
http://www.wu-ftpd.org/license.html.
- $Id: CHANGES,v 1.44 2000/07/01 19:03:45 wuftpd Exp $
+ $Id: CHANGES,v 1.45 2000/07/07 22:05:27 wuftpd Exp $
+Changes in 2.6.2: Released <not yet>
+
+ o Fix another missing format string. This was in debugging code, so it's
+ not considered serious enough to push a new release yet.
+
+###########################################################################
+
Changes in 2.6.1: Released 2 Jul, 2000
o Fix security leaks that could result in a root shell compromise.
@@ -39,6 +46,8 @@
o SITE MINFO was missed in 2.6.0 when disabling SITE NEWER.
o Fix documentation of data-limit.
+
+###########################################################################
Changes in 2.6.0: Released 18 Oct, 1999
Index: src/ftpd.c
===================================================================
RCS file: /cvsroot/wu-ftpd/src/ftpd.c,v
retrieving revision 1.111
retrieving revision 1.113
diff -u -r1.111 -r1.113
--- src/ftpd.c 2000/07/01 18:17:39 1.111
+++ src/ftpd.c 2000/07/07 22:17:38 1.113
@@ -21,7 +21,7 @@
If you did not receive a copy of the license, it may be obtained online
at
http://www.wu-ftpd.org/license.html.
- $Id: ftpd.c,v 1.111 2000/07/01 18:17:39 wuftpd Exp $
+ $Id: ftpd.c,v 1.113 2000/07/07 22:17:38 wuftpd Exp $
****************************************************************************/
/* FTP server. */
@@ -2572,7 +2572,7 @@
#ifdef BSD_AUTH
if (ext_auth) {
if ((salt = check_auth(the_user, passwd))) {
- reply(530, salt);
+ reply(530, "%s", salt);
#ifdef LOG_FAILED /* 27-Apr-93 EHK/BM */
syslog(LOG_INFO, "failed login from %s",
remoteident);
@@ -6274,7 +6274,7 @@
if (s) {
int i = ntohs(pasv_addr.sin_port);
sprintf(s, "PASV port %i assigned to %s", i, remoteident);
- syslog(LOG_DEBUG, s);
+ syslog(LOG_DEBUG, "%s", s);
free(s);
}
}
@@ -6289,7 +6289,7 @@
char *s = calloc(128 + strlen(remoteident), sizeof(char));
if (s) {
sprintf(s, "PASV port assignment assigned for %s", remoteident);
- syslog(LOG_DEBUG, s);
+ syslog(LOG_DEBUG, "%s", s);
free(s);
}
}
@@ -6435,7 +6435,7 @@
dirlist = ftpglob(whichfiles);
sdirlist = dirlist; /* save to free later */
if (globerr != NULL) {
- reply(550, globerr);
+ reply(550, "%s", globerr);
goto globfree;
}
else if (dirlist == NULL) {
