Changelog for Legay FileZilla Server (581 changes):

• source/Permissions.cpp, source/Interface/GroupsDlg.cpp, source/Interface/GroupsDlg.h, source/Interface/GroupsDlgSharedFolders.cpp, source/Interface/UsersDlg.cpp, source/Interface/UsersDlg.h, source/Interface/UsersDlgSharedFolders.cpp, source/Interface/UsersDlgSharedFolders.h: Couple of sanity checks in order to avoid "Protocol Error, invalid data" errors if user enters / or \ as shared directory.

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: Version bump

• source/AsyncSslSocketLayer.cpp, source/includes/openssl/asn1.h, source/includes/openssl/asn1t.h, source/includes/openssl/bio.h, source/includes/openssl/bn.h, source/includes/openssl/conf.h, source/includes/openssl/dtls1.h, source/includes/openssl/ec.h, source/includes/openssl/ecdsa.h, source/includes/openssl/evp.h, source/includes/openssl/md2.h, source/includes/openssl/md4.h, source/includes/openssl/md5.h, source/includes/openssl/obj_mac.h, source/includes/openssl/ocsp.h, source/includes/openssl/opensslconf.h, source/includes/openssl/opensslv.h, source/includes/openssl/pem.h, source/includes/openssl/pq_compat.h, source/includes/openssl/ripemd.h, source/includes/openssl/rsa.h, source/includes/openssl/safestack.h, source/includes/openssl/sha.h, source/includes/openssl/ssl.h, source/includes/openssl/ssl3.h, source/includes/openssl/tls1.h, source/includes/openssl/x509.h, source/includes/openssl/x509_vfy.h, source/includes/openssl/x509v3.h: Updated to most recent OpenSSL version

• source/ControlSocket.cpp, source/TransferSocket.cpp: Fix potential memory leak

• source/ControlSocket.cpp: Add missing parameter, should make error messages more useful.

• source/Interface/FileZilla server.rc: Fix typo

• source/Interface/GenerateCertificateDlg.cpp: Fix certificate keysizes.

• source/ControlSocket.cpp: Spelling fix

• source/Interface/FileZilla server.rc: Fix typo

• source/ControlSocket.cpp: Fix bug [ 1686992 ] MFMT does not accept time with hours == 0

• readme.htm: missed some changes

• readme.htm, source/install/FileZilla Server.nsi: version bump

• source/Options.cpp, source/Permissions.cpp: Just in case.

• source/ControlSocket.cpp: Implement MFMT command

• source/ControlSocket.cpp, source/FileZilla server.rc, source/FileZilla server.vcproj, source/ListenSocket.cpp, source/OptionTypes.h, source/Options.cpp, source/Server.cpp, source/Server.h, source/ServerThread.cpp, source/ServerThread.h, source/autobanmanager.cpp, source/autobanmanager.h, source/Interface/FileZilla Server Interface.vcproj, source/Interface/FileZilla server.rc, source/Interface/OptionsAutobanPage.cpp, source/Interface/OptionsAutobanPage.h, source/Interface/OptionsDlg.cpp, source/Interface/resource.h: Add a basic autoban implemention to please the paranoid AND clueless users.

• source/ControlSocket.cpp: support TYPE L 8

• source/FileLogger.cpp: Use GetLocalTime for logfile rotation

• source/Accounts.cpp: use local time for speed limit rule check

• source/Interface/FileZilla server.rc: Applied patch [ 1646008 ] IDR_MAINFRAME accelerator remove.

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/ControlSocket.cpp: Suppor t broken clients sending CWD without the mandatory argument.

• source/ControlSocket.cpp, source/Permissions.cpp, source/Permissions.h, source/TransferSocket.cpp: Fix nullpointer dereference

• source/Options.cpp: typo

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/TransferSocket.cpp, source/TransferSocket.h: Don't prematurely close connection during handshake on empty downloads or directory listings

• source/ControlSocket.cpp, source/ControlSocket.h, source/ExternalIpCheck.cpp, source/ExternalIpCheck.h, source/ServerThread.cpp, source/ServerThread.h: Lower the amount of re-resolving.

• source/ExternalIpCheck.cpp, source/Options.cpp: Move default resolver address to http://ip.filezilla-project.org/ip.php

• source/Permissions.cpp: Fix MLSD command to send timestamps in UTC.

