| Age | Commit message (Collapse) | Author |
|
|
|
autoindex listings.
|
|
Error was reported when build.sh was run with MKLIBCSANITIZER=yes flag.
Reviewed by: kamil@, mrg@
|
|
have been incorrect for a long while now.
|
|
harmless or ignored elsewhere.
from perry.
|
|
headers we are about to set. Avoids an assertion failure (and overruninng
the array) later.
|
|
|
|
|
|
previous release.
|
|
work with in this timeout value, ssl setup now fails.
mostly different from, but inspired from the patch in PR 50655
|
|
|
|
|
|
served, but links to them are generated.
|
|
- avoid calloc, use bozomalloc
- minor CSE
- fix bozoprefs->size setting when increasing the size (new total was
being added to the prior total.) found by clang static analyzer
from rajeev_v_pillai.
pass httpd to size_arrays() now.
free(NULL) is legal.
|
|
- bozostrnsep() may return with "in = NULL", so check for it.
- nul terminating in bozo_escape_rfc3986() can be simpler
- don't use uniinit variables in check_remap()
- don't use re-used freed data in check_virtual(). this one is tricky as
the original code was:
free(request->hr_file);
request->hr_file = bozostrdup(httpd, request, s ? s : "/");
however, bozostrdup() may reference request->hr_file.
|
|
- adjust the directory indexing again:
- don't include "index.html" in html headers
- additional escaping of names
- re-add top/bottom borders
- adds an aquamarine table header
- Zebra-stripes table rows using CSS instead of code
all from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>
|
|
fix the t11.out output now that CGI parsing works better.
|
|
- remove unused parameter to daemon_poll_err().
both from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>
|
|
|
|
|
|
|
|
Suggested by <mrg>, thanks! (Possible mistakes are mine though!)
|
|
|
|
in the slashdir too.
Problem reported by JP via tech-security@ and discussed with <mrg>, thanks!
|
|
Problem reported by <maya> and reviewed by <maya> and <mrg>, thanks!
|
|
|
|
Note that this isn't reachable in practice as big requests time out.
|
|
htnl_cmp compares against the output of `hostname`.
This makes the tests pass on my machine.
|
|
from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>
call this bozohttpd 20181204.
|
|
wanted values.) from Rajeev V. Pillai.
|
|
|
|
|
|
|
|
|
|
- one return is usually enough.
|
|
|
|
|
|
|
|
for some reason gcc does not warn about this:
case 'x':
stuff_here();
break;
other_stuff_here();
break;
and the other_stuff_here() was what was mis-placed.
should fix atf failures in networking.
|
|
|
|
|
|
|
|
|
|
- keep a list of special files and their human names
- remove (void) casts on bozo_http_error()
- fix a few more misuses of bozo_http_error()
- rename check_mapping() to check_remap() and perform some CSE
- switch away from ``%s'' to '%s'
- remove a bunch of #ifdef using new have_feature defines
|
|
WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 15478 command bozohttpd)
|
|
- don't check contents of 'st' if stat(2) failed.
- round up instead of truncate. now 10000 byte files say 10kB not 9kB.
|
|
- consolidate all the special file checks into
bozo_check_special_files() so that all builds check the same
list of special files, regardless of build options.
- convert "(void)bozo_http_error(...); return -1;" into plain
"return bozo_http_error(...);"
- fix the call to bozo_check_special_files() to be used on all
input types. part of the fixes for failure to reject access
to /.htpasswd as reported by JP on tech-security.
- use warn_unused_result attribute on bozo_check_special_files(),
and fix the failures to return failure. second part of the
htpasswd access fix.
- update testsuite to use a fixed fake hostname.
call this bozohttpd 20181121.
|
|
the debug and dynamic content to match the same pattern as everything
else so similar problems are less likely in the future.
|
|
|
|
|