Re: Bug in libfetch handling of FTP urls..

From: Dag-Erling Smørgrav (des_at_des.no)
Date: 07/04/05

  • Next message: Lee S Clark: "EM(4), vlans & dhclient"
    To: John Baldwin <jhb@FreeBSD.org>
    Date: Mon, 04 Jul 2005 04:48:44 +0200
    
    

    John Baldwin <jhb@FreeBSD.org> writes:
    > Ran into this at work. Suppose I am fetching a file over ftp for a user foo
    > whose home dir is /home/foo' and I want to retrieve the 'bar/baz' file out of
    > his home directory. [...]

    This is tricky because libfetch caches FTP connections, so you can't
    always assume that CWD is ~ at the beginning of the transfer if you've
    already transferred something from the same host/user/password tuple
    in the same process. See (ironically) RFC 1738 section 3.2.5.

    Connection caching is an essential feature, because it has a huge
    impact on the speed of a network install. Although sysinstall still
    uses libftpio + cpio, one may hope that it will one day in the not-
    too-distant future switch to libfetch + libarchive.

    > I verified this by doing 'fetch -vv' and seeing that it does one big CWD
    > (instead of the multiple CWD's the RFC says should happen) and that it
    > includes the leading '/' when it should not.

    I am currently testing a patch for this.

    > Also, it seems that fetch ignores the ';type=X' optional part of the url-path
    > and always uses TYPE I.

    Correct, that was never implemented. At the very least, the typecode
    should be stripped from the URL.

    DES

    -- 
    Dag-Erling Smørgrav - des@des.no
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    

  • Next message: Lee S Clark: "EM(4), vlans & dhclient"

    Relevant Pages

    • Re: FTP strangeness
      ... So, it looks like SmartFTP is off the list as a client for VMS, Cerberus ... As demonstrated more than just VMS ftp servers do the latter - for situations ... In any case an FTP client should comply with the robustness principle of RFC ... A Server-FTP SHOULD use the reply codes defined in RFC-959 ...
      (comp.os.vms)
    • Re: Does FTP still send cleartext passwords?
      ... >Standard FTP implementations are completely unencrypted. ... "The" RFC? ... on which the FTP over SSL / TLS draft is ... >but if the encryption isn't part of the FTP rfc, ...
      (comp.security.misc)
    • Re: [Full-disclosure] Security issue in Filezilla 3.0.9.2:passwordsare stored in plain text (sit
      ... RFC2640 is about internationalization of FTP, ... SIZE extension, and has a 4.4 but no 4.4.3 subsection. ... So which RFC were you talking about? ... jobs to do other than posting RFC titles on Internet mailing lists. ...
      (Full-Disclosure)
    • Re: Do we need a DCL debugger?
      ... An FTP client uses NLST to return the list of filenames. ... The LIST command is ONLY meant to be used as display output. ... As the RFC states about the LIST ...
      (comp.os.vms)
    • Re: Does IIS5/6 support MDTM command?
      ... This kb has the RFC detail - ... Information About the IIS File Transmission Protocol (FTP) Service ... now I know the reason why IIS don't support this feature. ... >> not support changing the modification time of files. ...
      (microsoft.public.inetserver.iis.ftp)