The NetBSD Project

CVS log for src/libexec/httpd/bozohttpd.h

[BACK] Up to [cvs.NetBSD.org] / src / libexec / httpd

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.73 / (download) - annotate - [select for diffs], Mon Sep 12 10:30:39 2022 UTC (18 months, 2 weeks ago) by martin
Branch: MAIN
CVS Tags: netbsd-10-base, netbsd-10-0-RELEASE, netbsd-10-0-RC6, netbsd-10-0-RC5, netbsd-10-0-RC4, netbsd-10-0-RC3, netbsd-10-0-RC2, netbsd-10-0-RC1, netbsd-10, bozohttpd-20240126, HEAD
Changes since 1.72: +2 -1 lines
Diff to previous 1.72 (colored) to selected 1.33.2.6.2.3 (colored)

Add a -q option to make http quiet (no log messages).

Usefull when running multiple instances and some for (high traffic)
APIs e.g. to receive log data from appliences - it makes not sense
to duplicate the whole log in the xferlog file (but we can't configure
that at the syslog level due to other httpd instances using that).

Revision 1.72 / (download) - annotate - [select for diffs], Wed May 18 00:37:11 2022 UTC (22 months, 1 week ago) by mrg
Branch: MAIN
CVS Tags: bozohttpd-20220517
Changes since 1.71: +2 -2 lines
Diff to previous 1.71 (colored) to selected 1.33.2.6.2.3 (colored)

call this bozohttpd 20220517.

Revision 1.71 / (download) - annotate - [select for diffs], Tue Jan 4 06:08:14 2022 UTC (2 years, 2 months ago) by kim
Branch: MAIN
Changes since 1.70: +1 -4 lines
Diff to previous 1.70 (colored) to selected 1.33.2.6.2.3 (colored)

bozohttpd: remove obsolete .bzdirect handling

OK mrg@

Revision 1.70 / (download) - annotate - [select for diffs], Tue Aug 24 09:47:36 2021 UTC (2 years, 7 months ago) by mrg
Branch: MAIN
Changes since 1.69: +2 -1 lines
Diff to previous 1.69 (colored) to selected 1.33.2.6.2.3 (colored)

implement tls minimum version setting.

mostly from sunil@nimmagadda.net in PR#55830, though i moved the
member into the main http structure, so that it doesn't trigger
sslinfo being allocated via command line without the rest of the
ssl being setup (which then leads to crashes.)

Revision 1.69 / (download) - annotate - [select for diffs], Wed May 5 07:41:48 2021 UTC (2 years, 10 months ago) by mrg
Branch: MAIN
CVS Tags: cjep_sun2x-base1, cjep_sun2x-base, cjep_sun2x, cjep_staticlib_x-base1, cjep_staticlib_x-base, cjep_staticlib_x
Changes since 1.68: +3 -1 lines
Diff to previous 1.68 (colored) to selected 1.33.2.6.2.3 (colored)

don't assume host BUFSIZ is sufficent.  small BUFSIZ leads to
always happens errors in the testsuite.  switch all these buffers
to be 4KiB sized.  reported by embr <git@liclac.eu>

Revision 1.47.4.4 / (download) - annotate - [select for diffs], Sat Mar 27 13:38:51 2021 UTC (3 years ago) by martin
Branch: netbsd-8
Changes since 1.47.4.3: +21 -8 lines
Diff to previous 1.47.4.3 (colored) to branchpoint 1.47 (colored) next main 1.48 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up the following via patch, requested by mrg in ticket #1668:

	Makefile			1.30-1.31
	Makefile.boot			1.7-1.9
	auth-bozo.c			1.25-1.26
	bozohttpd.8			1.80-1.87
	bozohttpd.c			1.114-1.123,1.125-1.128
	bozohttpd.h			1.61-1.68
	cgi-bozo.c			1.49-1.53
	content-bozo.c			1.17-1.20
	daemon-bozo.c			1-.22
	dir-index-bozo.c		1.33-1.34
	main.c				1.23-1.27
	printenv.lua			1.4-1.5
	ssl-bozo.c			1.27-1.29
	libbozohttpd/libbozohttpd.3	1.5-1.6
	small/Makefile			1.4
	testsuite/Makefile		1.14
	testsuite/t16.in		1.1
	testsuite/t16.out		1.1
	testsuite/t17.in		1.1
	testsuite/t17.out		1.1
	testsuite/t18.in		1.1
	testsuite/t18.out		1.1

Update to bozohttpd 20210227.


changes in bozohttpd 20210227:
	o  new support for content types: .tar.bz2, .tar.xz, .tar.lz,
	   .tar.zst, .tbz2, .txz, .tlz, .zipx, .xz, .zst, .sz, .lz, .lzma,
	   .lzo, .7z, .lzo, .cab, .dmg, .jar, and .rar.  should fix
	   netbsd PR#56026:
	   MIME type of .tar.xz file on ny{cdn,ftp}.NetBSD.org is invalid

changes in bozohttpd 20210211:
	o  fix various NULL derefs from malformed headers.  mostly from
	   <emily@ingalls.rocks>.
	o  fix memory leaks in library interface: add bozo_cleanup().

changes in bozohttpd 20201014:
	o  also set -D_GNU_SOURCE in Makefile.boot.  from
	   hadrien.lacour@posteo.net.
	o  fix array size botch (assertion, not exploitable.)  from
	   martin@netbsd.org.
	o  also match %2F as well as %2f.  from leah@vuxu.org.
	o  many manual and help fixes.  clean ups for higher lint levels,
	   consistency/style clean ups.  various option fixes including made
	   -f imply -b.  from <henrik@gulbra.net> for freebsd.

changes in bozohttpd 20200912:
	o  add .m4a and .m4v file extensions.

changes in bozohttpd 20200820:
	o  make this work on sun2 by reducing mmap window there.
	o  fix SSL shutdown sequence.  from spz@netbsd.org.
	o  add readme support to directory indexing.  from jmcneill@netbsd.org
	o  add blocklist(8) support.  from jruoho@netbsd.org.

Revision 1.60.2.1 / (download) - annotate - [select for diffs], Fri Mar 5 13:34:19 2021 UTC (3 years ago) by martin
Branch: netbsd-9
CVS Tags: netbsd-9-3-RELEASE, netbsd-9-2-RELEASE
Changes since 1.60: +21 -8 lines
Diff to previous 1.60 (colored) next main 1.61 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up the following (all via patch), requested by mrg in ticket #1221:

	lib/lua/bozohttpd/Makefile			(apply patch)
	libexec/httpd/Makefile				1.30-1.31
	libexec/httpd/Makefile.boot			1.7-1.9
	libexec/httpd/auth-bozo.c			1.25-1.26
	libexec/httpd/bozohttpd.8			1.80-1.87
	libexec/httpd/bozohttpd.c			1.114-1.123,1.125-1.128
	libexec/httpd/bozohttpd.h			1.61-1.68
	libexec/httpd/cgi-bozo.c			1.49-1.53
	libexec/httpd/content-bozo.c			1.17-1.20
	libexec/httpd/daemon-bozo.c			1-.22
	libexec/httpd/dir-index-bozo.c			1.33-1.34
	libexec/httpd/main.c				1.23-1.27
	libexec/httpd/printenv.lua			1.4-1.5
	libexec/httpd/ssl-bozo.c			1.27-1.29
	libexec/httpd/libbozohttpd/libbozohttpd.3	1.5-1.6
	libexec/httpd/small/Makefile			1.4
	libexec/httpd/testsuite/Makefile		1.14
	libexec/httpd/testsuite/t16.in			1.1
	libexec/httpd/testsuite/t16.out			1.1
	libexec/httpd/testsuite/t17.in			1.1
	libexec/httpd/testsuite/t17.out			1.1
	libexec/httpd/testsuite/t18.in			1.1
	libexec/httpd/testsuite/t18.out			1.1


