ftpd security bug revisited: patches for 4.2bsd

[Robert Seals]

In article <565 at comdesign.CDI.COM>, pst at comdesign.cdi.com (Paul Traina) writes:
> UCB was kind enough to supply source code for all of ftpd,  however it
> was for 4.3bsd.  I think I've patched the ftpd source for 4.2 compatibility,
> but I'd like to make sure that I didn't do anything stupid.  If there's

Ditto, except for Ultrix 1.2 and 2.2 (they involved the same changes).

> 	popen:		uid_t doesn't exist in 4.2 sys/types, looked like it
> 			  should be sizeof() return of vfork (size of a pid),
> 			  so I typedef'ed to int.

I peeked at 4.3's sys/types.h, and it claimed u_short, so I put it in mine,
too.

The resulting thing seems to work. Is it more secure than the old version?
Beats me!! Does it REALLY work? Beats me!!

> Paul Traina				To believe that what is true for

rob