Synopsis: parsing of /etc/ftpchroot broken in NetBSD 1.4.2
NetBSD versions: NetBSD 1.4.2 only
Thanks to: Paul J. Lavoie, Luke Mewburn
Reported in NetBSD Security Advisory: SA2000-006

Index: libexec/ftpd/ftpd.c
===================================================================
RCS file: /cvsroot/basesrc/libexec/ftpd/ftpd.c,v
retrieving revision 1.61.2.1
retrieving revision 1.61.2.2
diff -u -c -r1.61.2.1 -r1.61.2.2
*** ftpd.c	1999/10/01 12:08:06	1.61.2.1
--- ftpd.c	2000/05/11 10:14:37	1.61.2.2
***************
*** 489,496 ****
  		if (glob == NULL || glob[0] == '#')
  			continue;
  		perm = strtok(NULL, " \t\n");
- 		if (perm == NULL)
- 			continue;
  		if (fnmatch(glob, name, 0) == 0)  {
  			if (perm != NULL &&
  			    ((strcasecmp(perm, "allow") == 0) ||
--- 489,494 ----