Date: Tue, 23 Dec 2008 01:23:09 +0000 (UTC) From: Colin Percival <cperciva@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/libexec/ftpd extern.h ftpcmd.y ftpd.c src/sys/kern uipc_domain.c Message-ID: <200812230127.mBN1RCJh081088@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
cperciva 2008-12-23 01:23:09 UTC
FreeBSD src repository
Modified files:
libexec/ftpd extern.h ftpcmd.y ftpd.c
sys/kern uipc_domain.c
Log:
SVN rev 186405 on 2008-12-23 01:23:09Z by cperciva
Prevent cross-site forgery attacks on ftpd(8) due to splitting
long commands into multiple requests. [08:12]
Avoid calling uninitialized function pointers in protocol switch
code. [08:13]
Merry Christmas everybody...
Approved by: so (cperciva)
Approved by: re (kensmith)
Security: FreeBSD-SA-08:12.ftpd, FreeBSD-SA-08:13.protosw
Revision Changes Path
1.20 +1 -1 src/libexec/ftpd/extern.h
1.67 +22 -6 src/libexec/ftpd/ftpcmd.y
1.213 +6 -1 src/libexec/ftpd/ftpd.c
1.53 +5 -0 src/sys/kern/uipc_domain.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200812230127.mBN1RCJh081088>