Update to bozohttpd 20210227.
Apply lua build fix (no blocklist support on this branch).

changes in bozohttpd 20210227:
	o  new support for content types: .tar.bz2, .tar.xz, .tar.lz,
	   .tar.zst, .tbz2, .txz, .tlz, .zipx, .xz, .zst, .sz, .lz, .lzma,
	   .lzo, .7z, .lzo, .cab, .dmg, .jar, and .rar.  should fix
	   netbsd PR#56026:
	   MIME type of .tar.xz file on ny{cdn,ftp}.NetBSD.org is invalid

changes in bozohttpd 20210211:
	o  fix various NULL derefs from malformed headers.  mostly from
	   <emily@ingalls.rocks>.
	o  fix memory leaks in library interface: add bozo_cleanup().

changes in bozohttpd 20201014:
	o  also set -D_GNU_SOURCE in Makefile.boot.  from
	   hadrien.lacour@posteo.net.
	o  fix array size botch (assertion, not exploitable.)  from
	   martin@netbsd.org.
	o  also match %2F as well as %2f.  from leah@vuxu.org.
	o  many manual and help fixes.  clean ups for higher lint levels,
	   consistency/style clean ups.  various option fixes including made
	   -f imply -b.  from <henrik@gulbra.net> for freebsd.

changes in bozohttpd 20200912:
	o  add .m4a and .m4v file extensions.

changes in bozohttpd 20200820:
	o  make this work on sun2 by reducing mmap window there.
	o  fix SSL shutdown sequence.  from spz@netbsd.org.
	o  add readme support to directory indexing.  from jmcneill@netbsd.org
	o  add blocklist(8) support.  from jruoho@netbsd.org.

Revision 1.68 / (download) - annotate - [select for diffs], Sat Feb 27 12:36:46 2021 UTC (3 years, 1 month ago) by mrg
Branch: MAIN
CVS Tags: bozohttpd-20210227
Changes since 1.67: +2 -2 lines
Diff to previous 1.67 (colored) to selected 1.33.2.6.2.3 (colored)

belated call version 20210211 after previous memory leak fix.

Revision 1.67 / (download) - annotate - [select for diffs], Thu Feb 11 09:57:52 2021 UTC (3 years, 1 month ago) by mrg
Branch: MAIN
Changes since 1.66: +2 -1 lines
Diff to previous 1.66 (colored) to selected 1.33.2.6.2.3 (colored)

clean up issues detected by address sanitizer (just some memory
leaks that only apply to the library version.)

XXX: the handling of hr_file and its variants is more crappy
again - the prior clean up is slightly less clean now, but at
least it does not leak memory.

XXX2: cgi-bin test hangs with address sanitizer.  don't know
why yet..

Revision 1.66 / (download) - annotate - [select for diffs], Thu Feb 11 09:23:55 2021 UTC (3 years, 1 month ago) by mrg
Branch: MAIN
Changes since 1.65: +3 -2 lines
Diff to previous 1.65 (colored) to selected 1.33.2.6.2.3 (colored)

changes in bozohttpd 20210210:
	o  fix various NULL derefs from malformed headers.  mostly from
	   <emily@ingalls.rocks>.

Revision 1.65 / (download) - annotate - [select for diffs], Thu Oct 15 04:21:53 2020 UTC (3 years, 5 months ago) by mrg
Branch: MAIN
CVS Tags: bozohttpd-20201014
Changes since 1.64: +6 -6 lines
Diff to previous 1.64 (colored) to selected 1.33.2.6.2.3 (colored)

various updates from <henrik@gulbra.net> / freebsd.  the list from Henrik:

bozohttpd.8:
    o Added -d flag to the man page
    o Moved -E flag in man page to keep alphabetic order
    o Grammar fix for description of -E flag in man page
    o Moved a word in the man description for the -f flag
    o Made -f imply -b as a backwards-compatible shortcut
    o Updated man description of -n to mention Lua scripts
    o Moved -z below -Z to keep the uppercase options first

bozohttpd.c:
    o Removed obsolete comment about ~user missing cgi-bin support
    o Removed "/* ARGSUSED */" lines; was that a macro or a reminder?
    o Added USE_ARG macro call for sig, which was otherwise not used
    o Added USE_ARG macro call for msg (only used if debug is enabled)

bozohttpd.h:
    o Fixed typo in the include guard (BOZOHTTOPD_H_ -> BOZOHTTPD_H_)
    o Renamed have_all to have_core; it didn't mean "all" options

content-bozo.c:
    o Added USE_ARG macro call for signo, which was otherwise not used
    o Made -f imply -b as a backwards-compatible shortcut

main.c:
    o Simplified -b text to be symmetric with that for the -f option
    o Updated -C text to make "suffix" explicit; it's better than "arg"
    o Changed to only show the -E description if have_user is true
    o Always show the -e option, which incorrectly used the -E logic
    o Renamed have_all to have_core; it didn't mean "all" options
    o Added three missing tabs for the description of the -G option
    o Updated -L text to make "prefix" explicit; it's better than "arg"
    o Updated -M text to make "suffix" explicit; it's slightly better
    o Added a previously missing description for the -n option
    o Documented the otherwise obscure valid types for the -T option
    o Shortened "username" to "user" to match the actual help text
    o Moved handling of -c below that for -C to standardize the order
    o Broke the enabling test for -C into two lines for consistency
    o Inverted the enabling test for -E; this is what was meant, right?
    o Removed the enabling test for -e, which should always be enabled

ssl-bozo.c:
    o Added USE_ARG for httpd, which is not used if SSL has been excluded

Revision 1.64 / (download) - annotate - [select for diffs], Thu Oct 15 02:19:23 2020 UTC (3 years, 5 months ago) by mrg
Branch: MAIN
Changes since 1.63: +4 -1 lines
Diff to previous 1.63 (colored) to selected 1.33.2.6.2.3 (colored)

set -D_GNU_SOURCE in Makefile.boot.  from hadrien.lacour@posteo.net.
also match %2F as well as %2f.  from leah@vuxu.org.
introduce defines for "80" and "443".  copyright maint.

Revision 1.63 / (download) - annotate - [select for diffs], Thu Aug 20 05:46:31 2020 UTC (3 years, 7 months ago) by spz
Branch: MAIN
CVS Tags: bozohttpd-20200820
Changes since 1.62: +3 -1 lines
Diff to previous 1.62 (colored) to selected 1.33.2.6.2.3 (colored)

send close_notify for the ssl connection before closing the TCP connection
Thanks to Dr. Thomas Orgis for reporting the issue.

Revision 1.62 / (download) - annotate - [select for diffs], Sat Jul 11 08:10:52 2020 UTC (3 years, 8 months ago) by jruoho
Branch: MAIN
Changes since 1.61: +7 -2 lines
Diff to previous 1.61 (colored) to selected 1.33.2.6.2.3 (colored)

Add blocklistd(8) support.

Revision 1.61 / (download) - annotate - [select for diffs], Mon Jul 6 23:31:36 2020 UTC (3 years, 8 months ago) by jmcneill
Branch: MAIN
Changes since 1.60: +2 -1 lines
Diff to previous 1.60 (colored) to selected 1.33.2.6.2.3 (colored)

Add -R flag to specify a README file to add at the bottom of directory
autoindex listings.

