You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
lighttpd1.4/src
Glenn Strauss 0b49e767b9 [mod_ajp13] fix crash with bad response headers (fixes #3170)
fix crash with bad response headers from AJP13 backend

(thx Michał Dardas)

x-ref:
  "mod_ajp13 read heap buffer overflow"
  https://redmine.lighttpd.net/issues/3170
10 months ago
..
compat [mod_fastcgi] move src/fastcgi.h into src/compat/ 3 years ago
ls-hpack [core] compiler workarounds for very old gcc,glibc 1 year ago
t [core] fix li_base64_dec() on whitespace 11 months ago
CMakeLists.txt [tests] test stubs for http_header.c and http_kv.c 12 months ago
Makefile.am [tests] test stubs for http_header.c and http_kv.c 12 months ago
SConscript [core] isolate plugins_*() funcs to main server 1 year ago
algo_hmac.c [core] fix HMAC with openssl 3.0 1 year ago
algo_hmac.h [core] li_hmac_sha512() 2 years ago
algo_md.h [multiple] etag.[ch] -> http_etag.[ch]; better imp 2 years ago
algo_md5.c [build] feature consistency between build types 1 year ago
algo_md5.h [multiple] use <algo>_iov() digest funcs 2 years ago
algo_sha1.c [core] sys-crypto-md.h w/ inline message digest fn 3 years ago
algo_sha1.h [core] sys-crypto-md.h w/ inline message digest fn 3 years ago
algo_splaytree.c [core] remove size maint in algo_splaytree 2 years ago
algo_splaytree.h [core] remove size maint in algo_splaytree 2 years ago
algo_xxhash.c [core] use system xxhash lib if available 3 years ago
algo_xxhash.h [core] define static_assert for uClibc (fixes #3127) 1 year ago
array.c [array] use speaking names for array "fn" vtables for better debugging experience 1 year ago
array.h [core] move data_{array,integer,string} to array.c 2 years ago
base.h [core] remove unused srv->con_* counters 1 year ago
base64.c [core] fix li_base64_dec() on whitespace 11 months ago
base64.h [multiple] __attribute_nonnull__ now takes params 2 years ago
base_decls.h [multiple] de-dup file and piped loggers (fixes #3101) 2 years ago
buffer.c [core] fix buffer_substr_replace() extend (fixes #3160) 11 months ago
buffer.h [core] buffer_append_bs_escaped_json() 12 months ago
burl.c [core] "url-invalid-utf8-reject" normalization opt 1 year ago
burl.h [core] "url-invalid-utf8-reject" normalization opt 1 year ago
chunk.c [core] chunkqueue_steal() handle unexpected 0 len 1 year ago
chunk.h [core] chunk_file_pread() to wrap pread() 1 year ago
ck.c [core] fix compiler warning in 32-bit build 2 years ago
ck.h [core] errno_t and rsize_t detection on Illumos 1 year ago
config.h.cmake [mod_deflate] --with-libdeflate to use libdeflate 1 year ago
configfile-glue.c [core] fix config typo reading large int from str 1 year ago
configfile.c [core] do not load indexfile, dirlisting if unused 12 months ago
configfile.h [core] allocate pcre output vector on demand 2 years ago
configparser.y [core] fix configparser_simplify_regex() comment 1 year ago
connections.c [core] perf: adjust max h2 stream send increment 10 months ago
connections.h [core] remove connection_list_append() 2 years ago
data_config.c [array] use speaking names for array "fn" vtables for better debugging experience 1 year ago
fdevent.c Update comment about TCP_INFO on OpenBSD 10 months ago
fdevent.h [core] fdevent_socket_nb_cloexec_init() 2 years ago
fdevent_fdnode.c [core] fdevent_fdnode.c separate from fdevent.c 2 years ago
fdevent_impl.c [core] libev EV_ERROR conflicts with kqueue 2 years ago
fdevent_impl.h [core] Illumos epoll incompatible w/ lighttpd impl 1 year ago
fdlog.c [core] quiet coverity warnings 2 years ago
fdlog.h [core] avoid repeated typedef for fdlog_st 2 years ago
fdlog_maint.c [multiple] _WIN32 fdevent_pipe_cloexec() 2 years ago
first.h [core] define __EXTENSIONS__ on Illumos 1 year ago
gw_backend.c [multiple] rename status_counter -> plugin_stats 1 year ago
gw_backend.h [core] improve chunk buffer reuse from backends 2 years ago
h2.c [core] fix HTTP/2 downloads >= 4GiB (fixes #3166) 10 months ago
h2.h [core] HTTP/2 PRIORITY_UPDATE frame (experimental) 1 year ago
http-header-glue.c [multiple] application/javascript text/javascript 1 year ago
