summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Collapse)Author
2016-06-20Fix a few bounds and instruction sequences generated in the PLT; exercisedmartin
by ASLR and verified to work with the aslr fixed random debug sysctls.
2016-06-16Move relro after we've computed out relocbase and re-enable it.christos
(Matthias Weckbecker)
2016-06-15Turn off GNU_RELRO for now.christos
2016-06-14Add support for GNU RELRO headers from Matthias Weckbecker.christos
2016-05-24As proposed in:agc
http://mail-index.netbsd.org/tech-userlevel/2016/05/18/msg009999.html and https://www.netbsd.org/~agc/bozo-20160517.diff add a patch to httpd to return the version string of httpd itself, and use the -G option on the command line to enable this. This gives httpd the ability to show, from the command line, what version is running. % /usr/build/obj/x86_64/usr/src/libexec/httpd/bozohttpd -G bozohttpd version bozohttpd/20160415 %
2016-05-24Put the name of the dynamic linker in allocated memory, so that it becomeschristos
part of the core file link-map, so that gdb can find it.
2016-05-22obj->phdr must be the absolute address, not the virtual offset from thejoerg
main binary. Historically, this has been the same. For PIE though, relocbase can be pretty much anywhere. Fixes PR toolchain/51159.
2016-04-24CID 1358679: Fix memory leak.christos
XXX: pullup 7
2016-04-15use %zu instead of %lu for size_t.mrg
2016-04-15updates and bozohttpd 20160415:mrg
o add search-word support for CGI o fix a security issue in CGI suffix handler support which would allow remote code execution, from shm@netbsd.org o -C option supports now CGI scripts only
2016-04-14Remove duplicated __RCSIDs I added years ago - I blame CVS.skrll
Spotted by Miod Vallat
2016-04-12- Print a warning for text relocationschristos
- Don't remap the text segment executable while relocating
2016-03-18move the compiler hack closer to the source of the failmrg
2016-03-17Add volatile for gcc 5christos
2016-03-17volatile for gcc 5christos
2016-03-16make the GCC 4.8 specific hack for ci.clean being set GCC >= 4.8.mrg
2016-03-13Use functions instead of preprocessor abuse.dholland
2016-02-20where is already void *christos
2016-02-19make debug code compile againmacallan
from christos
2016-02-19Need <stdbool.h> for true/false.riastradh
2016-02-09Actually, descsz should not contain the padding. The note still needs toskrll
be padded out.
2016-02-08Fix .note.netbsd.march by ensuring correct paddingskrll
2016-01-24we don't need <sys/mbuf.h>christos
2016-01-23Define _KERNTYPES for things that need it.christos
2016-01-17PR/50665: David Binderman: move "dir" to the outer scope so it stays alivechristos
when the pointer is used later.
2016-01-02Fix bug in cleanup of reply headers.elric
2016-01-02Add the concept of ``reply headers'', that is a SIMPLEQ of headers thatelric
will be included in the HTTP reply. We define this as we are about to add an authentication method that may need to have a conversation with the client.
2015-12-31bump the version; we have real fixes now.mrg
2015-12-31redo the fix for rev 1.26 - instead of getting a new string wrong,mrg
just delay the free until the parent has finished using them. also, free query as well. fixes PR#50374.
2015-12-29rewrite the redirection url generation code to use bozoasprintf().mrg
2015-12-29- convert most asprintf() calls to bozoasprintf().mrg
- don't call getpwuid(0) if we don't need to, or fail it it fails, and remove the 'username' member of bozohttpd_t since it is not used outside of bozo_setup().
2015-12-28rename bozo_err/bozo_warn/bozo_asprintf to bozoerr/etc.mrg
new rule is that function that mirror libc-style functions get no underscore.
2015-12-27several clean ups:mrg
- bozostrdup() gains a request parameter, and uses it to determine what sort of error handling is required - bozo_strdup() dies - size_arrays() reduced slightly, pushing error handling into the caller - convert to size_t for some array indices - bozo_set_pref() and bozo_init_prefs() gain httpd parameters - apply a bunch of manual CSE to vastly reduce the number of times the string "request->hr_httpd" appears. - CGI parse_header() takes a request not httpd now XXX: lua glue updated to call bozo_init_prefs() with htttpd parameter, but i'm only guessing here.
2015-12-27fix running the testsuite from the build treemrg
2015-12-12Introduce bozo_strdup and bozo_asprintf to add error checking and reducechristos
code duplication. Note that bozo_strdup is different that bozostrdup; the _ routines exit loging error to syslog or stderr, whereas the non _ routines send error responses to the http client.
2015-12-12- restrict the default list of ciphers to something more securechristos
- restrict ssl options From Travis Paul
2015-12-07Improve the httpd(8) printenv.lua Lua examplekamil
Stop using Lua builtin print function and replace them with http.* ones. httpd.print and http.write wraps SSL support when needed. Print http headers, without them browser may interpret page as raw text. No need to hardcode prefix path in the form. Add comments for a user with tips how to use this script. Patch by Travis Paul Closes PR misc/50502
2015-11-29Bump date for previouskamil
2015-11-29Synchronize SYNOPSIS with realitykamil
2015-11-29Remove nonexistent option z: in the getopt(3) callkamil
2015-10-31handle asprintf errors consistently.christos
2015-10-30fix wrong variablechristos
2015-10-30simplifychristos
2015-10-30- don't use alloca and then check if alloca returns null and then try tochristos
free it. Allocating from the stack does not return null, and freeing it will have unpredictable results. use malloc instead. - now we are using malloc remove -Wno-stack-protector kludge
2015-10-30Fix build with "USE_SSP" set to "yes".tron
2015-10-28* add CGI support for ~user translation (-E switch)shm
* add redirects to ~user translation * fix bugs around ~user translation * add schema detection for absolute redirects * fixed few memory leaks * bunch of minor tweaks * removed -r support * smarter redirects OK mrg@
2015-10-25s/USE_NBUTIL/HAVE_NBUTIL_H/, to match the Makefile.mrg
fixes a merge problem in introduced when merging the QNX patches. from Jan Danielsson.
2015-10-15Enable lfs64 in the cleaner.dholland
2015-10-14this is syslog-likechristos
2015-10-10Use llabs(), not abs(), on the difference of daddr_t's.dholland
Caught by clang, reported by joerg. Turn off the clang-specific compiler flags that were making the report nonfatal.