Stefan Bühler
ef0b353fee
[mod_cml_lua] fix null pointer dereference
...
a local lua script could trigger it by not sending any files and not
setting a last-modified header, leading to zero mtime and a buffer
ptr = NULL which was used in http_response_handle_cachable
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2951 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
07dd0bd0a5
add force_assert() to enforce assertions as simple assert()s are disabled by -DNDEBUG ( fixes #2546 )
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2948 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
fba7dd6f43
fix resource leaks in error cases on config parsing and other initializations
...
None of this matters - lighttpd will terminate anyway. Still helps the
code to get cleaner, and makes reviewing output of static analyzers
easier.
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2947 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
bf10267807
[buffer] fix length check in buffer_is_equal_right_len
...
buffer_is_equal_right_len didn't check the length of the second
buffer. as all calls in lighttpd used the length of the second buffer
as length parameter those calls were not broken.
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2946 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
bcd35cc264
remove logical dead code
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2945 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
29a1070299
add comments for switch fall throughs
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2944 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
b239e7734a
[mod_magnet] fix memory leak
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2943 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
b461e031f5
[mod_fastcgi,mod_scgi] fix resource leaks on spawning backends
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2942 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
d59c910d6a
[mod_dirlisting] fix memory leak if pcre fails
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2941 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
0aaf939e5e
[mod_rrdtool] fix invalid read (string not null terminated)
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2940 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
fc3a060a04
[mod_fastcgi] fix use after free (only triggered if fastcgi debug is active)
...
If a new fastcgi packet is expected, but the currently available
data doesn't fill the header and debug is active an invalid
read is triggerd.
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2939 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
b8a1835093
NEWS entry for previous commit
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2938 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
0d855be97e
- next is 1.4.35
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2935 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
24994e113a
[mod_webdav] fix fd leak found with parfait ( fixes #2530 , thx kukackajiri)
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2930 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
657566828e
[mod_mysql_vhost] fix memory leak on config init ( #2530 )
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2929 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
e346794d59
[auto* build] remove -no-undefined from linker flags, as we actually link modules with undefined symbols ( fixes #2533 )
...
On platforms that support linking modules with undefined symbols we
actually do it; so most of the time -no-undefined should result in an
error.
On platforms that don't support it, it will result in an error sooner or
later anyway (on those it should build a shared libary with the core
code to link the modules against).
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2928 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
f0e5c1415d
[core] decode URL before rewrite, enabling it to work in $HTTP["url"] conditionals ( fixes #2526 )
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2927 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
17762fad01
maintain physical.basedir (the "acting" doc-root as prefix of physical.path) in more places
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2926 152afb58-edef-0310-8abb-c4023f1b3aa9
8 years ago
Stefan Bühler
c8fbc16985
[ssl] fix regression from CVE-2013-4508 (client-cert sessions were broken)
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2925 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
99cddff73a
[core] check success of setuid,setgid,setgroups (CVE-2013-4559)
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2923 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
d8b363c1d1
[stat-cache] fix FAM cleanup/fdevent handling
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2922 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
ae1335503a
[stat-cache] FAM: fix use after free (CVE-2013-4560)
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2921 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
6b7240f2d8
NEWS entry for previous commit
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2919 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
1af871fcef
[ssl] fix SNI handling; only use key+cert+verify-client from SNI specific config ( fixes #2525 , CVE-2013-4508)
...
pull all ssl.ca-file values into all SSL_CTXs, but use only the local
ssl.ca-file for verify-client; correct SNI name is no requirement,
so enforcing verification for a subset of SNI names doesn't actually
protect those.