http_cgi.c [mod_cgi] cgi.local-redir request_reset thru fnptr 1 year ago
http_cgi.h [core] http_cgi.[ch] CGI interfaces (RFC 3875) 2 years ago
http_chunk.c [core] chunk_file_pread() to wrap pread() 1 year ago
http_chunk.h [core] remove some (now) unused http_chunk APIs 2 years ago
http_date.c [multiple] Y2038 32-bit signed time_t mitigations 2 years ago
http_date.h [multiple] Y2038 32-bit signed time_t mitigations 2 years ago
http_etag.c [multiple] use buffer_append_char() 1 year ago
http_etag.h [multiple] etag.[ch] -> http_etag.[ch]; better imp 2 years ago
http_header.c [core] update cached tables with Priority header 12 months ago
http_header.h [core] HTTP/2 PRIORITY_UPDATE frame (experimental) 1 year ago
http_kv.c [multiple] use buffer_append_char() 1 year ago
http_kv.h [multiple] recognize HTTP QUERY method 1 year ago
http_range.c [multiple] use buffer_append_char() 1 year ago
http_range.h [core] feature flag to allow Range w/ HTTP/1.0 1 year ago
keyvalue.c [multiple] use buffer_append_char() 1 year ago
keyvalue.h [core] extend pcre_keyvalue_ctx to pass more state 2 years ago
lemon.c [lemon] silence coverity warnings 1 year ago
lempar.c [multiple] correct misspellings in comments 3 years ago
lighttpd-angel.c [core] attempt to quiet coverity false positives 6 years ago
log.c [multiple] use buffer_append_char() 1 year ago
log.h [core] option: errorlog high precision timestamps 2 years ago
meson.build [tests] test stubs for http_header.c and http_kv.c 12 months ago
mod_access.c [mod_access] remove excess trace 2 years ago
mod_accesslog.c [core] buffer_append_bs_escaped_json() 12 months ago
mod_ajp13.c [mod_ajp13] fix crash with bad response headers (fixes #3170) 10 months ago
mod_alias.c [mod_alias] fix use-after-free bug (fixes #3114) 2 years ago
mod_auth.c [multiple] use buffer_append_char() 1 year ago
mod_auth_api.c [mod_auth] save letter-case diff in require config 1 year ago
mod_auth_api.h [mod_auth] RFC7616 HTTP Digest username* userhash 2 years ago
mod_authn_dbi.c [build] meson crypt and dl detection on *BSD (fixes #3133) 1 year ago
mod_authn_file.c [build] meson crypt and dl detection on *BSD (fixes #3133) 1 year ago
mod_authn_gssapi.c [mod_authn_gssapi] warn if no confidentiality flag (fixes #3163) 10 months ago
mod_authn_ldap.c [multiple] use buffer_append_char() 1 year ago
mod_authn_pam.c [multiple] inline struct in con->dst_addr_buf 2 years ago
mod_authn_sasl.c [multiple] reduce redundant NULL buffer checks 2 years ago
mod_cgi.c [mod_cgi] fix detection of failing error handler (fixes #3157) 1 year ago
mod_deflate.c [mod_deflate] fix use of libdeflate for files>128k (fixes #3161) 11 months ago
mod_dirlisting.c [mod_dirlisting] send ETag, Cache-Control w/ cache 12 months ago
mod_echo.c [mod_echo] test module to echo request as response 2 years ago
mod_evasive.c [mod_evasive] update comment to add references 2 years ago
mod_evhost.c [multiple] use buffer_append_char() 1 year ago
mod_expire.c [multiple] application/javascript text/javascript 1 year ago
mod_extforward.c [mod_extforward] unix domain socket pedantic chks 1 year ago
mod_fastcgi.c [multiple] rename status_counter -> plugin_stats 1 year ago
mod_gnutls.c [TLS] inherit ssl.engine from global scope 1 year ago
mod_indexfile.c [multiple] __attribute_nonnull__ now takes params 2 years ago
mod_magnet.c [core] buffer_append_bs_escaped_json() 12 months ago
mod_magnet_cache.c [mod_magnet] clear stack when reloading script 1 year ago
mod_magnet_cache.h [mod_magnet] defer req_env init unless needed 1 year ago
mod_maxminddb.c [multiple] reduce use of BUFFER_INTLEN_PTR 2 years ago
mod_mbedtls.c [mod_mbedtls] fix crt chain construction logic 1 year ago
mod_nss.c [TLS] inherit ssl.engine from global scope 1 year ago
mod_openssl.c [mod_openssl] compile compat w/ openssl < 1.1.0 12 months ago
mod_proxy.c [multiple] rename status_counter -> plugin_stats 1 year ago
mod_redirect.c [core] allocate one fewer cond_match_t, if needed 2 years ago
mod_rewrite.c [core] allocate one fewer cond_match_t, if needed 2 years ago
