Re: ftp: strnvis redirect uri

2022-11-09 Thread Todd C . Miller
On Wed, 09 Nov 2022 17:33:54 +0100, Claudio Jeker wrote: > Like this? Yes, OK millert@ - todd

Re: ftp: strnvis redirect uri

2022-11-09 Thread Klemens Nanni
On Wed, Nov 09, 2022 at 05:33:54PM +0100, Claudio Jeker wrote: > On Wed, Nov 09, 2022 at 08:51:21AM -0700, Todd C. Miller wrote: > > On Wed, 09 Nov 2022 15:46:06 +, Florian Obser wrote: > > > > > 200 might be a bit short for an URL, no? > > > > Perhaps stravis(3) is a better choice then? > >

Re: ftp: strnvis redirect uri

2022-11-09 Thread Claudio Jeker
On Wed, Nov 09, 2022 at 08:51:21AM -0700, Todd C. Miller wrote: > On Wed, 09 Nov 2022 15:46:06 +, Florian Obser wrote: > > > 200 might be a bit short for an URL, no? > > Perhaps stravis(3) is a better choice then? > Like this? -- :wq Claudio Index: fetch.c

Re: ftp: strnvis redirect uri

2022-11-09 Thread Todd C . Miller
On Wed, 09 Nov 2022 15:46:06 +, Florian Obser wrote: > 200 might be a bit short for an URL, no? Perhaps stravis(3) is a better choice then? - todd

Re: ftp: strnvis redirect uri

2022-11-09 Thread Todd C . Miller
On Wed, 09 Nov 2022 16:34:20 +0100, Claudio Jeker wrote: > The redirect URI is untrusted input so strnvis it first before printing > it. OK millert@ - todd

Re: ftp: strnvis redirect uri

2022-11-09 Thread Klemens Nanni
On Wed, Nov 09, 2022 at 04:34:20PM +0100, Claudio Jeker wrote: > The redirect URI is untrusted input so strnvis it first before printing > it. OK kn > > -- > :wq Claudio > > Index: fetch.c > === > RCS file:

Re: ftp: strnvis redirect uri

2022-11-09 Thread Florian Obser
200 might be a bit short for an URL, no? On 2022-11-09 16:34 +01, Claudio Jeker wrote: > The redirect URI is untrusted input so strnvis it first before printing > it. > > -- > :wq Claudio > > Index: fetch.c > === > RCS file:

ftp: strnvis redirect uri

2022-11-09 Thread Claudio Jeker
The redirect URI is untrusted input so strnvis it first before printing it. -- :wq Claudio Index: fetch.c === RCS file: /cvs/src/usr.bin/ftp/fetch.c,v retrieving revision 1.210 diff -u -p -r1.210 fetch.c --- fetch.c 15 Sep 2022