summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Collapse)Author
2022-03-30_rtld_map_object(): no need to mmap an empty bss segment.hannken
2022-03-24s/interger/integer/ and s/Compensatin/Compensation/ in comments.andvar
2022-03-14in bozo_init_prefs(), default to returning 1 (success) and if amrg
bozo_set_pref() fails, return 0 instead. fixes PR#54785 but with a different patch.
2022-03-14check for scandir() returning -1. should handle PR#56358.mrg
2022-01-04bozohttpd: remove obsolete .bzdirect handlingkim
OK mrg@
2021-12-10s/occured/occurred/ in comments, log messages and man pages.andvar
2021-12-08s/desireable/desirable/ in comments.andvar
2021-12-05s/numberic/numeric/ in comment.msaitoh
2021-12-04Restore the fptr_t type of {init,fini}{,_array} that was removed when initialskrll
support for indirect functions was added. This fixes {init,fini}_array support on hppa where each member of the array is (already) a plabel. Discussed with joerg. 4 files changed, 29 insertions(+), 39 deletions(-) : ----------------------------------------------------------------------
2021-12-04Provide a stub _rtld_call_ifunc when a platform doesn't use one of theskrll
common ones or doesn't provide its own.
2021-12-04Add a newlineskrll
2021-12-04Error if there are undefined symbols, e.g. _rtld_call_ifuncskrll
2021-10-12getty: Remove 2 second sleep before opening ttyjmcneill
This (apparently very old!) workaround to ensure that DTR stays down long enough to be detected is now handled by serial drivers themselves. For console devices (framebuffer, serial console, etc) this was an unnecessary 2 second penalty that we have all been paying since the beginning of time.
2021-09-16fix typos in word "successfully", mainly s/succesfully/successfully/.andvar
2021-09-03fix typos in comments, mainly s/extention/extension/ and s/sufficent/sufficient/andvar
2021-08-24extend the list of available ciphers to include most of themrg
openssl "HIGH" with some additional disables. retain the current list of bad options. should deal with PR#51278.
2021-08-24implement tls minimum version setting.mrg
mostly from sunil@nimmagadda.net in PR#55830, though i moved the member into the main http structure, so that it doesn't trigger sslinfo being allocated via command line without the rest of the ssl being setup (which then leads to crashes.)
2021-08-24rework the bindport setting, inspired by part of the patchmrg
from PR#56367 (thanks JP.)
2021-08-24remove unused parameters, and clean up incompatible options.mrg
from <henrik@gulbra.net>
2021-08-21fix some more typos in comments/log messages, improve wording as well.andvar
2021-08-09s/fist/first/andvar
2021-07-31s/threshhold/thresholdandvar
2021-07-03Treat failed chdir/chroot for guest and chroot accounts as fatal.christos
Also treat failed set{e,}(u,g}id calls as fatal. Addresses CVE-2020-7468, via FreeBSD.
2021-06-16ld.elf_so(1): Omit needless membar_enter.riastradh
The use of membar_enter is to separate atomic r/m/w on a lock from the body of the critical section so two different critical sections happen in order: body of previous critical section; exit critical section: membar_exit(); atomic_r/m/w(lock stuff); enter critical section: atomic_r/m/w(lock stuff); membar_enter(); body of next critical section; _rtld_shared_enter does this, but it _also_ issued an extraneous membar_enter before the atomic_r/m/w part, which doesn't impose any semantically important order but may cost some performance.
2021-05-30Don't use the return address hack with clang.joerg
2021-05-05don't assume host BUFSIZ is sufficent. small BUFSIZ leads tomrg
always happens errors in the testsuite. switch all these buffers to be 4KiB sized. reported by embr <git@liclac.eu>
2021-05-05include <stdint.h>. bozo_unconst() uses uintptr_t defined here.mrg
from embr <git@liclac.eu>.
2021-04-08bozohttpd: fix argument type for functions from <ctype.h>rillig
Found by the recently added check to lint (message 342). ok mrg@
2021-04-08bozohttpd-small: fix typo in SRCS, fix targets dependall and lintrillig
The additional ':' after 'main.c' had no effect on the compilation since the suffix is removed when computing the list of object files. The ':' excluded main.c from the dependency computation and from lint. By defining CPPFLAGS instead of CFLAGS, the default "-O2" steps in again, and the proper flags are passed to lint, which did not work before at all because it could not find an included file.
2021-04-08bozohttpd-small: fix error handling for unifdefrillig
The second of the '$$?' was spelled only '$?'. At the time where this shell expression was evaluated, it had already been overwritten by the preceding command '['.
2021-04-04avoid DoS in initial request size, which is now bounded at 16KiB.mrg
reported by Justin Parrott in PR#56085.