Revision 1.33.2.2.2.6 / (download) - annotate - [select for diffs], Sat Jun 15 15:57:32 2019 UTC (4 years, 9 months ago) by martin
Branch: netbsd-7-0
Changes since 1.33.2.2.2.5: +19 -3 lines
Diff to previous 1.33.2.2.2.5 (colored) to branchpoint 1.33.2.2 (colored) next main 1.33.2.3 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up the following revisions (via patch) requested by mrg in ticket #1699:

	libexec/httpd/CHANGES			1.31-1.40
	libexec/httpd/Makefile			1.28
	libexec/httpd/auth-bozo.c		1.23-1.24
	libexec/httpd/bozohttpd.8		1.75-1.79
	libexec/httpd/bozohttpd.c		1.100-1.113
	libexec/httpd/bozohttpd.h		1.58-1.60
	libexec/httpd/cgi-bozo.c		1.46-1.48
	libexec/httpd/daemon-bozo.c		1.20-1.21
	libexec/httpd/dir-index-bozo.c		1.29-1.32
	libexec/httpd/ssl-bozo.c		1.26
	libexec/httpd/testsuite/Makefile	1.12-1.13
	libexec/httpd/testsuite/t11.out 	1.2
	libexec/httpd/testsuite/test-bigfile	1.6
	libexec/httpd/testsuite/test-simple	1.6

Don't display special files in the directory index.  They aren't
served, but links to them are generated.
---
All from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>:
- use html tables for directory index.
- don't include "index.html" in html headers
- additional escaping of names
- re-add top/bottom borders
- adds an aquamarine table header
- Zebra-stripes table rows using CSS instead of code
- fix CGI '+' param and error handling.
- remove unused parameter to daemon_poll_err().
- avoid sign extension in % handling
fix a few problems pointed out by clang static analyzer:
- bozostrnsep() may return with "in = NULL", so check for it.
- nul terminating in bozo_escape_rfc3986() can be simpler
- don't use uniinit variables in check_remap()
- don't use re-used freed data in check_virtual().
- fix bozoprefs->size setting when increasing the size (new total was
  being added to the prior total.)
  however, bozostrdup() may reference request->hr_file.
---
Add ssl specific timeout value (30s).  If SSL_accept() doesn't
work with in this timeout value, ssl setup now fails.
---
Fix handling of bozo_set_timeout() timeouts (and `-T' option parsing)
---
Avoid .htpasswd exposure to authenticated users when .htpasswd is
in the slashdir too.
---
Avoid possible NULL dereference when sending a big request that timeout.
---
Use strings.h for strcasecmp (on linux)
---
Account for cgihandler being set when counting the number of CGI environment
headers we are about to set. Avoids an assertion failure (and overruninng
the array) later.

Revision 1.33.2.6.2.3 / (download) - annotate - [selected], Sat Jun 15 15:56:21 2019 UTC (4 years, 9 months ago) by martin
Branch: netbsd-7-1
Changes since 1.33.2.6.2.2: +19 -3 lines
Diff to previous 1.33.2.6.2.2 (colored) to branchpoint 1.33.2.6 (colored) next main 1.33.2.7 (colored)

Pull up the following revisions (via patch) requested by mrg in ticket #1699:

	libexec/httpd/CHANGES			1.31-1.40
	libexec/httpd/Makefile			1.28
	libexec/httpd/auth-bozo.c		1.23-1.24
	libexec/httpd/bozohttpd.8		1.75-1.79
	libexec/httpd/bozohttpd.c		1.100-1.113
	libexec/httpd/bozohttpd.h		1.58-1.60
	libexec/httpd/cgi-bozo.c		1.46-1.48
	libexec/httpd/daemon-bozo.c		1.20-1.21
	libexec/httpd/dir-index-bozo.c		1.29-1.32
	libexec/httpd/ssl-bozo.c		1.26
	libexec/httpd/testsuite/Makefile	1.12-1.13
	libexec/httpd/testsuite/t11.out 	1.2
	libexec/httpd/testsuite/test-bigfile	1.6
	libexec/httpd/testsuite/test-simple	1.6

Don't display special files in the directory index.  They aren't
served, but links to them are generated.
---
All from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>:
- use html tables for directory index.
- don't include "index.html" in html headers
- additional escaping of names
- re-add top/bottom borders
- adds an aquamarine table header
- Zebra-stripes table rows using CSS instead of code
- fix CGI '+' param and error handling.
- remove unused parameter to daemon_poll_err().
- avoid sign extension in % handling
fix a few problems pointed out by clang static analyzer:
- bozostrnsep() may return with "in = NULL", so check for it.
- nul terminating in bozo_escape_rfc3986() can be simpler
- don't use uniinit variables in check_remap()
- don't use re-used freed data in check_virtual().
- fix bozoprefs->size setting when increasing the size (new total was
  being added to the prior total.)
  however, bozostrdup() may reference request->hr_file.
---
Add ssl specific timeout value (30s).  If SSL_accept() doesn't
work with in this timeout value, ssl setup now fails.
---
Fix handling of bozo_set_timeout() timeouts (and `-T' option parsing)
---
Avoid .htpasswd exposure to authenticated users when .htpasswd is
in the slashdir too.
---
Avoid possible NULL dereference when sending a big request that timeout.
---
Use strings.h for strcasecmp (on linux)
---
Account for cgihandler being set when counting the number of CGI environment
headers we are about to set. Avoids an assertion failure (and overruninng
the array) later.

Revision 1.33.2.9 / (download) - annotate - [select for diffs], Sat Jun 15 15:54:58 2019 UTC (4 years, 9 months ago) by martin
Branch: netbsd-7
Changes since 1.33.2.8: +19 -3 lines
Diff to previous 1.33.2.8 (colored) to branchpoint 1.33 (colored) next main 1.34 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up the following revisions (via patch) requested by mrg in ticket #1699:

	libexec/httpd/CHANGES			1.31-1.40
	libexec/httpd/Makefile			1.28
	libexec/httpd/auth-bozo.c		1.23-1.24
	libexec/httpd/bozohttpd.8		1.75-1.79
	libexec/httpd/bozohttpd.c		1.100-1.113
	libexec/httpd/bozohttpd.h		1.58-1.60
	libexec/httpd/cgi-bozo.c		1.46-1.48
	libexec/httpd/daemon-bozo.c		1.20-1.21
	libexec/httpd/dir-index-bozo.c		1.29-1.32
	libexec/httpd/ssl-bozo.c		1.26
	libexec/httpd/testsuite/Makefile	1.12-1.13
	libexec/httpd/testsuite/t11.out 	1.2
	libexec/httpd/testsuite/test-bigfile	1.6
	libexec/httpd/testsuite/test-simple	1.6

Don't display special files in the directory index.  They aren't
served, but links to them are generated.
---
All from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>:
- use html tables for directory index.
- don't include "index.html" in html headers
- additional escaping of names
- re-add top/bottom borders
- adds an aquamarine table header
- Zebra-stripes table rows using CSS instead of code
- fix CGI '+' param and error handling.
- remove unused parameter to daemon_poll_err().
- avoid sign extension in % handling
fix a few problems pointed out by clang static analyzer:
- bozostrnsep() may return with "in = NULL", so check for it.
- nul terminating in bozo_escape_rfc3986() can be simpler
- don't use uniinit variables in check_remap()
- don't use re-used freed data in check_virtual().
- fix bozoprefs->size setting when increasing the size (new total was
  being added to the prior total.)
  however, bozostrdup() may reference request->hr_file.
---
Add ssl specific timeout value (30s).  If SSL_accept() doesn't
work with in this timeout value, ssl setup now fails.
---
Fix handling of bozo_set_timeout() timeouts (and `-T' option parsing)
---
Avoid .htpasswd exposure to authenticated users when .htpasswd is
in the slashdir too.
---
Avoid possible NULL dereference when sending a big request that timeout.
---
Use strings.h for strcasecmp (on linux)
---
Account for cgihandler being set when counting the number of CGI environment
headers we are about to set. Avoids an assertion failure (and overruninng
the array) later.

