This website requires JavaScript.
bfaa48260a
[mod_secdownload] add required algorithm option; old behaviour available as "md5", new options "hmac-sha1" and "hmac-sha256"
stbuehler
2015-11-22 22:22:22 +00:00
b0a4421272
[core] refactor base64 functions into separate file
stbuehler
2015-11-22 22:22:20 +00:00
85d8a17575
[core] encode path with ENCODING_REL_URI in redirect to directory (fixes #2661 , thx gstrauss)
stbuehler
2015-11-07 15:00:18 +00:00
3943de280e
[core] add '~' to safe characters in ENCODING_REL_URI/ENCODING_REL_URI_PART encoding
stbuehler
2015-11-07 15:00:15 +00:00
a069548370
[core] revert increase of temp file size back to 1MB, provide a configure option "server.upload-temp-file-size" instead (fixes #2680 )
stbuehler
2015-11-07 12:51:14 +00:00
c512345fa2
[config] check config option scope; warn if server option is given in conditional
stbuehler
2015-11-07 12:51:11 +00:00
39add4476f
[mod_secdownload] use a hopefully constant time comparison to check hash (fixes #2679 )
stbuehler
2015-10-27 20:50:53 +00:00
5c5f67a5c7
add force_assert for many allocations and function results
Gaurav and stbuehler
2015-10-16 19:44:06 +00:00
f19128086c
[core] don't buffer request bodies smaller than 64k on disk
stbuehler
2015-10-13 19:46:04 +00:00
d7be04beb5
[mod_auth] implement and use safe_memclear, using memset_s or explicit_bzero if available
Loganaden Velvindron and stbuehler
2015-09-26 10:11:24 +00:00
37bdb250a4
[core] check configparserAlloc() result with force_assert
Gaurav and stbuehler
2015-09-26 10:11:22 +00:00
a93be99441
[core] fix search for header end if split across chunks (fixes #2670 )
stbuehler
2015-09-24 06:03:40 +00:00
3512b5cb77
[core] allocate at least 4k buffer for incoming data
stbuehler
2015-09-24 06:03:38 +00:00
69f890e2c5
[stat-cache] fix handling of collisions, might have returned wrong data (fixes #2669 )
stbuehler
2015-09-16 00:18:11 +00:00
90a9322121
fix packdist.sh output links
stbuehler
2015-09-15 11:52:38 +00:00
d8b5492f5a
-next is 1.4.38
stbuehler
2015-09-15 11:52:35 +00:00
5307fd5d33
packdist.sh: use fakeroot for make dist to have root owned files in tar
lighttpd-1.4.37
stbuehler
2015-08-30 11:42:36 +00:00
dd4fe73c47
fix some warnings found by coverity ("leak" in setup phase, not catching too long unix socket paths in mod_proxy)
stbuehler
2015-08-30 10:16:28 +00:00
b9c160ec88
[scons] fix build
stbuehler
2015-08-29 12:37:16 +00:00
52d72fe8fc
[scons] fix crypt() detection, other improvements
stbuehler
2015-08-29 12:23:45 +00:00
0b02cd2690
[mmap] handle SIGBUS in network; those get triggered if the file gets smaller during reading
stbuehler
2015-08-29 12:23:42 +00:00
68284bd7f1
[scons] various improvements
stbuehler
2015-08-29 09:28:04 +00:00
b66fa2cb68
[plugins] when modules are linked statically still only load the modules given in the config
stbuehler
2015-08-29 09:28:01 +00:00
912533cd68
[mmap] fix mmap alignment
stbuehler
2015-08-23 12:59:07 +00:00
6d6dbadb14
[mod_cgi] rewrite mmap and generic (post body) send error handling
stbuehler
2015-08-23 11:53:48 +00:00
2b9be8f072
[build] put --as-needed into linker flags instead of cflags
stbuehler
2015-08-23 08:07:47 +00:00
d572be6a6d
small README for FreeBSD build setup
stbuehler
2015-08-23 07:41:11 +00:00
27ab3f76db
[mod_dirlisting] remove sys/syslimits.h; base.h already includes limits.h
stbuehler
2015-08-23 07:41:09 +00:00
9257d7df4f
[bsd xattr] fix compile break with BSD extended attributes in stat_cache
stbuehler
2015-08-22 23:27:17 +00:00
d7cd5b087a
[autoconf] define HAVE_CRYPT when crypt() is present
stbuehler
2015-08-22 21:39:24 +00:00
9290e923d9
[tests] fix warning about newline in filename
stbuehler
2015-08-22 21:39:22 +00:00
e57a70174b
[kqueue] fix kevent call
stbuehler
2015-08-22 21:39:19 +00:00
87c5ec9651
[tests] search for perl in PATH instead of /usr/bin; whitespace + test config cleanups
stbuehler
2015-08-22 20:51:08 +00:00
5c48617737
[cmake] fix FreeBSD linker bug
stbuehler
2015-08-22 17:52:17 +00:00
16e1a78ad5
[cmake] don't put date into config.h (not used anyway), only unset local vars for disabled features instead of clearing cache
stbuehler
2015-08-22 17:39:04 +00:00
26226271de
maintain cq->bytes_in in chunk API; keep bytes_out/bytes_in synced
stbuehler
2015-08-22 17:04:02 +00:00
0508bf674e
fix some unchecked return value warnings
stbuehler
2015-08-22 16:01:08 +00:00
10f1490fb1
[cmake] cleanup cache variables if features get deactivated
stbuehler
2015-08-22 16:01:05 +00:00
403afcd251
[cmake] lowercase commands, whitespace cleanup, remove clutter in else(...), endif(...), endforeach(...)
