Subject: Bug In Syslog Call

From: George H Richmond <[email-masked]>
Date: Thu, 15 May 1997 08:43:10 -0700 (PDT)

I've found a minor bug in all versions of the wu ftpd I've examined including
beta-13.  If a user constructs a file name with a '%' (percent sign) followed
by 's', it causes the daemon to crash on our AIX 3.2.5 system in a syslog call.
The two instances occur in ftpd.c at lines 2713 and 2746 in the beta-13
version.

Replace:
	syslog(LOG_DEBUG, buf);
With:
	syslog(LOG_DEBUG, "%s", buf);

_________________________________________________
George H. Richmond
Work:  LLNL, PO Box 808, L-60, Livermore CA 94550
       [email-masked]    510-423-9833
Home:  1411 Shell Ct, Discovery Bay CA 94514-9428
       [email-masked]  510-634-3371