changelog

功能强大的ftp服务器源代码

* Version 1.0.17a:
    FD_SET(-1, ...) is invalid, but it could happen on aborted transfers,
causing Pure-FTPd to exit without removing ftpwho entries nor atomic files.
    safe_fd_set() has been introduced to solve this, it just works like
safe_fd_isset() and ignores descriptor -1 and it has been placed on the same
places.

* Version 1.0.17:
    Some fixes were made to the traditionnal Chinese translation by Flaw Zero
<flawzero at eyou.com>.
    Autoconf was upgraded to 2.58.
    TLS_CERTIFICATE_PATH has been renamed TLS_CERTIFICATE_FILE.
    --with-certfile has been added to ./configure to set up a value for
TLS_CERTIFICATE_FILE. The default value has been reverted to
/etc/ssl/private/pure-ftpd.pem.
    Solaris NIS accounts can now be converted using pure-pwconvert.
    Don't drop capabilities too early, or even chroot will be prohibited.
Thanks to Arkadiusz Patyk, Li-Ren and Philipp Kern for their report.
    Negative return codes are not used any more - reported by Andrew Victor
<[e-mail]>
    System users whose password is '********' are now imported by
pure-pwconvert (for newer MacOS X).
    New file : README.MacOS-X.
    Use SO_REUSEPORT in place of SO_REUSEADDR to bind the ftp-data port on
FreeBSD. Suggested by Henri Virtanen <[e-mail]>.
    Big change in the way upload are handled. We now maintain a per-process
unique file name in an "atomic_prefix" global. This is the name of a temporary
file that is actually used for upload, through the get_atomic_file() function
that adds the basename if needed. Once the upload is completed or aborted, the
temporary file is renamed. Or hard links are created when autorename is asked
for (autorename happens after the upload now, not before). It changes a lot of
stuff in dostor(), but it makes the whole thing easier and atomic uploads are
really nice for the end user. --no-truncate (and the global no_truncate) can
keep the old file when a new version of a file is being uploaded.
    Redundant calls to get_usec_time() were removed.
    Julien Andrieux's parser has been added to contribs.
    Errors when SSL certificates are missing are more explicit.
    The SITE TIME command was implemented. Suggested by Mark.
    A new sample of a PAM configuration file has been written. The previous
one is still available as pure-ftpd.old.

* Version 1.0.16c:
    We should disable the raw mode and send full HTML headers in CGI mode.
Reported by Bernard Lheureux <[e-mail]>
    Spelling errors were fixed in the .no translation by Brynjar Eide
<[e-mail]>
    Always try to include sys/param.h before sys/mount.h in the autoconf
script. Patch by Brad Smith <[e-mail]>.
    FAQ addition regarding the STOU command. Written by C. Jon Larsen
<[e-mail]>
    PAM was broken in 1.0.16b due to PAM_SUCCESS not being copied to the right
slot. It has been fixed.
    Automake has been updated to 1.7.8.
    configure.ac has been cleaned up a bit regarding the conditionnal inclusion
of stdlib.h/unistd.h .
    RPMs are now built with largefile support, privsep and sysquotas by
default.

* Version 1.0.16b:
    PAM fixes.
    TLS should now compile on RedHat 9 that moved Kerberos headers to
a specific directory.
    free(NULL) is ok => all code like "if (<value> != NULL) free(<value>);" 
has been simplified.
    Automake has been upgraded to 1.7.7, Autoconf to 2.57a.
    The sysconf prefix is now used for SSL certificates as well.
    We break'ed too early when trying to resolve host names in
pure-ftpwho and the local host name couldn't even be resolved. The problem was
introduced in 1.0.16 when the MacOS X Panther workarounds were implemented.
    Thanks to JG <[e-mail]> for his bug report.
    /usr/local/include, /usr/kerberos/include and /usr/local/lib are only
added to CPPFLAGS/LDFLAGS if they actually exist.
    pure-ftpwho now outputs XHTML 1.1 conformant code in CGI mode.
    pure-ftpwho now properly escapes XHTML special characters.
    pure-ftpwho now announces the ISO-8859-15 character set in XML mode.
    Disable IPV6_V6ONLY by popular request by people lost with the need of the
-4 switch on some operating systems.

* Version 1.0.16a:
    Fix typo (sizeof_resolved instead of sizeof resolved) in
src/bsd-realpath.c . Not a vulnerability because it happens in the good way,
but it sometimes used to break uploadscript.

* Version 1.0.16:
    An obsolete comment in pure-ftpd.conf was fixed : RPMs don't parse
/etc/sysconf/pure-ftpd any more.
    Recognize the '##' prefix as a shadowed password - make
authentication work on Solaris with shadow/NIS.
    Add back some random sleep() between authentication failures in
addition to the exponential sleep. Zzzzz... sleeping is good in summer...
    Upgrade to automake 1.7.5.
    The list of options in the pure-ftpd(8) man page was reordered -
Thanks to our beloved Claudiu Costin.
    SSL/TLS support was added (bits in src/{ftpd.c,ftp_parser.c,tls.c,tls.h,
configure.ac}, new doc: README.TLS, new globals: tls_ctx, tls_cnx). New
related commands were introduced : AUTH, PBSZ and PROT.
    Uploaded files are now removed when realpath() fails and
bsd_realpath() was modified to fall back to getcwd()/chdir() if we
can't get a descriptor on the current directory because it is not
readable. It fixes pure-uploadscript on some platforms like MacOS X.
    HAVE_BROKEN_REALPATH is gone. USE_BUILTIN_REALPATH is born.
    A typo in the Python configuration file wrapper was fixed : -t was used in
place of -y.
    MacOS X Panther has a lousy getnameinfo() implementation that doesn't fill
the buffer when no DNS entry is found for a host and a numerical result wasn't
explicitely asked. As a result, Pure-FTPd didn't even start on Panther (saying
"bad IP address") . We now check for EAI_NONAME if available and we retry with
NI_NUMERICHOST if this is what getnameinfo() returns. Thanks to Yann Bizeul
for his valuable help on this issue.
    Implement a working strdup() replacement in puredb for systems lacking it.
    Some MAXPATHLEN / MAXPATHLEN + 1 cleanups. Basically when paths are
generated by our own functions, we use MAXPATHLEN for the complete
zero-terminated string. When a buffer is passed to a libc function, we reserve
a MAXPATHLEN + 1 buffer and give a MAXPATHLEN size, just to avoid bad
surprises if an off-by-one ever occurs in a getcwd() like function.
    Don't use make_scrambled_password() in the MySQL backend because the API
changed since MySQL 4.1.
    Removed fixed-size constant arrays in src/crypto.c because of MacOS X
linker bugs (grrr...) .