Revision 1.47.4.3 / (download) - annotate - [select for diffs], Wed Jun 12 10:32:00 2019 UTC (4 years, 9 months ago) by martin
Branch: netbsd-8
CVS Tags: netbsd-8-2-RELEASE
Changes since 1.47.4.2: +19 -3 lines
Diff to previous 1.47.4.2 (colored) to branchpoint 1.47 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up the following revisions (via patch) requested by mrg in ticket #1281:

	libexec/httpd/CHANGES			1.31-1.40
	libexec/httpd/Makefile			1.28
	libexec/httpd/auth-bozo.c		1.23-1.24
	libexec/httpd/bozohttpd.8		1.75-1.79
	libexec/httpd/bozohttpd.c		1.100-1.113
	libexec/httpd/bozohttpd.h		1.58-1.60
	libexec/httpd/cgi-bozo.c		1.46-1.48
	libexec/httpd/daemon-bozo.c		1.20-1.21
	libexec/httpd/dir-index-bozo.c		1.29-1.32
	libexec/httpd/ssl-bozo.c		1.26
	libexec/httpd/testsuite/Makefile	1.12-1.13
	libexec/httpd/testsuite/t11.out		1.2
	libexec/httpd/testsuite/test-bigfile	1.6
	libexec/httpd/testsuite/test-simple	1.6


Don't display special files in the directory index.  They aren't
served, but links to them are generated.
---
All from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>:
- use html tables for directory index.
- don't include "index.html" in html headers
- additional escaping of names
- re-add top/bottom borders
- adds an aquamarine table header
- Zebra-stripes table rows using CSS instead of code
- fix CGI '+' param and error handling.
- remove unused parameter to daemon_poll_err().
- avoid sign extension in % handling
fix a few problems pointed out by clang static analyzer:
- bozostrnsep() may return with "in = NULL", so check for it.
- nul terminating in bozo_escape_rfc3986() can be simpler
- don't use uniinit variables in check_remap()
- don't use re-used freed data in check_virtual().
- fix bozoprefs->size setting when increasing the size (new total was
  being added to the prior total.)
  however, bozostrdup() may reference request->hr_file.
---
Add ssl specific timeout value (30s).  If SSL_accept() doesn't
work with in this timeout value, ssl setup now fails.
---
Fix handling of bozo_set_timeout() timeouts (and `-T' option parsing)
---
Avoid .htpasswd exposure to authenticated users when .htpasswd is
in the slashdir too.
---
Avoid possible NULL dereference when sending a big request that timeout.
---
Use strings.h for strcasecmp (on linux)
---
Account for cgihandler being set when counting the number of CGI environment
headers we are about to set. Avoids an assertion failure (and overruninng
the array) later.

Revision 1.49.2.1 / (download) - annotate - [select for diffs], Mon Jun 10 22:05:29 2019 UTC (4 years, 9 months ago) by christos
Branch: phil-wifi
Changes since 1.49: +107 -31 lines
Diff to previous 1.49 (colored) next main 1.50 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with HEAD

Revision 1.60 / (download) - annotate - [select for diffs], Fri Mar 8 03:12:28 2019 UTC (5 years ago) by mrg
Branch: MAIN
CVS Tags: phil-wifi-20200421, phil-wifi-20200411, phil-wifi-20200406, phil-wifi-20191119, phil-wifi-20190609, netbsd-9-base, netbsd-9-1-RELEASE, netbsd-9-0-RELEASE, netbsd-9-0-RC2, netbsd-9-0-RC1, is-mlppp-base, is-mlppp
Branch point for: netbsd-9
Changes since 1.59: +11 -1 lines
Diff to previous 1.59 (colored) to selected 1.33.2.6.2.3 (colored)

on m68010 set BOZO_WRSZ to 16k and BOZO_WRSZ to 64k.

Revision 1.59 / (download) - annotate - [select for diffs], Thu Feb 28 08:28:21 2019 UTC (5 years, 1 month ago) by mrg
Branch: MAIN
CVS Tags: bozohttpd-20190228
Changes since 1.58: +6 -2 lines
Diff to previous 1.58 (colored) to selected 1.33.2.6.2.3 (colored)

add ssl specific timeout value (30s).  if SSL_accept() doesn't
work with in this timeout value, ssl setup now fails.

mostly different from, but inspired from the patch in PR 50655

Revision 1.47.10.3 / (download) - annotate - [select for diffs], Sat Jan 26 21:59:58 2019 UTC (5 years, 2 months ago) by pgoyette
Branch: pgoyette-compat
CVS Tags: pgoyette-compat-merge-20190127
Changes since 1.47.10.2: +4 -2 lines
Diff to previous 1.47.10.2 (colored) to branchpoint 1.47 (colored) next main 1.48 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with HEAD

Revision 1.58 / (download) - annotate - [select for diffs], Tue Jan 22 05:32:57 2019 UTC (5 years, 2 months ago) by mrg
Branch: MAIN
CVS Tags: pgoyette-compat-20190127
Changes since 1.57: +4 -2 lines
Diff to previous 1.57 (colored) to selected 1.33.2.6.2.3 (colored)

o  don't display special files in the directory index.  they aren't
   served, but links to them are generated.

Revision 1.33.2.2.2.5 / (download) - annotate - [select for diffs], Wed Nov 28 19:57:50 2018 UTC (5 years, 4 months ago) by martin
Branch: netbsd-7-0
Changes since 1.33.2.2.2.4: +2 -2 lines
Diff to previous 1.33.2.2.2.4 (colored) to branchpoint 1.33.2.2 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1659):

	libexec/httpd/main.c: revision 1.22
	libexec/httpd/CHANGES: revision 1.29
	libexec/httpd/cgi-bozo.c: revision 1.45
	libexec/httpd/bozohttpd.h: revision 1.57
	libexec/httpd/CHANGES: revision 1.30
	libexec/httpd/bozohttpd.c: revision 1.97
	libexec/httpd/bozohttpd.c: revision 1.98
	libexec/httpd/bozohttpd.c: revision 1.99

one semicolon is usually enough.

 -

appease lint

- add FALLTHROUGH comment
- one return is usually enough.

 -

avoid c99ism.

 -

fix -X option parsing.  noted by Rajeev V. Pillai.

 -

add option fixes here.

 -

normalise some messages.

Revision 1.33.2.6.2.2 / (download) - annotate - [select for diffs], Wed Nov 28 19:56:09 2018 UTC (5 years, 4 months ago) by martin
Branch: netbsd-7-1
Changes since 1.33.2.6.2.1: +2 -2 lines
Diff to previous 1.33.2.6.2.1 (colored) to branchpoint 1.33.2.6 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1659):

	libexec/httpd/main.c: revision 1.22
	libexec/httpd/CHANGES: revision 1.29
	libexec/httpd/cgi-bozo.c: revision 1.45
	libexec/httpd/bozohttpd.h: revision 1.57
	libexec/httpd/CHANGES: revision 1.30
	libexec/httpd/bozohttpd.c: revision 1.97
	libexec/httpd/bozohttpd.c: revision 1.98
	libexec/httpd/bozohttpd.c: revision 1.99

one semicolon is usually enough.

 -

appease lint

- add FALLTHROUGH comment
- one return is usually enough.

 -

avoid c99ism.

 -

fix -X option parsing.  noted by Rajeev V. Pillai.

 -

add option fixes here.

 -

normalise some messages.

Revision 1.33.2.8 / (download) - annotate - [select for diffs], Wed Nov 28 19:54:18 2018 UTC (5 years, 4 months ago) by martin
Branch: netbsd-7
Changes since 1.33.2.7: +2 -2 lines
Diff to previous 1.33.2.7 (colored) to branchpoint 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1659):

	libexec/httpd/main.c: revision 1.22
	libexec/httpd/CHANGES: revision 1.29
	libexec/httpd/cgi-bozo.c: revision 1.45
	libexec/httpd/bozohttpd.h: revision 1.57
	libexec/httpd/CHANGES: revision 1.30
	libexec/httpd/bozohttpd.c: revision 1.97
	libexec/httpd/bozohttpd.c: revision 1.98
	libexec/httpd/bozohttpd.c: revision 1.99

one semicolon is usually enough.