stbuehler
2015-08-22 16:01:02 +00:00
593599f14a
rewrite network (write) backends
stbuehler
2015-08-22 16:00:59 +00:00
fa8b154628
fix undefined integer shift
stbuehler
2015-08-22 16:00:56 +00:00
5c5616e3e5
increase upload temporary chunk file size from 1MB to 16MB
stbuehler
2015-08-13 18:44:30 +00:00
1371c87c34
fix out-of-filedescriptors when uploading "large" files (fixes #2660 , thx rmilecki)
stbuehler
2015-08-13 18:44:27 +00:00
47cddfd4f3
[mod_dirlisting] fix dir-listing.set-footer not showing
stbuehler
2015-08-09 13:03:52 +00:00
a80f75e004
[mod_proxy] remove debug log line from error log (fixes #2659 )
stbuehler
2015-08-03 19:43:06 +00:00
752e501231
- next is 1.4.37
stbuehler
2015-07-26 13:02:44 +00:00
66d4e93b59
[dist] add dist-xz, remove dist-bzip2, allow ~rc appendix in packdist.sh
lighttpd-1.4.36
stbuehler
2015-07-19 11:20:16 +00:00
def17b2925
[configfile] fix reading uninitialized variable (found by Willian B.)
stbuehler
2015-07-19 10:03:12 +00:00
4a87f75fcf
[mod_proxy] add unix domain socket support (fixes #2653 )
lighttpd-1.4.36--rc1
Pascal Bach and stbuehler
2015-07-11 11:20:18 +00:00
8db141a1b3
mime.conf: add some new mime types, remove .dat, .sha1, .md5, update .vcf
stbuehler
2015-07-07 17:12:48 +00:00
cfaa78ebc5
check fcgi_env_add return value (found by coverity)
stbuehler
2015-07-05 22:00:20 +00:00
2bd89370fc
fix segfault when temp file for upload couldn't be created (found by coverity)
stbuehler
2015-07-05 22:00:17 +00:00
c5737093db
[mod_magnet] fix segfault when accessing not existing lighty.req_env[] entry (found by coverity)
stbuehler
2015-07-05 22:00:14 +00:00
2edec63597
#ifdef all parts belonging to the connection-state debugging
stbuehler
2015-07-05 22:00:11 +00:00
c31bf21f97
fix memory leak in mod_status when no counters are set (found by coverity)
stbuehler
2015-07-05 21:34:07 +00:00
cfc88cf8f2
check pointer before usage in new etag compare
stbuehler
2015-07-05 20:19:17 +00:00
9f05b61ab4
parse If-None-Match for ETag validation (fixes #2578 )
stbuehler
2015-07-05 16:59:01 +00:00
71b5c53a0a
show extforward re-run warning only with debug.log-request-handling (fixes #2561 )
stbuehler
2015-07-05 16:48:27 +00:00
572681c9f1
fix hex escape in accesslog (fixes #2559 )
stbuehler
2015-07-05 16:01:16 +00:00
780e8e6ef4
minor spelling fixes
stbuehler
2015-06-21 12:47:16 +00:00
e6925949ab
add some until now missing files to dist tarball
stbuehler
2015-06-21 12:47:14 +00:00
427120b41a
escape all strings for logging (fixes #2646 log file injection, reported by Jaanus Kääp)
stbuehler
2015-05-28 15:47:14 +00:00
33cebeb0f7
fix segfaults in many plugins if they failed configuration
stbuehler
2015-05-14 09:38:33 +00:00
df87b3ef98
fix error message for T_CONFIG_ARRAY config values if an entry value is not a string
stbuehler
2015-05-14 09:38:30 +00:00
c92496720d
[mod_auth] use crypt_r instead of crypt if available
stbuehler
2015-02-12 06:39:39 +00:00
673923daf8
[tests] fix undefined index warning in sendfile.php
stbuehler
2015-02-08 19:10:58 +00:00
deceae78c9
[crc32] fix method signature (const pointer)
stbuehler
2015-02-08 19:10:56 +00:00
68add2602b
remove unused stuff from server.h
stbuehler
2015-02-08 19:10:53 +00:00
bfce99aacc
[bitset] unused -> remove
stbuehler
