summaryrefslogtreecommitdiff
path: root/libexec/httpd
AgeCommit message (Collapse)Author
2020-07-11Add blocklistd(8) support.jruoho
2020-07-06Add -R flag to specify a README file to add at the bottom of directoryjmcneill
autoindex listings.
2020-06-07libexec/httpd: Fix the possible -Werror=stringop-truncationfox
Error was reported when build.sh was run with MKLIBCSANITIZER=yes flag. Reviewed by: kamil@, mrg@
2019-12-06remove some XXX comments. one isn't relevant, and the other twomrg
have been incorrect for a long while now.
2019-10-30set -D_GNU_SOURCE, needed for linux systems and should bemrg
harmless or ignored elsewhere. from perry.
2019-03-29Account for cgihandler being set when counting the number of CGI environmentmartin
headers we are about to set. Avoids an assertion failure (and overruninng the array) later.
2019-03-27add $NetBSD$mrg
2019-03-08on m68010 set BOZO_WRSZ to 16k and BOZO_WRSZ to 64k.mrg
2019-02-28call this bozohttpd 20190228, and merge the CHANGES entries from themrg
previous release.
2019-02-28add ssl specific timeout value (30s). if SSL_accept() doesn'tmrg
work with in this timeout value, ssl setup now fails. mostly different from, but inspired from the patch in PR 50655
2019-01-27fix duplicated chunk from mergedholland
2019-01-27Merge the [pgoyette-compat] branchpgoyette
2019-01-22o don't display special files in the directory index. they aren'tmrg
served, but links to them are generated.
2019-01-18rework size_arrays():mrg
- avoid calloc, use bozomalloc - minor CSE - fix bozoprefs->size setting when increasing the size (new total was being added to the prior total.) found by clang static analyzer from rajeev_v_pillai. pass httpd to size_arrays() now. free(NULL) is legal.
2019-01-18fix a few problems pointed out by clang static analyzer, from rajeev_v_pillai:mrg
- bozostrnsep() may return with "in = NULL", so check for it. - nul terminating in bozo_escape_rfc3986() can be simpler - don't use uniinit variables in check_remap() - don't use re-used freed data in check_virtual(). this one is tricky as the original code was: free(request->hr_file); request->hr_file = bozostrdup(httpd, request, s ? s : "/"); however, bozostrdup() may reference request->hr_file.
2019-01-17- call this 20190116mrg
- adjust the directory indexing again: - don't include "index.html" in html headers - additional escaping of names - re-add top/bottom borders - adds an aquamarine table header - Zebra-stripes table rows using CSS instead of code all from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>
2019-01-17add 'check' target to toplevel makefile.mrg
fix the t11.out output now that CGI parsing works better.
2019-01-17- fix CGI '+' param and error handling.mrg
- remove unused parameter to daemon_poll_err(). both from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>
2019-01-08remove reference to deleted -r option. fixes PR#53840 from J. Lewis Muir.mrg
2018-12-19minor rewording. fix alphabeta ordering of contributors.mrg
2018-12-18fix an old spell-o and a new format-o.mrg
2018-12-15Document last changes and bump version to 20181215leot
Suggested by <mrg>, thanks! (Possible mistakes are mine though!)
2018-12-15Fix handling of bozo_set_timeout() timeouts (and `-T' option parsing)leot
2018-12-15Avoid .htpasswd exposure to authenticated users when .htpasswd isleot
in the slashdir too. Problem reported by JP via tech-security@ and discussed with <mrg>, thanks!
2018-12-15Avoid possible NULL dereference when sending a big request that timeout.leot
Problem reported by <maya> and reviewed by <maya> and <mrg>, thanks!
2018-12-15strings.h for strcasecmp (on linux)maya
2018-12-15Check against BOZO_HEADERS_MAX_SIZE in a way that isn't prone to overflow.maya
Note that this isn't reachable in practice as big requests time out.
2018-12-14Don't pass ${HOST} to test scripts.maya
htnl_cmp compares against the output of `hostname`. This makes the tests pass on my machine.
2018-12-04use html tables for directory index.mrg
from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com> call this bozohttpd 20181204.
2018-12-04avoid sign extension in % handling (and printing 0xFFFFFF beforemrg
wanted values.) from Rajeev V. Pillai.
2018-11-25normalise some messages.mrg
2018-11-25add option fixes here.mrg
2018-11-25fix -X option parsing. noted by Rajeev V. Pillai.mrg
2018-11-24avoid c99ism.mrg
2018-11-24- add FALLTHROUGH commentchristos
- one return is usually enough.
2018-11-24appease lintchristos
2018-11-24one semicolon is usually enough.christos
2018-11-24call this bozohttpd 20181124.mrg
2018-11-24fix a bug in the rework for -i option: move the real code in place.mrg
for some reason gcc does not warn about this: case 'x': stuff_here(); break; other_stuff_here(); break; and the other_stuff_here() was what was mis-placed. should fix atf failures in networking.
2018-11-24s/time/val/ to avoid shadowing a global indentifier.mrg
2018-11-23minor style fixes. simplify bozo_match_content_map().mrg
2018-11-22add an assert() check on array bounds.mrg
2018-11-22alpha sort the option switch.mrg
2018-11-22many clean ups:mrg
- keep a list of special files and their human names - remove (void) casts on bozo_http_error() - fix a few more misuses of bozo_http_error() - rename check_mapping() to check_remap() and perform some CSE - switch away from ``%s'' to '%s' - remove a bunch of #ifdef using new have_feature defines
2018-11-21use MAP_SHARED for the bzremap file. avoids netbsd kernel complaining:mrg
WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 15478 command bozohttpd)
2018-11-21two fixes reported by mouse:mrg
- don't check contents of 'st' if stat(2) failed. - round up instead of truncate. now 10000 byte files say 10kB not 9kB.
2018-11-21- move special files defines into bozohttpd.h, so we can ...mrg
- consolidate all the special file checks into bozo_check_special_files() so that all builds check the same list of special files, regardless of build options. - convert "(void)bozo_http_error(...); return -1;" into plain "return bozo_http_error(...);" - fix the call to bozo_check_special_files() to be used on all input types. part of the fixes for failure to reject access to /.htpasswd as reported by JP on tech-security. - use warn_unused_result attribute on bozo_check_special_files(), and fix the failures to return failure. second part of the htpasswd access fix. - update testsuite to use a fixed fake hostname. call this bozohttpd 20181121.
2018-11-20also fix have_dynamic_content from the previous previous. re-ordermrg
the debug and dynamic content to match the same pattern as everything else so similar problems are less likely in the future.
2018-11-20fix previous: have_debug was reversed.mrg
2018-11-20move some #if support into bozohttpd.h.mrg