• source/Accounts.cpp: Fix protocol error if using non-us-ascii characters in user/group comments

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/Server.cpp, source/ServerThread.cpp, source/StdAfx.h, source/Interface/FileZilla server.rc, source/Interface/StdAfx.h, source/Interface/UsersListCtrl.cpp, source/Interface/UsersListCtrl.h, source/Interface/resource.h: add option to ban user to context menu

• source/AsyncSocketEx.cpp, source/AsyncSocketEx.h, source/AsyncSocketExLayer.cpp, source/AsyncSocketExLayer.h, source/ControlSocket.cpp: Improved connection handling, based on patch 1575422

• source/AsyncSslSocketLayer.cpp: Merge with latest version from client, fix a shutdown related bug.

• source/Interface/MainFrm.cpp, source/Interface/OptionsDlg.cpp, source/Options.cpp, source/Interface/OptionsIpFilterPage.cpp: Add support for strings larger than 65535 bytes (new limit: 16M), allow ip filters > 20000 chars.

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: bumped version

• source/TransferSocket.cpp: check for WSAESHUTDOWN in OnReceive if using SSL

• source/includes/openssl/aes.h, source/includes/openssl/asn1.h, source/includes/openssl/bio.h, source/includes/openssl/bn.h, source/includes/openssl/dh.h, source/includes/openssl/dsa.h, source/includes/openssl/dso.h, source/includes/openssl/e_os2.h, source/includes/openssl/ec.h, source/includes/openssl/engine.h, source/includes/openssl/evp.h, source/includes/openssl/idea.h, source/includes/openssl/obj_mac.h, source/includes/openssl/opensslconf.h, source/includes/openssl/opensslv.h, source/includes/openssl/rsa.h, source/includes/openssl/ssl.h, source/includes/openssl/tls1.h, source/includes/openssl/x509v3.h: updated

• source/AsyncSslSocketLayer.cpp, source/AsyncSslSocketLayer.h: Fixed some declarations

• source/ControlSocket.cpp: announce MLSD, better telnet control sequence stripping

• source/Interface/OptionsMiscPage.cpp: fixed shared write mode option

• source/Permissions.cpp: fix virtual aliases containing username replacement

• readme.htm: updated

• source/ControlSocket.cpp, source/ControlSocket.h, source/Permissions.cpp, source/Permissions.h: added OPTS UTF8 OFF command

• source/AsyncSslSocketLayer.cpp: Do a full bidirectional shutdown if requested by peer. Fixes transfer timeouts with some clients.

• readme.htm, source/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/Interface/MainFrm.cpp: fix potential crash

• source/Interface/FileZilla server.rc, source/Interface/misc/SAPrefsDialog.cpp: fix focus problems if navigating options using keyboard

• source/ControlSocket.cpp, source/Permissions.cpp, source/Permissions.h: MLSD listings did not contain virtual aliases

• source/Interface/FileZilla server.rc: fix connection dialog text since localhost may require password as well

• source/Server.cpp: fix listen socket creation

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Interface/FileZilla server.rc: version bump

• source/install/FileZilla Server.nsi, source/install/StartupOptions9x.ini [DEAD]: get rid of win9x specific code

• source/Interface/UsersListCtrl.cpp: fix buffer overflow

• source/Server.cpp: fix memory leak

• source/ControlSocket.cpp: minor performance improvement

• source/TransferSocket.cpp: should fix transfer performance and failure due to timing issues on dualcore systems

• source/Interface/UsersListCtrl.cpp: fix stack corruption

• source/Server.cpp, source/Interface/UsersListCtrl.cpp: proper null termination of parsed strings