 -

appease lint

- add FALLTHROUGH comment
- one return is usually enough.

 -

avoid c99ism.

 -

fix -X option parsing.  noted by Rajeev V. Pillai.

 -

add option fixes here.

 -

normalise some messages.

Revision 1.47.4.2 / (download) - annotate - [select for diffs], Wed Nov 28 19:50:37 2018 UTC (5 years, 4 months ago) by martin
Branch: netbsd-8
CVS Tags: netbsd-8-1-RELEASE, netbsd-8-1-RC1
Changes since 1.47.4.1: +2 -2 lines
Diff to previous 1.47.4.1 (colored) to branchpoint 1.47 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1109):

	libexec/httpd/main.c: revision 1.22
	libexec/httpd/CHANGES: revision 1.29
	libexec/httpd/cgi-bozo.c: revision 1.45
	libexec/httpd/bozohttpd.h: revision 1.57
	libexec/httpd/CHANGES: revision 1.30
	libexec/httpd/bozohttpd.c: revision 1.97
	libexec/httpd/bozohttpd.c: revision 1.98
	libexec/httpd/bozohttpd.c: revision 1.99

one semicolon is usually enough.

 -

appease lint

- add FALLTHROUGH comment
- one return is usually enough.

 -

avoid c99ism.

 -

fix -X option parsing.  noted by Rajeev V. Pillai.

 -

add option fixes here.

 -

normalise some messages.

Revision 1.47.10.2 / (download) - annotate - [select for diffs], Mon Nov 26 01:52:13 2018 UTC (5 years, 4 months ago) by pgoyette
Branch: pgoyette-compat
Changes since 1.47.10.1: +91 -31 lines
Diff to previous 1.47.10.1 (colored) to branchpoint 1.47 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with HEAD, resolve a couple of conflicts

Revision 1.33.2.2.2.4 / (download) - annotate - [select for diffs], Sat Nov 24 17:23:47 2018 UTC (5 years, 4 months ago) by martin
Branch: netbsd-7-0
Changes since 1.33.2.2.2.3: +94 -31 lines
Diff to previous 1.33.2.2.2.3 (colored) to branchpoint 1.33.2.2 (colored) to selected 1.33.2.6.2.3 (colored)

Sync to HEAD (requested by mrg in ticket #1655):

	libexec/httpd/testsuite/data/.bzremap           up to 1.1
	libexec/httpd/testsuite/t12.out                 up to 1.1
	libexec/httpd/testsuite/t12.in                  up to 1.1
	libexec/httpd/testsuite/t13.out                 up to 1.1
	libexec/httpd/testsuite/t13.in                  up to 1.1
	libexec/httpd/testsuite/t14.out                 up to 1.1
	libexec/httpd/testsuite/t14.in                  up to 1.1
	libexec/httpd/testsuite/t15.out                 up to 1.1
	libexec/httpd/testsuite/t15.in                  up to 1.1
	libexec/httpd/CHANGES                           up to 1.28
	libexec/httpd/Makefile                          up to 1.27
	libexec/httpd/auth-bozo.c                       up to 1.22
	libexec/httpd/bozohttpd.8                       up to 1.74
	libexec/httpd/bozohttpd.c                       up to 1.96
	libexec/httpd/bozohttpd.h                       up to 1.56
	libexec/httpd/cgi-bozo.c                        up to 1.44
	libexec/httpd/content-bozo.c                    up to 1.16
	libexec/httpd/daemon-bozo.c                     up to 1.19
	libexec/httpd/dir-index-bozo.c                  up to 1.28
	libexec/httpd/lua-bozo.c                        up to 1.15
	libexec/httpd/main.c                            up to 1.21
	libexec/httpd/ssl-bozo.c                        up to 1.25
	libexec/httpd/tilde-luzah-bozo.c                up to 1.16
	libexec/httpd/libbozohttpd/Makefile             up to 1.3
	libexec/httpd/lua/bozo.lua                      up to 1.3
	libexec/httpd/lua/glue.c                        up to 1.5
	libexec/httpd/lua/optparse.lua                  up to 1.2
	libexec/httpd/testsuite/Makefile                up to 1.11
	libexec/httpd/testsuite/html_cmp                up to 1.6
	libexec/httpd/testsuite/t3.out                  up to 1.4
	libexec/httpd/testsuite/t5.out                  up to 1.4
	libexec/httpd/testsuite/t6.out                  up to 1.4
	libexec/httpd/testsuite/test-bigfile            up to 1.5
	libexec/httpd/testsuite/test-simple             up to 1.5

Cosmetic changes to Lua binding in bozohttpd.

- Don't use negative indicies to read arguments of Lua functions.
- On error, return nil, "error string".
- Use ssize_t for return values from bozo_read() and bozo_write().
- Prefer lstring especially when if saves you from appending NUL and
  doing len + 1 which can potentially wraparound.
- Don't mix C allocations with Lua functions marked with "m" in the Lua
  manual. Those functions may throw (longjump) and leak data allocated
  by C function. In one case, I use luaL_Buffer, in the other case,
  I rearranged calls a bit.


fix ordering of a couple of words.  from Edgar Pettijohn in PR#52375.
thanks!


s/u_int/unsigned/.

from Jan Danielsson.  increases/fixes portability.


PR bin/52194: bozohttpd fails to exec scripts via the -C mechanism
sometimes with EFAULT due to not NULL terminated environment.


Document script handler issues with httpd(8).
From martin@, addressing PR 52194.

While here, use American spelling consistently and upper-case some
abbreviations.

Bump date.


fix output since protocol agnostic change went in.

XXX: i thought someone hooked this into atf already, please do :)


Add support for remapping requested paths via a .bzredirect file.
Fixes PR 52772. Ok: mrg@


Bump date


Remove trailing whitespace.


use __func__ in debug().


fix a denial of service attack against header contents, which
is now bounded at 16KiB.  reported by JP.


avoid memory leak in sending multiple auth headers.
mostly mitigated by previous patch to limit total header size,
but still a real problem here.


note the changes present in bozohttpd 20181118:

o  add url remap support via .bzremap file, from martin%netbsd.org@localhost
o  handle redirections for any protocol, not just http:
o  fix a denial of service attack against header contents, which
   is now bounded at 16KiB.  reported by JP.


from CHANGES:

o  reduce default timeouts, and add expand timeouts to handle the
   initial line, each header, and the total time spent
o  add -T option to expose new timeout settings
o  minor RFC fixes related to timeout handling responses

old timeouts:
60 seconds for initial request like, 60 seconds per header line,
and no whole timeout (though the recent total header size changes
do introduce one that would be about 11 hours.)
new timeouts:
30 seconds for initial request like, 10 seconds per header line,
and a total request time of 600 seconds.

the new global timeout is implemented using CLOCK_MONOTONIC, with
a fallback to CLOCK_REALTIME if monotonic time is unavailable.

reject multiple Host: headers.  besides being protocol standard,
this closes one additional memory leak found by JP.  add a simple
test to check this.

clean up option and usage handling some.


move some #if support into bozohttpd.h.


fix previous: have_debug was reversed.


also fix have_dynamic_content from the previous previous.  re-order
the debug and dynamic content to match the same pattern as everything
else so similar problems are less likely in the future.


