Hello,

just noticed that jftpgw dumps core when trying to use its built-in
function for password-creation:
$ jftpgw -e
Password:
Segmentation fault
$
on a 6.0 stable i386 system. We haven't used it in years, was just
sitting there getting updated with every upgrade so it may have been in
this state for years going unnoticed.

I then checked the source for the password handling which doesn't look
too trustworthy using some handrolled encryption function without error
checking and strcpy on top of it.
Additionally its homepage indicates that the last change was made on Wed
Dec 15 23:29:29 CET 2004.

Since this is software running on the network I'd suggest getting rid of
it instead of trying to fix it but that's ofc just IMO.

Alf

Reply via email to