* Version 1.0.15:
    New translation : Turkish, contributed by Mehmet Cokcevik
<[e-mail]> .
    PostgreSQL documentation templates have been fixed - At least User
is a reserved keyword that needs quotes. Thanks to Henrik Edlund
<[e-mail]> .
    The maximal length of an account has been bumped a bit (42 chars),
and that size is now consistent accross functions through the
MAX_USER_LENGTH macro. Thanks to Darth Vader (freddyke) for suggesting
this.
    The comment about the location of the config file in the RedHat
init script was synced with the new location.
    Tokens in the configuration file are now case independant.
    Automatic creation of home directories was fixed. Thanks to 
Anthony DeRobertis for the fix.
    A typo in quota handling was fixed.
    Cable & Wireless NL is now WideXS and their mirror seems to be
working again.
    Always fill descriptors 0/1 in order to make pure-uploadscript
actually work when daemonizing. Thanks to Joerg Pulz
<[e-mail]> for pointing this out.
    Don't open pipes with O_NDELAY, some systems don't like it at all.
As a side effect, the server will now wait until pure-uploadscript is
actually started before accepting connections and this is a _good_ thing.
    The server load is not displayed any more, by popular request.
    The version number isn't displayed any more as well.
    GNU's getopt_long() has been replaced by an OpenBSD derivative.
    --without-longoptions has been removed. We keep the old macros and
#ifdef though, just in case we want to improve the minimal mode later.
    New unofficial macro : DISPLAY_FILES_IN_UTC_TIME to display directory
listings with UTC times.
    The danish translation was updated - Lyberth.
    pure-pw now returns error codes.
    WIN32_ANON_DIR can override the default anonymous FTP directory on
Win32.
    Fix "pure-pw usermod -y" by introducing has_per_user_max.
    New subcommand : "pure-pw list", that summarizes available
accounts in a puredb.
    Enlarge TCP window as it was a long time ago. It brings better
performances on BSD systems. Define NO_TCP_LARGE_WINDOW to disable.
    Try to early detect timeouts by checking whether select() returns 0.
    Don't try to reduce capabilities if we obviously can't because the
server has not been started by root.
    Pure-FTPd is now 100% covered by the BSD license.

* Version 1.0.14:
    Use random() if available, not rand() for fortune cookies.
    Remove broken lseek(fd, -1, 0).
    When writing to clients data sockets fails, the client probably
hung up. IE, for instance, doesn't seem to properly abort transfers
and say "QUIT" when a transfer is canceled by the user. So, log
MSG_ABORTED instead of MSG_DATA_WRITE_FAILED.
    Check whether we are inside a Virtuozzo virtual environment and
disable sendfile() if this is the case. Thanks to Kittiwat Manosuthi
for his help on this issue.
    Automake has been upgraded to version 1.7, autoconf to version 2.57.
    Introduce privsep.h, privsep_p.h, privsep.c and --with-privsep.
    Drop capabilities after the call to nice() because we need
CAP_SYS_NICE.
    Don't waste time with in dopasv() to get the name of the socket we
just created.
    Add "ptracetest".
    Enable __EXTENSIONS__ and _XPG4_2 on Solaris in ./configure.ac
    Also check whether a client has gone away by testing xferfd and
introduce safe_fd_isset() that just works like FD_ISSET() but doesn't
choke when the descriptor is -1. It fixes bus errors on FreeBSD.
    Add force_passive_ip_s in order to store the argument of -P.
Passive IP addresses are now resolved in doit() for every new
connection, by popular request. It means that "-P ftp.example.com" now
works, even for dynamic addresses.
    Split the funtion that creates an active data socket into two
parts : doport2() and doport3(). doport3() actually creates it,
doport2() does other gadgets like checking for FXP, etc.
    Carefully check whether we have OpenBSD/MicroBSD-like MD5/SHA1
functions in libc and not an incompatible variant like Cyrus SASL.
    The "Welcome to Pure-FTPd" decorations were replaced with
something more neutral.
    Introduce ISCTRLCODE() instead of doing it by hand every time and
properly reject Unicode control chars while we are at it.
    New contrib : Webmin module, by La Shampoo.

* Version 1.0.13a:
    Fix pure-config.pl with old versions of the Perl interpreter.
    Fix compilation with PostgreSQL, thanks to Sakari Tanhua 
<[e-mail]> .
    
* Version 1.0.13 :
    Swap simplified and traditional chinese settings. Reported by Ying-Chieh
Liao <[e-mail]> .
    Ignore ESTA if a passive IP is forced or the NAT mode is enabled, because
the private address is probably meaningless.
    README documentation improvements, contributed by Jeffrey Lim
<[e-mail]>
    Avoid NGROUPS_MAX when possible - Idea from tuxfamily.org CVS tree.
    LDAP schema changed to work with newer OpenLDAP releases.