- move special files defines into bozohttpd.h, so we can ...
- consolidate all the special file checks into
  bozo_check_special_files() so that all builds check the same
  list of special files, regardless of build options.
- convert "(void)bozo_http_error(...); return -1;" into plain
  "return bozo_http_error(...);"
- fix the call to bozo_check_special_files() to be used on all
  input types.  part of the fixes for failure to reject access
  to /.htpasswd as reported by JP on tech-security.
- use warn_unused_result attribute on bozo_check_special_files(),
  and fix the failures to return failure.  second part of the
  htpasswd access fix.
- update testsuite to use a fixed fake hostname.

call this bozohttpd 20181121.


two fixes reported by mouse:
- don't check contents of 'st' if stat(2) failed.
- round up instead of truncate.  now 10000 byte files say 10kB not 9kB.


use MAP_SHARED for the bzremap file.  avoids netbsd kernel complaining:

WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 15478 command bozohttpd)


many clean ups:
- keep a list of special files and their human names
- remove (void) casts on bozo_http_error()
- fix a few more misuses of bozo_http_error()
- rename check_mapping() to check_remap() and perform some CSE
- switch away from ``%s'' to '%s'
- remove a bunch of #ifdef using new have_feature defines


alpha sort the option switch.


add an assert() check on array bounds.


minor style fixes.  simplify bozo_match_content_map().

Revision 1.33.2.6.2.1 / (download) - annotate - [select for diffs], Sat Nov 24 17:23:20 2018 UTC (5 years, 4 months ago) by martin
Branch: netbsd-7-1
Changes since 1.33.2.6: +94 -31 lines
Diff to previous 1.33.2.6 (colored) to selected 1.33.2.6.2.3 (colored)

Sync to HEAD (requested by mrg in ticket #1655):

	libexec/httpd/testsuite/data/.bzremap           up to 1.1
	libexec/httpd/testsuite/t12.out                 up to 1.1
	libexec/httpd/testsuite/t12.in                  up to 1.1
	libexec/httpd/testsuite/t13.out                 up to 1.1
	libexec/httpd/testsuite/t13.in                  up to 1.1
	libexec/httpd/testsuite/t14.out                 up to 1.1
	libexec/httpd/testsuite/t14.in                  up to 1.1
	libexec/httpd/testsuite/t15.out                 up to 1.1
	libexec/httpd/testsuite/t15.in                  up to 1.1
	libexec/httpd/CHANGES                           up to 1.28
	libexec/httpd/Makefile                          up to 1.27
	libexec/httpd/auth-bozo.c                       up to 1.22
	libexec/httpd/bozohttpd.8                       up to 1.74
	libexec/httpd/bozohttpd.c                       up to 1.96
	libexec/httpd/bozohttpd.h                       up to 1.56
	libexec/httpd/cgi-bozo.c                        up to 1.44
	libexec/httpd/content-bozo.c                    up to 1.16
	libexec/httpd/daemon-bozo.c                     up to 1.19
	libexec/httpd/dir-index-bozo.c                  up to 1.28
	libexec/httpd/lua-bozo.c                        up to 1.15
	libexec/httpd/main.c                            up to 1.21
	libexec/httpd/ssl-bozo.c                        up to 1.25
	libexec/httpd/tilde-luzah-bozo.c                up to 1.16
	libexec/httpd/libbozohttpd/Makefile             up to 1.3
	libexec/httpd/lua/bozo.lua                      up to 1.3
	libexec/httpd/lua/glue.c                        up to 1.5
	libexec/httpd/lua/optparse.lua                  up to 1.2
	libexec/httpd/testsuite/Makefile                up to 1.11
	libexec/httpd/testsuite/html_cmp                up to 1.6
	libexec/httpd/testsuite/t3.out                  up to 1.4
	libexec/httpd/testsuite/t5.out                  up to 1.4
	libexec/httpd/testsuite/t6.out                  up to 1.4
	libexec/httpd/testsuite/test-bigfile            up to 1.5
	libexec/httpd/testsuite/test-simple             up to 1.5

Cosmetic changes to Lua binding in bozohttpd.

- Don't use negative indicies to read arguments of Lua functions.
- On error, return nil, "error string".
- Use ssize_t for return values from bozo_read() and bozo_write().
- Prefer lstring especially when if saves you from appending NUL and
  doing len + 1 which can potentially wraparound.
- Don't mix C allocations with Lua functions marked with "m" in the Lua
  manual. Those functions may throw (longjump) and leak data allocated
  by C function. In one case, I use luaL_Buffer, in the other case,
  I rearranged calls a bit.


fix ordering of a couple of words.  from Edgar Pettijohn in PR#52375.
thanks!


s/u_int/unsigned/.

from Jan Danielsson.  increases/fixes portability.


PR bin/52194: bozohttpd fails to exec scripts via the -C mechanism
sometimes with EFAULT due to not NULL terminated environment.


Document script handler issues with httpd(8).
From martin@, addressing PR 52194.

While here, use American spelling consistently and upper-case some
abbreviations.

Bump date.


fix output since protocol agnostic change went in.

XXX: i thought someone hooked this into atf already, please do :)


Add support for remapping requested paths via a .bzredirect file.
Fixes PR 52772. Ok: mrg@


Bump date


Remove trailing whitespace.


use __func__ in debug().


fix a denial of service attack against header contents, which
is now bounded at 16KiB.  reported by JP.


avoid memory leak in sending multiple auth headers.
mostly mitigated by previous patch to limit total header size,
but still a real problem here.


note the changes present in bozohttpd 20181118:

o  add url remap support via .bzremap file, from martin%netbsd.org@localhost
o  handle redirections for any protocol, not just http:
o  fix a denial of service attack against header contents, which
   is now bounded at 16KiB.  reported by JP.


from CHANGES:

o  reduce default timeouts, and add expand timeouts to handle the
   initial line, each header, and the total time spent
o  add -T option to expose new timeout settings
o  minor RFC fixes related to timeout handling responses

old timeouts:
60 seconds for initial request like, 60 seconds per header line,
and no whole timeout (though the recent total header size changes
do introduce one that would be about 11 hours.)
new timeouts:
30 seconds for initial request like, 10 seconds per header line,
and a total request time of 600 seconds.

the new global timeout is implemented using CLOCK_MONOTONIC, with
a fallback to CLOCK_REALTIME if monotonic time is unavailable.

reject multiple Host: headers.  besides being protocol standard,
this closes one additional memory leak found by JP.  add a simple
test to check this.

clean up option and usage handling some.


move some #if support into bozohttpd.h.


fix previous: have_debug was reversed.


also fix have_dynamic_content from the previous previous.  re-order
the debug and dynamic content to match the same pattern as everything
else so similar problems are less likely in the future.


- move special files defines into bozohttpd.h, so we can ...
- consolidate all the special file checks into
  bozo_check_special_files() so that all builds check the same
  list of special files, regardless of build options.
- convert "(void)bozo_http_error(...); return -1;" into plain
  "return bozo_http_error(...);"
- fix the call to bozo_check_special_files() to be used on all
  input types.  part of the fixes for failure to reject access
  to /.htpasswd as reported by JP on tech-security.
- use warn_unused_result attribute on bozo_check_special_files(),
  and fix the failures to return failure.  second part of the
  htpasswd access fix.
- update testsuite to use a fixed fake hostname.

call this bozohttpd 20181121.


two fixes reported by mouse:
- don't check contents of 'st' if stat(2) failed.
- round up instead of truncate.  now 10000 byte files say 10kB not 9kB.


use MAP_SHARED for the bzremap file.  avoids netbsd kernel complaining:

WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 15478 command bozohttpd)


many clean ups:
- keep a list of special files and their human names
- remove (void) casts on bozo_http_error()
- fix a few more misuses of bozo_http_error()
- rename check_mapping() to check_remap() and perform some CSE
- switch away from ``%s'' to '%s'
- remove a bunch of #ifdef using new have_feature defines


alpha sort the option switch.


add an assert() check on array bounds.


minor style fixes.  simplify bozo_match_content_map().

