Commit Graph

1689 Commits (593599f14acf2ddbe31b24d970266d9e5fcab9c2)
 

Author SHA1 Message Date
Stefan Bühler e1b1c52028 - next is 1.4.36
9 years ago
Stefan Bühler d1a2356916 fix SQL injection / host name validation (thx Jann Horn)
9 years ago
Stefan Bühler efc41b2bb1 check length of unix domain socket filenames
9 years ago
Stefan Bühler 7bd0f54ab2 add some asserts to help static analyzers
9 years ago
Stefan Bühler 326f2fb8a4 [mod_accesslog] don't close fd -1
9 years ago
Stefan Bühler 8e31e18b8e [mod_webdav] fix logic error in handling file creation error
9 years ago
Stefan Bühler 57c661c191 fix unchecked return values from stream_open/stat_cache_get_entry
9 years ago
Stefan Bühler b106513e58 [network] check return value of lseek()
9 years ago
Stefan Bühler 9f2be4882d force assertion: setting FD_CLOEXEC must work (if available)
9 years ago
Stefan Bühler ef0b353fee [mod_cml_lua] fix null pointer dereference
9 years ago
Stefan Bühler 954184e949 [mod_scgi] use goto error for all error cases in mod_scgi_set_defaults
9 years ago
Stefan Bühler 8f0e19738f fix r2943 (added invalid read after free)
9 years ago
Stefan Bühler 07dd0bd0a5 add force_assert() to enforce assertions as simple assert()s are disabled by -DNDEBUG (fixes #2546)
9 years ago
Stefan Bühler fba7dd6f43 fix resource leaks in error cases on config parsing and other initializations
9 years ago
Stefan Bühler bf10267807 [buffer] fix length check in buffer_is_equal_right_len
9 years ago
Stefan Bühler bcd35cc264 remove logical dead code
9 years ago
Stefan Bühler 29a1070299 add comments for switch fall throughs
9 years ago
Stefan Bühler b239e7734a [mod_magnet] fix memory leak
9 years ago
Stefan Bühler b461e031f5 [mod_fastcgi,mod_scgi] fix resource leaks on spawning backends
9 years ago
Stefan Bühler d59c910d6a [mod_dirlisting] fix memory leak if pcre fails
9 years ago
Stefan Bühler 0aaf939e5e [mod_rrdtool] fix invalid read (string not null terminated)
9 years ago
Stefan Bühler fc3a060a04 [mod_fastcgi] fix use after free (only triggered if fastcgi debug is active)
9 years ago
Stefan Bühler b8a1835093 NEWS entry for previous commit
9 years ago
Stefan Bühler a7396296da [network/ssl] fix build error if TLSEXT is disabled
9 years ago
Stefan Bühler 9061670c28 [dist]: fix typo in link title generated by packdist.sh
9 years ago
Stefan Bühler 0d855be97e - next is 1.4.35
9 years ago
Stefan Bühler 3ca6adc233 [docs] add !kPSK to the cipher string recommendation as the comments before already mention
9 years ago
Stefan Bühler d7c90814c3 [tests] add cleanup.sh to cmake test runs, reset SLOWREQUEST in request.t
9 years ago
Stefan Bühler 524e0a30a0 add two asserts to help parfait (#2530)
9 years ago
Stefan Bühler 24994e113a [mod_webdav] fix fd leak found with parfait (fixes #2530, thx kukackajiri)
9 years ago
Stefan Bühler 657566828e [mod_mysql_vhost] fix memory leak on config init (#2530)
9 years ago
Stefan Bühler e346794d59 [auto* build] remove -no-undefined from linker flags, as we actually link modules with undefined symbols (fixes #2533)
9 years ago
Stefan Bühler f0e5c1415d [core] decode URL before rewrite, enabling it to work in $HTTP["url"] conditionals (fixes #2526)
9 years ago
Stefan Bühler 17762fad01 maintain physical.basedir (the "acting" doc-root as prefix of physical.path) in more places
9 years ago
Stefan Bühler c8fbc16985 [ssl] fix regression from CVE-2013-4508 (client-cert sessions were broken)
9 years ago
Stefan Bühler 18869bcfed [mod_ssi] fix "ssi_val_init" prototype
9 years ago
Stefan Bühler 99cddff73a [core] check success of setuid,setgid,setgroups (CVE-2013-4559)
9 years ago
Stefan Bühler d8b363c1d1 [stat-cache] fix FAM cleanup/fdevent handling
9 years ago
Stefan Bühler ae1335503a [stat-cache] FAM: fix use after free (CVE-2013-4560)
9 years ago
Stefan Bühler 6f208cfde1 fix/silence bugs reported by ccc-analyzer (clang)
9 years ago
Stefan Bühler 6b7240f2d8 NEWS entry for previous commit
9 years ago
Stefan Bühler cdcd49b547 [doc] update ssl.cipher-list recommendation
9 years ago
Stefan Bühler ff86b5cc67 [autobuild] create m4/ before calling autoreconf
9 years ago
Stefan Bühler 4938c94ada fix typo (fixes #2519)
9 years ago
Stefan Bühler 1985df2a48 add "packdist.sh" script to build (pre-) releases
9 years ago
Stefan Bühler cb02c73860 [autobuild] use autoreconf instead of calling tools manually; add generated files to .gitignore
9 years ago
Stefan Bühler 1af871fcef [ssl] fix SNI handling; only use key+cert+verify-client from SNI specific config (fixes #2525, CVE-2013-4508)
10 years ago
Stefan Bühler 3ce548c8d0 remove unused members from struct server_socket
10 years ago
Stefan Bühler 268c054c40 [mod_extforward] fix compilation without IPv6, (not) using undefined var (fixes #2515, thx mm)
10 years ago
Stefan Bühler 9b0d54d7cc [mod_auth] explicitly link ssl for SHA1 (fixes #2517)
10 years ago