2021-03-06Don't or the got object in, just assign it. Fixes cc -mabi=64 hello.c -lcryptochristos
Now all 64 bit binaries work, and I tested that we did not break the 32 bit ones XXX: That 0x80000000 seems wrong for 64 bit stuff.
2021-03-06pretend we know about %# and %j...christos
2021-02-28libexec/httpd: fix cross-site scripting in Lua examplerillig
curl \ --header 'NAME<x>: <y>' \ 'http://127.0.0.1:8080/test/printenv?<b>=<i>'
2021-02-28update version, dates, add emily to list of contributors. sort list.mrg
2021-02-28avoid warnings from the previous when using objdirs.mrg
2021-02-28give BOZOVER a default so exporting a distfile is easy.mrg
2021-02-27changes in bozohttpd 20210227:mrg
o new support for content types: .tar.bz2, .tar.xz, .tar.lz, .tar.zst, .tbz2, .txz, .tlz, .zipx, .xz, .zst, .sz, .lz, .lzma, .lzo, .7z, .lzo, .cab, .dmg, .jar, and .rar. should fix netbsd PR#56026: MIME type of .tar.xz file on ny{cdn,ftp}.NetBSD.org is invalid
2021-02-27belated call version 20210211 after previous memory leak fix.mrg
2021-02-11clean up issues detected by address sanitizer (just some memorymrg
leaks that only apply to the library version.) XXX: the handling of hr_file and its variants is more crappy again - the prior clean up is slightly less clean now, but at least it does not leak memory. XXX2: cgi-bin test hangs with address sanitizer. don't know why yet..
2021-02-11changes in bozohttpd 20210210:mrg
o fix various NULL derefs from malformed headers. mostly from <emily@ingalls.rocks>.
2021-01-17also set -D_DEFAULT_SOURCE to open up more headers.mrg
allow passing $(EXTRALIBS).
2020-11-19Bozohttpd clobbers files greater than 4GB on 32bit archs.hannken
Make sure the alignment mask derived from pagesize is an off_t.
2020-10-15New sentence, new line. Fix xref.wiz
2020-10-15various updates from <henrik@gulbra.net> / freebsd. the list from Henrik:mrg
bozohttpd.8: o Added -d flag to the man page o Moved -E flag in man page to keep alphabetic order o Grammar fix for description of -E flag in man page o Moved a word in the man description for the -f flag o Made -f imply -b as a backwards-compatible shortcut o Updated man description of -n to mention Lua scripts o Moved -z below -Z to keep the uppercase options first bozohttpd.c: o Removed obsolete comment about ~user missing cgi-bin support o Removed "/* ARGSUSED */" lines; was that a macro or a reminder? o Added USE_ARG macro call for sig, which was otherwise not used o Added USE_ARG macro call for msg (only used if debug is enabled) bozohttpd.h: o Fixed typo in the include guard (BOZOHTTOPD_H_ -> BOZOHTTPD_H_) o Renamed have_all to have_core; it didn't mean "all" options content-bozo.c: o Added USE_ARG macro call for signo, which was otherwise not used o Made -f imply -b as a backwards-compatible shortcut main.c: o Simplified -b text to be symmetric with that for the -f option o Updated -C text to make "suffix" explicit; it's better than "arg" o Changed to only show the -E description if have_user is true o Always show the -e option, which incorrectly used the -E logic o Renamed have_all to have_core; it didn't mean "all" options o Added three missing tabs for the description of the -G option o Updated -L text to make "prefix" explicit; it's better than "arg" o Updated -M text to make "suffix" explicit; it's slightly better o Added a previously missing description for the -n option o Documented the otherwise obscure valid types for the -T option o Shortened "username" to "user" to match the actual help text o Moved handling of -c below that for -C to standardize the order o Broke the enabling test for -C into two lines for consistency o Inverted the enabling test for -E; this is what was meant, right? o Removed the enabling test for -e, which should always be enabled ssl-bozo.c: o Added USE_ARG for httpd, which is not used if SSL has been excluded
2020-10-15set -D_GNU_SOURCE in Makefile.boot. from hadrien.lacour@posteo.net.mrg
also match %2F as well as %2f. from leah@vuxu.org. introduce defines for "80" and "443". copyright maint.
2020-09-22Correct r_ldbase valusekamil
It shall be the relocbase value, not linkmap.
2020-09-21Upgrade the SVR4 RTLD r_debug protocol to version 1kamil
Changes: - Add a new field r_ldbase in the r_debug struct. - Set r_version to 1. This harmonizes the support with OpenBSD and Linux. FreeBSD uses version 0 (or no version). Solaris uses version 2 that is not implemented elsewhere and relies on SVR4 specific design and interfaces. Update the code comments as r_debug and link_map is used by other software than GDB, namely: sanitizers, rump, LLDB.
2020-09-12bozohttpd: correct .m4a to audio/mp4.rhialto
2020-09-12bozohttpd: add .m4a and .m4v file extensions.rhialto