Revision 1.33.2.7 / (download) - annotate - [select for diffs], Sat Nov 24 17:22:57 2018 UTC (5 years, 4 months ago) by martin
Branch: netbsd-7
Changes since 1.33.2.6: +94 -31 lines
Diff to previous 1.33.2.6 (colored) to branchpoint 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Sync to HEAD (requested by mrg in ticket #1655):

	libexec/httpd/testsuite/data/.bzremap           up to 1.1
	libexec/httpd/testsuite/t12.out                 up to 1.1
	libexec/httpd/testsuite/t12.in                  up to 1.1
	libexec/httpd/testsuite/t13.out                 up to 1.1
	libexec/httpd/testsuite/t13.in                  up to 1.1
	libexec/httpd/testsuite/t14.out                 up to 1.1
	libexec/httpd/testsuite/t14.in                  up to 1.1
	libexec/httpd/testsuite/t15.out                 up to 1.1
	libexec/httpd/testsuite/t15.in                  up to 1.1
	libexec/httpd/CHANGES                           up to 1.28
	libexec/httpd/Makefile                          up to 1.27
	libexec/httpd/auth-bozo.c                       up to 1.22
	libexec/httpd/bozohttpd.8                       up to 1.74
	libexec/httpd/bozohttpd.c                       up to 1.96
	libexec/httpd/bozohttpd.h                       up to 1.56
	libexec/httpd/cgi-bozo.c                        up to 1.44
	libexec/httpd/content-bozo.c                    up to 1.16
	libexec/httpd/daemon-bozo.c                     up to 1.19
	libexec/httpd/dir-index-bozo.c                  up to 1.28
	libexec/httpd/lua-bozo.c                        up to 1.15
	libexec/httpd/main.c                            up to 1.21
	libexec/httpd/ssl-bozo.c                        up to 1.25
	libexec/httpd/tilde-luzah-bozo.c                up to 1.16
	libexec/httpd/libbozohttpd/Makefile             up to 1.3
	libexec/httpd/lua/bozo.lua                      up to 1.3
	libexec/httpd/lua/glue.c                        up to 1.5
	libexec/httpd/lua/optparse.lua                  up to 1.2
	libexec/httpd/testsuite/Makefile                up to 1.11
	libexec/httpd/testsuite/html_cmp                up to 1.6
	libexec/httpd/testsuite/t3.out                  up to 1.4
	libexec/httpd/testsuite/t5.out                  up to 1.4
	libexec/httpd/testsuite/t6.out                  up to 1.4
	libexec/httpd/testsuite/test-bigfile            up to 1.5
	libexec/httpd/testsuite/test-simple             up to 1.5

Cosmetic changes to Lua binding in bozohttpd.

- Don't use negative indicies to read arguments of Lua functions.
- On error, return nil, "error string".
- Use ssize_t for return values from bozo_read() and bozo_write().
- Prefer lstring especially when if saves you from appending NUL and
  doing len + 1 which can potentially wraparound.
- Don't mix C allocations with Lua functions marked with "m" in the Lua
  manual. Those functions may throw (longjump) and leak data allocated
  by C function. In one case, I use luaL_Buffer, in the other case,
  I rearranged calls a bit.


fix ordering of a couple of words.  from Edgar Pettijohn in PR#52375.
thanks!


s/u_int/unsigned/.

from Jan Danielsson.  increases/fixes portability.


PR bin/52194: bozohttpd fails to exec scripts via the -C mechanism
sometimes with EFAULT due to not NULL terminated environment.


Document script handler issues with httpd(8).
From martin@, addressing PR 52194.

While here, use American spelling consistently and upper-case some
abbreviations.

Bump date.


fix output since protocol agnostic change went in.

XXX: i thought someone hooked this into atf already, please do :)


Add support for remapping requested paths via a .bzredirect file.
Fixes PR 52772. Ok: mrg@


Bump date


Remove trailing whitespace.


use __func__ in debug().


fix a denial of service attack against header contents, which
is now bounded at 16KiB.  reported by JP.


avoid memory leak in sending multiple auth headers.
mostly mitigated by previous patch to limit total header size,
but still a real problem here.


note the changes present in bozohttpd 20181118:

o  add url remap support via .bzremap file, from martin%netbsd.org@localhost
o  handle redirections for any protocol, not just http:
o  fix a denial of service attack against header contents, which
   is now bounded at 16KiB.  reported by JP.


from CHANGES:

o  reduce default timeouts, and add expand timeouts to handle the
   initial line, each header, and the total time spent
o  add -T option to expose new timeout settings
o  minor RFC fixes related to timeout handling responses

old timeouts:
60 seconds for initial request like, 60 seconds per header line,
and no whole timeout (though the recent total header size changes
do introduce one that would be about 11 hours.)
new timeouts:
30 seconds for initial request like, 10 seconds per header line,
and a total request time of 600 seconds.

the new global timeout is implemented using CLOCK_MONOTONIC, with
a fallback to CLOCK_REALTIME if monotonic time is unavailable.

reject multiple Host: headers.  besides being protocol standard,
this closes one additional memory leak found by JP.  add a simple
test to check this.

clean up option and usage handling some.


move some #if support into bozohttpd.h.


fix previous: have_debug was reversed.


also fix have_dynamic_content from the previous previous.  re-order
the debug and dynamic content to match the same pattern as everything
else so similar problems are less likely in the future.


- move special files defines into bozohttpd.h, so we can ...
- consolidate all the special file checks into
  bozo_check_special_files() so that all builds check the same
  list of special files, regardless of build options.
- convert "(void)bozo_http_error(...); return -1;" into plain
  "return bozo_http_error(...);"
- fix the call to bozo_check_special_files() to be used on all
  input types.  part of the fixes for failure to reject access
  to /.htpasswd as reported by JP on tech-security.
- use warn_unused_result attribute on bozo_check_special_files(),
  and fix the failures to return failure.  second part of the
  htpasswd access fix.
- update testsuite to use a fixed fake hostname.

call this bozohttpd 20181121.


two fixes reported by mouse:
- don't check contents of 'st' if stat(2) failed.
- round up instead of truncate.  now 10000 byte files say 10kB not 9kB.


use MAP_SHARED for the bzremap file.  avoids netbsd kernel complaining:

WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 15478 command bozohttpd)


many clean ups:
- keep a list of special files and their human names
- remove (void) casts on bozo_http_error()
- fix a few more misuses of bozo_http_error()
- rename check_mapping() to check_remap() and perform some CSE
- switch away from ``%s'' to '%s'
- remove a bunch of #ifdef using new have_feature defines


alpha sort the option switch.


add an assert() check on array bounds.


minor style fixes.  simplify bozo_match_content_map().

Revision 1.47.4.1 / (download) - annotate - [select for diffs], Sat Nov 24 17:13:51 2018 UTC (5 years, 4 months ago) by martin
Branch: netbsd-8
Changes since 1.47: +94 -31 lines
Diff to previous 1.47 (colored) to selected 1.33.2.6.2.3 (colored)

