#
daa4ced0 |
| 08-Apr-2021 |
rillig <rillig@NetBSD.org> |
bozohttpd: fix argument type for functions from <ctype.h>
Found by the recently added check to lint (message 342).
ok mrg@
|
#
f116cba5 |
| 27-Feb-2021 |
mrg <mrg@NetBSD.org> |
belated call version 20210211 after previous memory leak fix.
|
#
22c162f9 |
| 11-Feb-2021 |
mrg <mrg@NetBSD.org> |
changes in bozohttpd 20210210: o fix various NULL derefs from malformed headers. mostly from <emily@ingalls.rocks>.
|
#
735aeee2 |
| 15-Oct-2020 |
mrg <mrg@NetBSD.org> |
various updates from <henrik@gulbra.net> / freebsd. the list from Henrik:
bozohttpd.8: o Added -d flag to the man page o Moved -E flag in man page to keep alphabetic order o Grammar fix
various updates from <henrik@gulbra.net> / freebsd. the list from Henrik:
bozohttpd.8: o Added -d flag to the man page o Moved -E flag in man page to keep alphabetic order o Grammar fix for description of -E flag in man page o Moved a word in the man description for the -f flag o Made -f imply -b as a backwards-compatible shortcut o Updated man description of -n to mention Lua scripts o Moved -z below -Z to keep the uppercase options first
bozohttpd.c: o Removed obsolete comment about ~user missing cgi-bin support o Removed "/* ARGSUSED */" lines; was that a macro or a reminder? o Added USE_ARG macro call for sig, which was otherwise not used o Added USE_ARG macro call for msg (only used if debug is enabled)
bozohttpd.h: o Fixed typo in the include guard (BOZOHTTOPD_H_ -> BOZOHTTPD_H_) o Renamed have_all to have_core; it didn't mean "all" options
content-bozo.c: o Added USE_ARG macro call for signo, which was otherwise not used o Made -f imply -b as a backwards-compatible shortcut
main.c: o Simplified -b text to be symmetric with that for the -f option o Updated -C text to make "suffix" explicit; it's better than "arg" o Changed to only show the -E description if have_user is true o Always show the -e option, which incorrectly used the -E logic o Renamed have_all to have_core; it didn't mean "all" options o Added three missing tabs for the description of the -G option o Updated -L text to make "prefix" explicit; it's better than "arg" o Updated -M text to make "suffix" explicit; it's slightly better o Added a previously missing description for the -n option o Documented the otherwise obscure valid types for the -T option o Shortened "username" to "user" to match the actual help text o Moved handling of -c below that for -C to standardize the order o Broke the enabling test for -C into two lines for consistency o Inverted the enabling test for -E; this is what was meant, right? o Removed the enabling test for -e, which should always be enabled
ssl-bozo.c: o Added USE_ARG for httpd, which is not used if SSL has been excluded
show more ...
|
#
e1498d2b |
| 20-Aug-2020 |
spz <spz@NetBSD.org> |
send close_notify for the ssl connection before closing the TCP connection Thanks to Dr. Thomas Orgis for reporting the issue.
|
#
047e9c92 |
| 06-Dec-2019 |
mrg <mrg@NetBSD.org> |
remove some XXX comments. one isn't relevant, and the other two have been incorrect for a long while now.
|
#
2ebaa689 |
| 29-Mar-2019 |
martin <martin@NetBSD.org> |
Account for cgihandler being set when counting the number of CGI environment headers we are about to set. Avoids an assertion failure (and overruninng the array) later.
|
#
65b52e40 |
| 17-Jan-2019 |
mrg <mrg@NetBSD.org> |
- call this 20190116 - adjust the directory indexing again: - don't include "index.html" in html headers - additional escaping of names - re-add top/bottom borders - adds an aquamarine table
- call this 20190116 - adjust the directory indexing again: - don't include "index.html" in html headers - additional escaping of names - re-add top/bottom borders - adds an aquamarine table header - Zebra-stripes table rows using CSS instead of code all from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>
show more ...
|
#
7ff21a5a |
| 17-Jan-2019 |
mrg <mrg@NetBSD.org> |
- fix CGI '+' param and error handling. - remove unused parameter to daemon_poll_err().
both from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>
|
#
60cd38db |
| 24-Nov-2018 |
christos <christos@NetBSD.org> |
appease lint
|
#
d1b129ee |
| 23-Nov-2018 |
mrg <mrg@NetBSD.org> |
minor style fixes. simplify bozo_match_content_map().
|
#
523a958d |
| 22-Nov-2018 |
mrg <mrg@NetBSD.org> |
add an assert() check on array bounds.
