| Age | Commit message (Collapse) | Author |
|
by ASLR and verified to work with the aslr fixed random debug sysctls.
|
|
(Matthias Weckbecker)
|
|
|
|
|
|
http://mail-index.netbsd.org/tech-userlevel/2016/05/18/msg009999.html
and
https://www.netbsd.org/~agc/bozo-20160517.diff
add a patch to httpd to return the version string of httpd itself, and use the
-G option on the command line to enable this. This gives httpd the ability to
show, from the command line, what version is running.
% /usr/build/obj/x86_64/usr/src/libexec/httpd/bozohttpd -G
bozohttpd version bozohttpd/20160415
%
|
|
part of the core file link-map, so that gdb can find it.
|
|
main binary. Historically, this has been the same. For PIE though,
relocbase can be pretty much anywhere. Fixes PR toolchain/51159.
|
|
XXX: pullup 7
|
|
|
|
o add search-word support for CGI
o fix a security issue in CGI suffix handler support which would
allow remote code execution, from shm@netbsd.org
o -C option supports now CGI scripts only
|
|
Spotted by Miod Vallat
|
|
- Don't remap the text segment executable while relocating
|
|
|
|
|
|
|
|
|
|
|
|
|
|
from christos
|
|
|
|
be padded out.
|
|
|
|
|
|
|
|
when the pointer is used later.
|
|
|
|
will be included in the HTTP reply. We define this as we are about to
add an authentication method that may need to have a conversation with
the client.
|
|
|
|
just delay the free until the parent has finished using them.
also, free query as well.
fixes PR#50374.
|
|
|
|
- don't call getpwuid(0) if we don't need to, or fail it it fails,
and remove the 'username' member of bozohttpd_t since it is not
used outside of bozo_setup().
|
|
new rule is that function that mirror libc-style functions get no underscore.
|
|
- bozostrdup() gains a request parameter, and uses it to determine
what sort of error handling is required
- bozo_strdup() dies
- size_arrays() reduced slightly, pushing error handling into the caller
- convert to size_t for some array indices
- bozo_set_pref() and bozo_init_prefs() gain httpd parameters
- apply a bunch of manual CSE to vastly reduce the number of times the
string "request->hr_httpd" appears.
- CGI parse_header() takes a request not httpd now
XXX: lua glue updated to call bozo_init_prefs() with htttpd parameter,
but i'm only guessing here.
|
|
|
|
code duplication.
Note that bozo_strdup is different that bozostrdup; the _ routines exit
loging error to syslog or stderr, whereas the non _ routines send error
responses to the http client.
|
|
- restrict ssl options
From Travis Paul
|
|
Stop using Lua builtin print function and replace them with http.* ones.
httpd.print and http.write wraps SSL support when needed.
Print http headers, without them browser may interpret page as raw text.
No need to hardcode prefix path in the form.
Add comments for a user with tips how to use this script.
Patch by Travis Paul
Closes PR misc/50502
|
|
|
|
|
|
|
|
|
|
|
|
|
|
free it. Allocating from the stack does not return null, and freeing it
will have unpredictable results. use malloc instead.
- now we are using malloc remove -Wno-stack-protector kludge
|
|
|
|
* add redirects to ~user translation
* fix bugs around ~user translation
* add schema detection for absolute redirects
* fixed few memory leaks
* bunch of minor tweaks
* removed -r support
* smarter redirects
OK mrg@
|
|
fixes a merge problem in introduced when merging the QNX patches.
from Jan Danielsson.
|
|
|
|
|
|
Caught by clang, reported by joerg.
Turn off the clang-specific compiler flags that were making the report
nonfatal.
|