• source/Options.cpp: fix buffer overflow

• source/ControlSocket.cpp: fix explicit SSL/TLS

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/Accounts.cpp, source/Accounts.h, source/AdminInterface.cpp, source/AdminListenSocket.cpp, source/AdminSocket.cpp, source/ControlSocket.cpp, source/ControlSocket.h, source/ExternalIpCheck.cpp, source/FileLogger.cpp, source/FileZilla server.vcproj, source/ListenSocket.cpp, source/MFC64bitFix.cpp, source/MFC64bitFix.h, source/Options.cpp, source/Permissions.cpp, source/Permissions.h, source/Server.cpp, source/ServerThread.cpp, source/Service.cpp, source/StdAfx.h, source/TransferSocket.cpp, source/TransferSocket.h, source/config.h, source/conversion.cpp, source/conversion.h, source/iputils.cpp, source/iputils.h, source/version.h, source/Interface/AdminSocket.cpp, source/Interface/FileZilla Server Interface.vcproj, source/Interface/FileZilla server.cpp, source/Interface/GroupsDlg.cpp, source/Interface/MainFrm.cpp, source/Interface/MainFrm.h, source/Interface/Options.cpp, source/Interface/OptionsDlg.cpp, source/Interface/StatusCtrl.cpp, source/Interface/StatusCtrl.h, source/Interface/StatusView.cpp, source/Interface/StatusView.h, source/Interface/StdAfx.h, source/Interface/UsersDlg.cpp, source/Interface/UsersDlgGeneral.cpp, source/Interface/UsersListCtrl.cpp: Entire service now unicode based.

• source/Interface/FileZilla Server Interface.vcproj, source/Interface/version.cpp [DEAD], source/Interface/version.h [DEAD], source/version.cpp, source/version.h: removed redundant files, made version.cpp ready for unicodification.

• source/Accounts.cpp, source/ControlSocket.cpp, source/ControlSocket.h, source/FileZilla server.vcproj, source/StdAfx.h, source/conversion.cpp, source/conversion.h: moved conversion functions to conversion.h/cpp

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/Accounts.cpp, source/Accounts.h, source/ControlSocket.cpp, source/ControlSocket.h, source/FileZilla server.sln, source/FileZilla server.vcproj, source/MFC64bitFix.cpp, source/MFC64bitFix.h, source/Permissions.cpp, source/Permissions.h, source/TransferSocket.cpp, source/TransferSocket.h: Server now uses UTF8 as default encoding for filenames.

• source/Interface/MainFrm.cpp: Welcome message updated

• source/Permissions.cpp: Allow UNC paths as alias target to be read from file

• source/AsyncSslSocketLayer.cpp: fix file truncation problem

• source/ControlSocket.cpp: - compatibility fix for NAT-in-NAT environments - QUIT command not working after PASV

• source/ControlSocket.cpp: added support for STRU command

• source/ControlSocket.cpp: Use 550 errorcode instead of 450 if file can't be opened.

• source/AsyncSocketEx.cpp: fix crash in FreeAsyncSocketExInstance

• source/ControlSocket.cpp, source/Permissions.cpp, source/Permissions.h: require List permission instead of Read for SIZE and MDTM commands

• source/Interface/GroupsDlgSpeedLimit.cpp, source/Interface/UsersDlgSpeedLimit.cpp: maximum speedlimit is 65535

• source/AsyncSslSocketLayer.cpp, source/AsyncSslSocketLayer.h: OpenSSL is poorly documented and badly designed. The semantics of BIO_write and BIO_should_retry are strange. This patch fixes a problem in the way they were called. Unfortunatly this literally kills performance. *SHOULD* fix the mysterious SSL related crashes.

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/ControlSocket.cpp: fix GetPassiveIP()

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/AsyncSocketEx.cpp, source/AsyncSocketExLayer.cpp, source/AsyncSslSocketLayer.cpp: merged with changes from client

• source/ControlSocket.cpp, source/OptionTypes.h, source/Options.cpp, source/iputils.cpp, source/iputils.h, source/Interface/FileZilla server.rc, source/Interface/OptionsMiscPage.cpp, source/Interface/OptionsMiscPage.h, source/Interface/resource.h: Add option to ignore unroutable IP addresses given on PORT command if remote IP is routeable.

• source/Permissions.cpp, source/Permissions.h: fix problems with alias case (in)sensitivity

• source/ControlSocket.cpp, source/ControlSocket.h, source/OptionTypes.h, source/Options.cpp, source/Interface/OptionsPasvPage.cpp, source/Interface/OptionsPasvPage.h: add option to not use the external ip address for local connections

• source/Interface/OptionsAdminInterfacePage.cpp: don't reset admin password if not changing it

• source/Permissions.cpp: fix virtual aliases originating in root dir

• source/Permissions.cpp: fix aliases if uppercase character in target name

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Options.cpp, source/install/FileZilla Server.nsi: version bump

• source/AdminListenSocket.cpp, source/AdminSocket.cpp, source/Options.cpp, source/Interface/FileZilla server.rc, source/Interface/OptionsAdminInterfacePage.cpp: always require password even for local connctions of set, improved admin ip filter

• source/ControlSocket.cpp: workaround for P@SW bug of some SMC routers

• source/ControlSocket.cpp, source/Permissions.cpp, source/Permissions.h: - Cleaned up directory listing creation code, removed code duplication - Allow aliases with target path given as virtual path.

