If you send an LPRT with an address family that is != 4 or 6, oftpd will die.
$ nc localhost 21 <<< "LPRT 1,16,63,254,47,0,0,32,0,0,0,0,0,0,32,254,143,205,2,141,176"
220 Service ready for new user.
521 Only IPv4 supported, address family (4)
$ nc localhost 21
localhost [127.0.0.1] 21 (ftp) : Connection refused
Created attachment 104795 [details, diff]
lprt assertion patch
simple patch that ssolves this problem for me.
eradicator: please provide an updated ebuild
-r3 added to portage with attached patch. Thanks.
Arches: please test and mark stable net-ftp/oftpd-0.3.7-r3
target KEYWORDS="amd64 arm ppc64 sh sparc x86"
nothing to do
stable on ppc64
I vote for a GLSA.
tavis votes yes
GLSA 200701-09, thanks everybody