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2913 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
268c054c40
[mod_extforward] fix compilation without IPv6, (not) using undefined var ( fixes #2515 , thx mm)
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2911 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
9b0d54d7cc
[mod_auth] explicitly link ssl for SHA1 ( fixes #2517 )
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2910 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
32199a7bdf
- next is 1.4.34
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2909 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
29ff92d9ba
[core] set signal handlers before forking child processes in modules/plugins_call_set_defaults ( fixes #2502 )
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2901 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
9cfc080ab7
[core] allow files to be used as document-root ( fixes #2475 )
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2900 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
c26b0f9617
[mod_accesslog] add accesslog.syslog-level option ( fixes #2480 )
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2899 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
f0e5b84c27
[mod_simple_vhost] fix cache; skip module if simple-vhost.server-root is empty (thx rm for reporting)
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2898 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
92567b8b8f
[core] check whether server.chroot exists
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2896 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
916cf7cfc0
[core] remove requirement that default doc-root has to exist, there are reasonable scenarios not requiring static files at all
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2895 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
f9d58670d5
[auth] new method "extern" to use already present REMOTE_USER (from magnet, ssl, ...) ( fixes #2436 )
...
can be combined with ssl:
ssl.verifyclient.username = "SSL_CLIENT_S_DN_UID"
auth.require = ("/" => ( "require" => "valid-user", "method" => "extern") )
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2894 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
559b198f86
[auth] put REMOTE_USER into cgi environment, making it accessible to lua via lighty.req_env ( fixes #2495 )
...
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2892 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
93fd9ea7a4
[ssl] add option ssl.empty-fragments, defaulting to disabled ( fixes #2492 )
...
if ssl.empty-fragments is set to enabled, but the openssl version used
to compile lighttpd doesn't support empty fragments, a warning is
displayed (it might still work).
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2891 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
6d4d2118c3
[ssl] accept ssl renegotiations if they are not disabled ( fixes #2491 )
...
* don't fiddle with ssl internals
* renegotiations should be safe with recent openssl versions,
openssl itself should reject unsafe renegotiations
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2890 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
05858f6cf2
[ssl] Fix $HTTP["scheme"] conditional, could be "http" for ssl connections if the ssl $SERVER["socket"] conditional was nested ( fixes #2501 )
...
con->conf.is_ssl got removed and replaced by:
* con->conf.ssl_enabled for the config var "ssl.engine" - it is only
used to determine which server-sockets should use ssl. (usually not
needed as it is mandatory and enough to set ssl.pemfile anyway)
* con->srv_socket->is_ssl to detect the actual ssl status of the
bound socket, which is the same as the ssl status of the connection
* con->uri.scheme for the actual $HTTP["scheme"] value, also used for
the CGI "HTTPS=ON" variable. This defaults to "https" if the
connection uses ssl, but can be changed for example by mod_extforward
if X-Forwarded-Proto: is set to either "http" or "https" (other values
are ignored right now)
Also removed the broken srv_socket->is_proxy_ssl as it was a connection
value in a server_socket struct...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2887 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
25a3f2e826
[network] use constants available at compile time for maximum number of chunks for writev instead of calling sysconf ( fixes #2470 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2885 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
6cdb46587c
[ssl] use DH only if openssl supports it ( fixes #2479 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2884 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
3df2ec9248
[core] recognize more http methods to forward to backends ( fixes #2346 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2883 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
9b36534752
[core] return 501 Not Implemented in static file mode for all methods except GET/POST/HEAD/OPTIONS
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2882 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
12c4a40b28
[mod_userdir] add userdir.active option, "enabled" by default
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2880 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
a6b42cc61e
[auto* build] simplify autogen.sh, handle automake 1.13 test running ( fixes #2490 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2878 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
c008fd7ec8
[mod_auth] fix invalid read in digest qop=auth-int handling ( fixes #2478 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2877 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
680b714543
[cmake] Use TARGET_LINK_LIBRARIES instead of LINK_FLAGS for library dependencies, also add -Wl,--as-needed to extra warnings ( fixes #2448 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2875 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
a0e93c678b
fix undefined stuff found with clang
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2873 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
661efa3f37
fix some bugs found with canalyze ( fixes #2484 , thx Zhenbo Xu)
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2872 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
ce4bc0c0f7
[mod_auth] fix base64_decode ( #2484 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2871 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago
Stefan Bühler
c26b50d9ad
[mod_auth] add htpasswd -s (SHA1) support if openssl is used (needs openssl for SHA1). This doesn't use any salt, md5 with salt is probably better.
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2870 152afb58-edef-0310-8abb-c4023f1b3aa9
9 years ago