程业春

CVE-2022-20385

5

https://security-tracker.debian.org/tracker/CVE-2022-20385

The mode of obtaining the system time through the lftp process is modified to rectify the timeout mechanism of the lftp process. https://github.com/lavv17/lftp/issues/718

Lftp Timeout Mechanism

1

When you run the lftp command to connect to an unknown host, the connection times out and the connection is disconnected. However, after the lftp command is started, the local...

Repeated reload operations may cause memory leakage.

3

### What I Did Run the kill -hup {pid} command for the proftpd process repeatedly. As a result, the RSS of the process increases. Memory leakage may occur. After analysis,...

The file growth logic and retransmission judgment logic are optimized.

2

The file growth logic and retransmission judgment logic are optimized.

Memory keeps increasing under long connections

21

ftp long connection, after transferring files, session->xfer->p seems not to be destroyed, and transferring different files will generate different session->xfer->p, will this cause memory to keep growing? 

I have written a use case to test the scenario where file growth occurs during file transfer using lftp. The use case is as follows: Server: Execute the following commands...