8d8ae9cbc8
[core] improve array API to prevent theoretical memory leaks
Stefan Bühler2016-03-15 18:26:57 +00:00
c5a42e932f
[mod_fastcgi,mod_scgi] fix leaking file-descriptor when backend spawning failed (reported by Fortify Open Review Project)
Stefan Bühler2016-03-14 18:07:01 +00:00
2a8f73e7d4
[mod_secdownload] fix buffer overflow in secdl_verify_mac (reported by Fortify Open Review Project)
Stefan Bühler2016-03-13 14:53:20 +00:00
a6477d8481
[mod_rewrite] fix return type of process_rewrite_rules
Stefan Bühler2016-03-13 14:53:18 +00:00
f3606dc539
[mod_dirlisting] dir-listing.hide-dotfiles = "enabled" by default (fixes #1081)
Stefan Bühler2016-03-04 19:46:29 +00:00
f56fe331e5
[mod_proxy] use case-insensitive comparision to filter headers, send Connection: Close to backend (fixes #421)
Stefan Bühler2016-03-04 19:23:16 +00:00
dde7bea99a
[mod_cgi] kill CGI if fail to write request body
Glenn Strauss2016-03-04 18:54:30 +00:00
2bcb73cdb8
mod-auth.t: no crypt md5 for darwin
Kyle J. McKay
2015-12-04 20:11:33 +00:00
b9c14b24dd
[autobuild] fix missing header in tar ball
Stefan Bühler2015-11-22 22:37:19 +00:00
bfaa48260a
[mod_secdownload] add required algorithm option; old behaviour available as "md5", new options "hmac-sha1" and "hmac-sha256"
Stefan Bühler2015-11-22 22:22:22 +00:00
b0a4421272
[core] refactor base64 functions into separate file
Stefan Bühler2015-11-22 22:22:20 +00:00
85d8a17575
[core] encode path with ENCODING_REL_URI in redirect to directory (fixes #2661, thx gstrauss)
Stefan Bühler2015-11-07 15:00:18 +00:00
3943de280e
[core] add '~' to safe characters in ENCODING_REL_URI/ENCODING_REL_URI_PART encoding
Stefan Bühler2015-11-07 15:00:15 +00:00
a069548370
[core] revert increase of temp file size back to 1MB, provide a configure option "server.upload-temp-file-size" instead (fixes #2680)
Stefan Bühler2015-11-07 12:51:14 +00:00
c512345fa2
[config] check config option scope; warn if server option is given in conditional
Stefan Bühler2015-11-07 12:51:11 +00:00
39add4476f
[mod_secdownload] use a hopefully constant time comparison to check hash (fixes #2679)
Stefan Bühler2015-10-27 20:50:53 +00:00
5c5f67a5c7
add force_assert for many allocations and function results
Gaurav
2015-10-16 19:44:06 +00:00
f19128086c
[core] don't buffer request bodies smaller than 64k on disk
Stefan Bühler2015-10-13 19:46:04 +00:00
d7be04beb5
[mod_auth] implement and use safe_memclear, using memset_s or explicit_bzero if available
Loganaden Velvindron
2015-09-26 10:11:24 +00:00
37bdb250a4
[core] check configparserAlloc() result with force_assert
Gaurav
2015-09-26 10:11:22 +00:00
a93be99441
[core] fix search for header end if split across chunks (fixes #2670)
Stefan Bühler2015-09-24 06:03:40 +00:00
3512b5cb77
[core] allocate at least 4k buffer for incoming data
Stefan Bühler2015-09-24 06:03:38 +00:00
69f890e2c5
[stat-cache] fix handling of collisions, might have returned wrong data (fixes #2669)
Stefan Bühler2015-09-16 00:18:11 +00:00
dd4fe73c47
fix some warnings found by coverity ("leak" in setup phase, not catching too long unix socket paths in mod_proxy)
Stefan Bühler2015-08-30 10:16:28 +00:00
16e1a78ad5
[cmake] don't put date into config.h (not used anyway), only unset local vars for disabled features instead of clearing cache
Stefan Bühler2015-08-22 17:39:04 +00:00