• source/OptionTypes.h, source/TransferSocket.cpp, source/Interface/FileZilla server.rc, source/Interface/OptionsMiscPage.cpp, source/Interface/OptionsMiscPage.h, source/Interface/resource.h: add option to allow reading files that are open for writing by other programs

• source/AdminListenSocket.cpp: let single '*' match all addresses

• source/ControlSocket.cpp: don't allow AUTH SSL/TLS command if already using SSL/TLS, broadcast SSL/TLS availability in FEAT response.

• source/ControlSocket.cpp: add support for SITE NAMEFMT command with "1" as only supported naming format. Required by at least one client on an AS/400 server.

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: bumped version

• source/Interface/MainFrm.cpp, source/Interface/OptionsDlg.cpp, source/Interface/OptionsDlg.h, source/Interface/OptionsSslPage.cpp: compile fix

• source/includes/openssl/aes.h, source/includes/openssl/asn1.h, source/includes/openssl/asn1_mac.h, source/includes/openssl/asn1t.h, source/includes/openssl/bio.h, source/includes/openssl/bn.h, source/includes/openssl/buffer.h, source/includes/openssl/cast.h, source/includes/openssl/comp.h, source/includes/openssl/conf.h, source/includes/openssl/crypto.h, source/includes/openssl/des.h, source/includes/openssl/des_old.h, source/includes/openssl/dh.h, source/includes/openssl/dsa.h, source/includes/openssl/dso.h, source/includes/openssl/dtls1.h, source/includes/openssl/e_os2.h, source/includes/openssl/ec.h, source/includes/openssl/ecdh.h, source/includes/openssl/ecdsa.h, source/includes/openssl/engine.h, source/includes/openssl/err.h, source/includes/openssl/evp.h, source/includes/openssl/fips.h [DEAD], source/includes/openssl/fips_rand.h [DEAD], source/includes/openssl/hmac.h, source/includes/openssl/idea.h, source/includes/openssl/krb5_asn.h, source/includes/openssl/kssl.h, source/includes/openssl/lhash.h, source/includes/openssl/md2.h, source/includes/openssl/md4.h, source/includes/openssl/md5.h, source/includes/openssl/mdc2.h [DEAD], source/includes/openssl/obj_mac.h, source/includes/openssl/objects.h, source/includes/openssl/ocsp.h, source/includes/openssl/opensslconf.h, source/includes/openssl/opensslv.h, source/includes/openssl/ossl_typ.h, source/includes/openssl/pem.h, source/includes/openssl/pkcs12.h, source/includes/openssl/pkcs7.h, source/includes/openssl/pq_compat.h, source/includes/openssl/pqueue.h, source/includes/openssl/rand.h, source/includes/openssl/rc2.h, source/includes/openssl/rc4.h, source/includes/openssl/rc5.h [DEAD], source/includes/openssl/ripemd.h, source/includes/openssl/rsa.h, source/includes/openssl/safestack.h, source/includes/openssl/sha.h, source/includes/openssl/ssl.h, source/includes/openssl/ssl3.h, source/includes/openssl/stack.h, source/includes/openssl/symhacks.h, source/includes/openssl/tls1.h, source/includes/openssl/tmdiff.h, source/includes/openssl/txt_db.h, source/includes/openssl/ui.h, source/includes/openssl/x509.h, source/includes/openssl/x509_vfy.h, source/includes/openssl/x509v3.h: updated headers

• source/Interface/OptionsSslPage.cpp: don't try to validate certificate on remote connections

• source/Permissions.cpp: CanonifyServerDir was too aggressive. Filenames like '......foo...bar' are totally valid.

• source/AsyncSslSocketLayer.cpp, source/AsyncSslSocketLayer.h, source/ControlSocket.cpp, source/OptionTypes.h, source/Interface/FileZilla server.rc, source/Interface/OptionsSslPage.cpp, source/Interface/OptionsSslPage.h, source/Interface/resource.h: Interface and server did freeze if using a password protected ssl keyfile. These are now supported.