Changelog for Legay FileZilla Server (581 changes):

• source/Server.cpp: fix listen socket creation

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Interface/FileZilla server.rc: version bump

• source/install/FileZilla Server.nsi, source/install/StartupOptions9x.ini [DEAD]: get rid of win9x specific code

• source/Interface/UsersListCtrl.cpp: fix buffer overflow

• source/Server.cpp: fix memory leak

• source/ControlSocket.cpp: minor performance improvement

• source/TransferSocket.cpp: should fix transfer performance and failure due to timing issues on dualcore systems

• source/Interface/UsersListCtrl.cpp: fix stack corruption

• source/Server.cpp, source/Interface/UsersListCtrl.cpp: proper null termination of parsed strings

• source/Options.cpp: fix buffer overflow

• source/ControlSocket.cpp: fix explicit SSL/TLS

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/Accounts.cpp, source/Accounts.h, source/AdminInterface.cpp, source/AdminListenSocket.cpp, source/AdminSocket.cpp, source/ControlSocket.cpp, source/ControlSocket.h, source/ExternalIpCheck.cpp, source/FileLogger.cpp, source/FileZilla server.vcproj, source/ListenSocket.cpp, source/MFC64bitFix.cpp, source/MFC64bitFix.h, source/Options.cpp, source/Permissions.cpp, source/Permissions.h, source/Server.cpp, source/ServerThread.cpp, source/Service.cpp, source/StdAfx.h, source/TransferSocket.cpp, source/TransferSocket.h, source/config.h, source/conversion.cpp, source/conversion.h, source/iputils.cpp, source/iputils.h, source/version.h, source/Interface/AdminSocket.cpp, source/Interface/FileZilla Server Interface.vcproj, source/Interface/FileZilla server.cpp, source/Interface/GroupsDlg.cpp, source/Interface/MainFrm.cpp, source/Interface/MainFrm.h, source/Interface/Options.cpp, source/Interface/OptionsDlg.cpp, source/Interface/StatusCtrl.cpp, source/Interface/StatusCtrl.h, source/Interface/StatusView.cpp, source/Interface/StatusView.h, source/Interface/StdAfx.h, source/Interface/UsersDlg.cpp, source/Interface/UsersDlgGeneral.cpp, source/Interface/UsersListCtrl.cpp: Entire service now unicode based.

• source/Interface/FileZilla Server Interface.vcproj, source/Interface/version.cpp [DEAD], source/Interface/version.h [DEAD], source/version.cpp, source/version.h: removed redundant files, made version.cpp ready for unicodification.

• source/Accounts.cpp, source/ControlSocket.cpp, source/ControlSocket.h, source/FileZilla server.vcproj, source/StdAfx.h, source/conversion.cpp, source/conversion.h: moved conversion functions to conversion.h/cpp

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/Accounts.cpp, source/Accounts.h, source/ControlSocket.cpp, source/ControlSocket.h, source/FileZilla server.sln, source/FileZilla server.vcproj, source/MFC64bitFix.cpp, source/MFC64bitFix.h, source/Permissions.cpp, source/Permissions.h, source/TransferSocket.cpp, source/TransferSocket.h: Server now uses UTF8 as default encoding for filenames.

• source/Interface/MainFrm.cpp: Welcome message updated

• source/Permissions.cpp: Allow UNC paths as alias target to be read from file

• source/AsyncSslSocketLayer.cpp: fix file truncation problem

• source/ControlSocket.cpp: - compatibility fix for NAT-in-NAT environments - QUIT command not working after PASV

• source/ControlSocket.cpp: added support for STRU command

• source/ControlSocket.cpp: Use 550 errorcode instead of 450 if file can't be opened.

• source/AsyncSocketEx.cpp: fix crash in FreeAsyncSocketExInstance

• source/ControlSocket.cpp, source/Permissions.cpp, source/Permissions.h: require List permission instead of Read for SIZE and MDTM commands

• source/Interface/GroupsDlgSpeedLimit.cpp, source/Interface/UsersDlgSpeedLimit.cpp: maximum speedlimit is 65535

• source/AsyncSslSocketLayer.cpp, source/AsyncSslSocketLayer.h: OpenSSL is poorly documented and badly designed. The semantics of BIO_write and BIO_should_retry are strange. This patch fixes a problem in the way they were called. Unfortunatly this literally kills performance. *SHOULD* fix the mysterious SSL related crashes.

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/ControlSocket.cpp: fix GetPassiveIP()

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: version bump

• source/AsyncSocketEx.cpp, source/AsyncSocketExLayer.cpp, source/AsyncSslSocketLayer.cpp: merged with changes from client

• source/ControlSocket.cpp, source/OptionTypes.h, source/Options.cpp, source/iputils.cpp, source/iputils.h, source/Interface/FileZilla server.rc, source/Interface/OptionsMiscPage.cpp, source/Interface/OptionsMiscPage.h, source/Interface/resource.h: Add option to ignore unroutable IP addresses given on PORT command if remote IP is routeable.

