TwoFTPd

This release fixes a bug which caused paths starting with "/." to not
be omitted when nodotfiles was set, a minor (but annoying) typo in
listing permissions of sticky files, and a bug which caused listing
"/foo/*" to not include the "/foo/" prefix in the resulting names.
Path permission failures (no dot files/lock home) now produce a
sensible system error,

Fixes for some obscure bugs, and improved handling of hangups.

A fix for a bug in the string sort implementation that caused listings to leak memory, a fix for PASV connection mode to only show the 150 response if the connection does not fail, a workaround for broken firewalls that rewrite certain commands (specifically PORT) with two CR characters before the final LF, strip trailing slashes from the home path, use of corked (Linux) or no-push (BSD) socket mode to improve transfer efficiency, and some other minor fixes to socket handling and response messages.

Listings of "." when CWD is "/" have been fixed. System error messages are now included with STAT and MDTM failures. An error message is printed when the session times out. The PASV response has been modified to work around more broken clients.

Use of the CVM 0.10 (protocol 1) API for authentication (this means you must use modules from CVM 0.10 or later with this version), many error messages include the system error message (like "File or path not found") that caused the error, a simple, limited LIST/NLST option parser to provide compatibility with broken clients that like to send commands like "NLST -alL", authentication and session timeout limits, and SITE commands are no longer output twice in the logs.