mod_rrdtool.c [multiple] simplify bytes_in/bytes_out accounting 1 year ago
mod_scgi.c [multiple] rename status_counter -> plugin_stats 1 year ago
mod_secdownload.c [multiple] Y2038 32-bit signed time_t mitigations 2 years ago
mod_setenv.c [mod_setenv] cleanup user-provided hdr sloppiness 1 year ago
mod_simple_vhost.c [multiple] prefer r->tmp_buf to p->tmp_buf 2 years ago
mod_skeleton.c [multiple] remove base.h include where not used 2 years ago
mod_sockproxy.c [multiple] rename status_counter -> plugin_stats 1 year ago
mod_ssi.c [multiple] use buffer_append_char() 1 year ago
mod_staticfile.c [multiple] recognize HTTP QUERY method 1 year ago
mod_status.c [mod_status] display HTTP/2 control stream w/ reqs 1 year ago
mod_uploadprogress.c [mod_uploadprogress] use splay_tree for req list 2 years ago
mod_userdir.c [multiple] remove base.h include where not used 2 years ago
mod_usertrack.c [multiple] use <algo>_iov() digest funcs 2 years ago
mod_vhostdb.c [multiple] prefer r->tmp_buf to p->tmp_buf 2 years ago
mod_vhostdb_api.c [mod_vhostdb*] rename http_vhostdb->mod_vhostdb_api 2 years ago
mod_vhostdb_api.h [mod_vhostdb*] rename http_vhostdb->mod_vhostdb_api 2 years ago
mod_vhostdb_dbi.c [multiple] reduce redundant NULL buffer checks 2 years ago
mod_vhostdb_ldap.c [multiple] use buffer_append_char() 1 year ago
mod_vhostdb_mysql.c [multiple] reduce redundant NULL buffer checks 2 years ago
mod_vhostdb_pgsql.c [multiple] reduce redundant NULL buffer checks 2 years ago
mod_webdav.c [mod_webdav] build with Android NDK 10 months ago
mod_wolfssl.c [mod_wolfssl] compat with older wolfssl versions 11 months ago
mod_wstunnel.c [mod_wstunnel] fix crash with bad hybivers (fixes #3165) 10 months ago
network.c [core] fix SIGUSR1 graceful restart w/ TLS (fixes #3164) 10 months ago
network.h [core] graceful and immediate restart option 3 years ago
network_write.c [core] chunk_file_pread() to wrap pread() 1 year ago
network_write.h [multiple] mark addtl funcs attr returns_nonnull 2 years ago
plugin.c [core] isolate plugins_*() funcs to main server 1 year ago
plugin.h [core] remove func decls duplicated in plugin.h 1 year ago
plugin_config.h [multiple] rename status_counter -> plugin_stats 1 year ago
plugins.h [core] isolate plugins_*() funcs to main server 1 year ago
rand.c [core] fall back to getauxval(AT_RANDOM), if avail 1 year ago
rand.h [core] adjust li_rand_pseudo* interfaces 6 years ago
reqpool.c [multiple] WebSockets over HTTP/2 (fixes #3151) 1 year ago
reqpool.h [core] clear request,connection pools every 64 sec (#3084) 2 years ago
request.c [multiple] use buffer_append_char() 1 year ago
request.h [core] h2: avoid sending small WINDOW_UPDATE frames 12 months ago
response.c [core] check r->http_status before handling Range 10 months ago
response.h [core] delay response to http auth invalid creds 1 year ago
server.c [core] clarify server.username = "root" error msg 11 months ago
sock_addr.c [multiple] use buffer_append_char() 1 year ago
sock_addr.h [core] sock_addr_set_port() 2 years ago
sock_addr_cache.c [multiple] reduce redundant NULL buffer checks 2 years ago
sock_addr_cache.h [core] inet_ntop_cache -> sock_addr_cache 2 years ago
stat_cache.c [core] compiler workarounds for very old gcc,glibc 1 year ago
stat_cache.h [core] add more const to stat_cache_update_entry() 1 year ago
sys-crypto-md.h [mod_mbedtls] changes to build with mbedtls 3.0.0 1 year ago
sys-crypto.h [core] preprocessor option to force crypto lib 10 months ago
sys-endian.h DragonFlyBSD defines __DragonFly__ (#2746) 7 years ago
sys-mmap.h [multiple] shared code for struct chunk and mmap 1 year ago
sys-setjmp.c [multiple] use new sys_setjmp_eval3() interface 1 year ago
sys-setjmp.h [core] sys-setjmp.[ch] 1 year ago
sys-socket.h [core] some header cleanup 5 years ago
sys-strings.h [core] sys-strings.h abstraction for strings.h 6 years ago
sys-time.h [core] include guard consistency in sys-time.h 1 year ago
vector.c [core] use ck_assert() in vector.[ch] 2 years ago
vector.h [core] use ck_assert() in vector.[ch] 2 years ago