2015-02-08 19:10:51 +00:00
66ad587f2f
[buffer] constify some parameters
stbuehler
2015-02-08 19:10:49 +00:00
91a9a6b391
rename buffer_append_long_hex to buffer_append_uint_hex
stbuehler
2015-02-08 19:10:46 +00:00
ad3e93ea96
Use buffer API to read and modify "used" member
stbuehler
2015-02-08 19:10:44 +00:00
adfa06de99
[tests] improve valgrind and strace TRACEME, disable condition logging in normal configs
stbuehler
2015-02-08 19:10:41 +00:00
4365bdbebe
Remove buffer_prepare_copy() and buffer_prepare_append()
stbuehler
2015-02-08 19:10:39 +00:00
1be163b44a
Remove chunkqueue_get_{append,prepend}* API
stbuehler
2015-02-08 19:10:36 +00:00
6afad87d2e
fix buffer, chunk and http_chunk API
stbuehler
2015-02-08 12:37:10 +00:00
3521be8b85
print backtrace in assert logging with libunwind
stbuehler
2015-02-07 13:32:56 +00:00
d00e1e79b9
[connections] fix bug in connection state handling
stbuehler
2015-02-07 13:32:54 +00:00
b0a632f253
[network] fix compile break in calculation of sockaddr_un size if SUN_LEN is not defined (fixes #2609 )
stbuehler
2015-02-07 11:33:30 +00:00
76870cfef1
add NEWS entry for previous commit
stbuehler
2015-02-07 11:33:28 +00:00
e1aab1c420
Fixed typo found by openSUSE user (boo# 907709)
Marcus Rückert
2015-02-05 15:29:01 +00:00
084df7e99a
[ssl] disable SSL3.0 by default
stbuehler
2014-10-16 17:52:14 +00:00
4a6838103d
[mod_dirlisting,mod_redirect,mod_rewrite] abort config parsing if pcre-compile fails or isn't available
stbuehler
2014-10-16 17:52:12 +00:00
c4f214584a
[build] use fortify flags with "extra-warnings"
stbuehler
2014-10-16 17:52:10 +00:00
4d55d4ada3
add support for (Free)BSD extended attributes
Moritz Wilhelmy and stbuehler
2014-05-22 08:30:13 +00:00
059a5a67dd
fix typo in NEWS entry for #2579
stbuehler
2014-05-13 13:04:35 +00:00
3b23130ea2
add more mime types and a script to generate mime.conf (fxies #2579 )
stbuehler
2014-05-13 10:34:46 +00:00
f8f3351506
fix bad shift in conditional netmask ".../0" handling
stbuehler
2014-04-14 16:12:11 +00:00
3605a3bec3
use keep-alive timeout while waiting for HTTP headers; use always the read timeout while waiting for the HTTP body
stbuehler
2014-04-02 10:04:11 +00:00
e1b1c52028
- next is 1.4.36
stbuehler
2014-04-02 10:04:09 +00:00
d1a2356916
fix SQL injection / host name validation (thx Jann Horn)
lighttpd-1.4.35
stbuehler
2014-03-12 12:03:55 +00:00
efc41b2bb1
check length of unix domain socket filenames
stbuehler
2014-02-16 13:08:43 +00:00
7bd0f54ab2
add some asserts to help static analyzers
stbuehler
2014-02-16 13:08:41 +00:00
326f2fb8a4
[mod_accesslog] don't close fd -1
stbuehler
2014-02-16 13:08:38 +00:00
8e31e18b8e
[mod_webdav] fix logic error in handling file creation error
stbuehler
2014-02-16 13:08:36 +00:00
57c661c191
fix unchecked return values from stream_open/stat_cache_get_entry
stbuehler
2014-02-16 13:08:34 +00:00
b106513e58
[network] check return value of lseek()
stbuehler
2014-02-16 13:08:32 +00:00
9f2be4882d
force assertion: setting FD_CLOEXEC must work (if available)
stbuehler
2014-02-16 13:08:29 +00:00
ef0b353fee
[mod_cml_lua] fix null pointer dereference
stbuehler
2014-02-16 13:08:27 +00:00
954184e949
[mod_scgi] use goto error for all error cases in mod_scgi_set_defaults
stbuehler
2014-02-16 13:08:24 +00:00