• source/Permissions.cpp, source/Permissions.h: fix problems with alias case (in)sensitivity

• source/ControlSocket.cpp, source/ControlSocket.h, source/OptionTypes.h, source/Options.cpp, source/Interface/OptionsPasvPage.cpp, source/Interface/OptionsPasvPage.h: add option to not use the external ip address for local connections

• source/Interface/OptionsAdminInterfacePage.cpp: don't reset admin password if not changing it

• source/Permissions.cpp: fix virtual aliases originating in root dir

• source/Permissions.cpp: fix aliases if uppercase character in target name

• readme.htm, source/FileZilla server.rc, source/OptionTypes.h, source/Options.cpp, source/install/FileZilla Server.nsi: version bump

• source/AdminListenSocket.cpp, source/AdminSocket.cpp, source/Options.cpp, source/Interface/FileZilla server.rc, source/Interface/OptionsAdminInterfacePage.cpp: always require password even for local connctions of set, improved admin ip filter

• source/ControlSocket.cpp: workaround for P@SW bug of some SMC routers

• source/ControlSocket.cpp, source/Permissions.cpp, source/Permissions.h: - Cleaned up directory listing creation code, removed code duplication - Allow aliases with target path given as virtual path.

• source/OptionTypes.h, source/TransferSocket.cpp, source/Interface/FileZilla server.rc, source/Interface/OptionsMiscPage.cpp, source/Interface/OptionsMiscPage.h, source/Interface/resource.h: add option to allow reading files that are open for writing by other programs

• source/AdminListenSocket.cpp: let single '*' match all addresses

• source/ControlSocket.cpp: don't allow AUTH SSL/TLS command if already using SSL/TLS, broadcast SSL/TLS availability in FEAT response.

• source/ControlSocket.cpp: add support for SITE NAMEFMT command with "1" as only supported naming format. Required by at least one client on an AS/400 server.

• readme.htm, source/FileZilla server.rc, source/Interface/FileZilla server.rc, source/install/FileZilla Server.nsi: bumped version

• source/Interface/MainFrm.cpp, source/Interface/OptionsDlg.cpp, source/Interface/OptionsDlg.h, source/Interface/OptionsSslPage.cpp: compile fix

• source/includes/openssl/aes.h, source/includes/openssl/asn1.h, source/includes/openssl/asn1_mac.h, source/includes/openssl/asn1t.h, source/includes/openssl/bio.h, source/includes/openssl/bn.h, source/includes/openssl/buffer.h, source/includes/openssl/cast.h, source/includes/openssl/comp.h, source/includes/openssl/conf.h, source/includes/openssl/crypto.h, source/includes/openssl/des.h, source/includes/openssl/des_old.h, source/includes/openssl/dh.h, source/includes/openssl/dsa.h, source/includes/openssl/dso.h, source/includes/openssl/dtls1.h, source/includes/openssl/e_os2.h, source/includes/openssl/ec.h, source/includes/openssl/ecdh.h, source/includes/openssl/ecdsa.h, source/includes/openssl/engine.h, source/includes/openssl/err.h, source/includes/openssl/evp.h, source/includes/openssl/fips.h [DEAD], source/includes/openssl/fips_rand.h [DEAD], source/includes/openssl/hmac.h, source/includes/openssl/idea.h, source/includes/openssl/krb5_asn.h, source/includes/openssl/kssl.h, source/includes/openssl/lhash.h, source/includes/openssl/md2.h, source/includes/openssl/md4.h, source/includes/openssl/md5.h, source/includes/openssl/mdc2.h [DEAD], source/includes/openssl/obj_mac.h, source/includes/openssl/objects.h, source/includes/openssl/ocsp.h, source/includes/openssl/opensslconf.h, source/includes/openssl/opensslv.h, source/includes/openssl/ossl_typ.h, source/includes/openssl/pem.h, source/includes/openssl/pkcs12.h, source/includes/openssl/pkcs7.h, source/includes/openssl/pq_compat.h, source/includes/openssl/pqueue.h, source/includes/openssl/rand.h, source/includes/openssl/rc2.h, source/includes/openssl/rc4.h, source/includes/openssl/rc5.h [DEAD], source/includes/openssl/ripemd.h, source/includes/openssl/rsa.h, source/includes/openssl/safestack.h, source/includes/openssl/sha.h, source/includes/openssl/ssl.h, source/includes/openssl/ssl3.h, source/includes/openssl/stack.h, source/includes/openssl/symhacks.h, source/includes/openssl/tls1.h, source/includes/openssl/tmdiff.h, source/includes/openssl/txt_db.h, source/includes/openssl/ui.h, source/includes/openssl/x509.h, source/includes/openssl/x509_vfy.h, source/includes/openssl/x509v3.h: updated headers

• source/Interface/OptionsSslPage.cpp: don't try to validate certificate on remote connections

• source/Permissions.cpp: CanonifyServerDir was too aggressive. Filenames like '......foo...bar' are totally valid.