HomeFreeBSD

tftpd: Abort on an WRQ access violation

Description

tftpd: Abort on an WRQ access violation

On a WRQ (write request) tftpd checks whether the client has access
permission for the file in question. If not, then the write is prevented.
However, tftpd doesn't reply with an ERROR packet, nor does it abort.
Instead, it tries to receive the packet anyway.

The symptom is slightly different depending on the nature of the error. If
the target file is nonexistent and tftpd lacks permission to create it, then
tftpd will willingly receive the file, but not write it anywhere. If the
file exists but is not writable, then tftpd will fail to ACK to WRQ.

PR: 225996
MFC after: 3 weeks

Details

Provenance
asomersAuthored on
Parents
rS330718: tftpd: Verify world-writability for WRQ when using relative paths
Branches
Unknown
Tags
Unknown