|
#
fcd9de82 |
| 22-Nov-2018 |
mrg <mrg@NetBSD.org> |
many clean ups: - keep a list of special files and their human names - remove (void) casts on bozo_http_error() - fix a few more misuses of bozo_http_error() - rename check_mapping() to check_remap()
many clean ups: - keep a list of special files and their human names - remove (void) casts on bozo_http_error() - fix a few more misuses of bozo_http_error() - rename check_mapping() to check_remap() and perform some CSE - switch away from ``%s'' to '%s' - remove a bunch of #ifdef using new have_feature defines
show more ...
|
#
ab777c0c |
| 20-Nov-2018 |
mrg <mrg@NetBSD.org> |
from CHANGES:
o reduce default timeouts, and add expand timeouts to handle the initial line, each header, and the total time spent o add -T option to expose new timeout settings o minor RFC fi
from CHANGES:
o reduce default timeouts, and add expand timeouts to handle the initial line, each header, and the total time spent o add -T option to expose new timeout settings o minor RFC fixes related to timeout handling responses
old timeouts: 60 seconds for initial request like, 60 seconds per header line, and no whole timeout (though the recent total header size changes do introduce one that would be about 11 hours.) new timeouts: 30 seconds for initial request like, 10 seconds per header line, and a total request time of 600 seconds.
the new global timeout is implemented using CLOCK_MONOTONIC, with a fallback to CLOCK_REALTIME if monotonic time is unavailable.
reject multiple Host: headers. besides being protocol standard, this closes one additional memory leak found by JP. add a simple test to check this.
clean up option and usage handling some.
show more ...
|
#
6e7613f6 |
| 18-Nov-2018 |
mrg <mrg@NetBSD.org> |
use __func__ in debug().
|
#
19c419c3 |
| 28-Nov-2017 |
martin <martin@NetBSD.org> |
PR bin/52194: bozohttpd fails to exec scripts via the -C mechanism sometimes with EFAULT due to not NULL terminated environment.
|
#
e7d8b5d9 |
| 05-Oct-2017 |
mrg <mrg@NetBSD.org> |
s/u_int/unsigned/.
from Jan Danielsson. increases/fixes portability.
|
#
7aa76d14 |
| 31-Jan-2017 |
mrg <mrg@NetBSD.org> |
call this bozohttpd 20170201.
|
#
f43f2fce |
| 31-Jan-2017 |
mrg <mrg@NetBSD.org> |
- fix a bug in cgi processing. from Dennis Lindroos. - add a testcase for this, and expand test-simple to handle additional args to bozohttpd for eg, cgi-bin setting. - fix objdir bugs in the test
- fix a bug in cgi processing. from Dennis Lindroos. - add a testcase for this, and expand test-simple to handle additional args to bozohttpd for eg, cgi-bin setting. - fix objdir bugs in the testsuite.
show more ...
|
#
12a6844d |
| 24-Apr-2016 |
christos <christos@NetBSD.org> |
CID 1358679: Fix memory leak. XXX: pullup 7
|
#
4e41d868 |
| 15-Apr-2016 |
mrg <mrg@NetBSD.org> |
use %zu instead of %lu for size_t.
|
#
2bba4508 |
| 15-Apr-2016 |
mrg <mrg@NetBSD.org> |
updates and bozohttpd 20160415: o add search-word support for CGI o fix a security issue in CGI suffix handler support which would allow remote code execution, from shm@netbsd.org o -C option s
updates and bozohttpd 20160415: o add search-word support for CGI o fix a security issue in CGI suffix handler support which would allow remote code execution, from shm@netbsd.org o -C option supports now CGI scripts only
show more ...
|
#
211e89ba |
| 31-Dec-2015 |
mrg <mrg@NetBSD.org> |
redo the fix for rev 1.26 - instead of getting a new string wrong, just delay the free until the parent has finished using them. also, free query as well.
fixes PR#50374.
|
#
9a464a4b |
| 29-Dec-2015 |
mrg <mrg@NetBSD.org> |
- convert most asprintf() calls to bozoasprintf(). - don't call getpwuid(0) if we don't need to, or fail it it fails, and remove the 'username' member of bozohttpd_t since it is not used outside
- convert most asprintf() calls to bozoasprintf(). - don't call getpwuid(0) if we don't need to, or fail it it fails, and remove the 'username' member of bozohttpd_t since it is not used outside of bozo_setup().
show more ...
|
#
783740ac |
| 28-Dec-2015 |
mrg <mrg@NetBSD.org> |
rename bozo_err/bozo_warn/bozo_asprintf to bozoerr/etc. new rule is that function that mirror libc-style functions get no underscore.
|