Sync to HEAD (requested by mrg in ticket #1104)

	libexec/httpd/testsuite/data/.bzremap           up to 1.1
	libexec/httpd/testsuite/t12.out                 up to 1.1
	libexec/httpd/testsuite/t12.in                  up to 1.1
	libexec/httpd/testsuite/t13.out                 up to 1.1
	libexec/httpd/testsuite/t13.in                  up to 1.1
	libexec/httpd/testsuite/t14.out                 up to 1.1
	libexec/httpd/testsuite/t14.in                  up to 1.1
	libexec/httpd/testsuite/t15.out                 up to 1.1
	libexec/httpd/testsuite/t15.in                  up to 1.1
	libexec/httpd/CHANGES                           up to 1.28
	libexec/httpd/auth-bozo.c                       up to 1.22
	libexec/httpd/bozohttpd.8                       up to 1.74
	libexec/httpd/bozohttpd.c                       up to 1.96
	libexec/httpd/bozohttpd.h                       up to 1.56
	libexec/httpd/cgi-bozo.c                        up to 1.44
	libexec/httpd/content-bozo.c                    up to 1.16
	libexec/httpd/daemon-bozo.c                     up to 1.19
	libexec/httpd/dir-index-bozo.c                  up to 1.28
	libexec/httpd/main.c                            up to 1.21
	libexec/httpd/ssl-bozo.c                        up to 1.25
	libexec/httpd/tilde-luzah-bozo.c                up to 1.16
	libexec/httpd/lua/bozo.lua                      up to 1.3
	libexec/httpd/lua/glue.c                        up to 1.5
	libexec/httpd/lua/optparse.lua                  up to 1.2
	libexec/httpd/testsuite/Makefile                up to 1.11
	libexec/httpd/testsuite/html_cmp                up to 1.6
	libexec/httpd/testsuite/t3.out                  up to 1.4
	libexec/httpd/testsuite/t5.out                  up to 1.4
	libexec/httpd/testsuite/t6.out                  up to 1.4
	libexec/httpd/testsuite/test-bigfile            up to 1.5
	libexec/httpd/testsuite/test-simple             up to 1.5


Cosmetic changes to Lua binding in bozohttpd.

- Don't use negative indicies to read arguments of Lua functions.
- On error, return nil, "error string".
- Use ssize_t for return values from bozo_read() and bozo_write().
- Prefer lstring especially when if saves you from appending NUL and
  doing len + 1 which can potentially wraparound.
- Don't mix C allocations with Lua functions marked with "m" in the Lua
  manual. Those functions may throw (longjump) and leak data allocated
  by C function. In one case, I use luaL_Buffer, in the other case,
  I rearranged calls a bit.


fix ordering of a couple of words.  from Edgar Pettijohn in PR#52375.
thanks!


s/u_int/unsigned/.

from Jan Danielsson.  increases/fixes portability.


PR bin/52194: bozohttpd fails to exec scripts via the -C mechanism
sometimes with EFAULT due to not NULL terminated environment.


Document script handler issues with httpd(8).
From martin@, addressing PR 52194.

While here, use American spelling consistently and upper-case some
abbreviations.

Bump date.


fix output since protocol agnostic change went in.

XXX: i thought someone hooked this into atf already, please do :)


Add support for remapping requested paths via a .bzredirect file.
Fixes PR 52772. Ok: mrg@


Bump date


Remove trailing whitespace.


use __func__ in debug().


fix a denial of service attack against header contents, which
is now bounded at 16KiB.  reported by JP.


avoid memory leak in sending multiple auth headers.
mostly mitigated by previous patch to limit total header size,
but still a real problem here.


note the changes present in bozohttpd 20181118:

o  add url remap support via .bzremap file, from martin%netbsd.org@localhost
o  handle redirections for any protocol, not just http:
o  fix a denial of service attack against header contents, which
   is now bounded at 16KiB.  reported by JP.


from CHANGES:

o  reduce default timeouts, and add expand timeouts to handle the
   initial line, each header, and the total time spent
o  add -T option to expose new timeout settings
o  minor RFC fixes related to timeout handling responses

old timeouts:
60 seconds for initial request like, 60 seconds per header line,
and no whole timeout (though the recent total header size changes
do introduce one that would be about 11 hours.)
new timeouts:
30 seconds for initial request like, 10 seconds per header line,
and a total request time of 600 seconds.

the new global timeout is implemented using CLOCK_MONOTONIC, with
a fallback to CLOCK_REALTIME if monotonic time is unavailable.

reject multiple Host: headers.  besides being protocol standard,
this closes one additional memory leak found by JP.  add a simple
test to check this.

clean up option and usage handling some.


move some #if support into bozohttpd.h.


fix previous: have_debug was reversed.


also fix have_dynamic_content from the previous previous.  re-order
the debug and dynamic content to match the same pattern as everything
else so similar problems are less likely in the future.


- move special files defines into bozohttpd.h, so we can ...
- consolidate all the special file checks into
  bozo_check_special_files() so that all builds check the same
  list of special files, regardless of build options.
- convert "(void)bozo_http_error(...); return -1;" into plain
  "return bozo_http_error(...);"
- fix the call to bozo_check_special_files() to be used on all
  input types.  part of the fixes for failure to reject access
  to /.htpasswd as reported by JP on tech-security.
- use warn_unused_result attribute on bozo_check_special_files(),
  and fix the failures to return failure.  second part of the
  htpasswd access fix.
- update testsuite to use a fixed fake hostname.

call this bozohttpd 20181121.


two fixes reported by mouse:
- don't check contents of 'st' if stat(2) failed.
- round up instead of truncate.  now 10000 byte files say 10kB not 9kB.


use MAP_SHARED for the bzremap file.  avoids netbsd kernel complaining:

WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 15478 command bozohttpd)


many clean ups:
- keep a list of special files and their human names
- remove (void) casts on bozo_http_error()
- fix a few more misuses of bozo_http_error()
- rename check_mapping() to check_remap() and perform some CSE
- switch away from ``%s'' to '%s'
- remove a bunch of #ifdef using new have_feature defines


alpha sort the option switch.


add an assert() check on array bounds.


minor style fixes.  simplify bozo_match_content_map().

Revision 1.57 / (download) - annotate - [select for diffs], Sat Nov 24 13:02:46 2018 UTC (5 years, 4 months ago) by christos
Branch: MAIN
CVS Tags: pgoyette-compat-20190118, pgoyette-compat-1226, pgoyette-compat-1126, bozohttpd-20181125
Changes since 1.56: +2 -2 lines
Diff to previous 1.56 (colored) to selected 1.33.2.6.2.3 (colored)

one semicolon is usually enough.

Revision 1.56 / (download) - annotate - [select for diffs], Thu Nov 22 08:54:08 2018 UTC (5 years, 4 months ago) by mrg
Branch: MAIN
CVS Tags: bozohttpd-20181123
Changes since 1.55: +12 -3 lines
Diff to previous 1.55 (colored) to selected 1.33.2.6.2.3 (colored)

many clean ups:
- keep a list of special files and their human names
- remove (void) casts on bozo_http_error()
- fix a few more misuses of bozo_http_error()
- rename check_mapping() to check_remap() and perform some CSE
- switch away from ``%s'' to '%s'
- remove a bunch of #ifdef using new have_feature defines

Revision 1.55 / (download) - annotate - [select for diffs], Wed Nov 21 09:37:02 2018 UTC (5 years, 4 months ago) by mrg
Branch: MAIN
CVS Tags: bozohttpd-20181121
Changes since 1.54: +28 -4 lines
Diff to previous 1.54 (colored) to selected 1.33.2.6.2.3 (colored)

- move special files defines into bozohttpd.h, so we can ...
- consolidate all the special file checks into
  bozo_check_special_files() so that all builds check the same
  list of special files, regardless of build options.
- convert "(void)bozo_http_error(...); return -1;" into plain
  "return bozo_http_error(...);"
- fix the call to bozo_check_special_files() to be used on all
  input types.  part of the fixes for failure to reject access
  to /.htpasswd as reported by JP on tech-security.
- use warn_unused_result attribute on bozo_check_special_files(),
  and fix the failures to return failure.  second part of the
  htpasswd access fix.
- update testsuite to use a fixed fake hostname.

call this bozohttpd 20181121.

Revision 1.54 / (download) - annotate - [select for diffs], Tue Nov 20 01:23:06 2018 UTC (5 years, 4 months ago) by mrg
Branch: MAIN
Changes since 1.53: +8 -8 lines
Diff to previous 1.53 (colored) to selected 1.33.2.6.2.3 (colored)

also fix have_dynamic_content from the previous previous.  re-order
the debug and dynamic content to match the same pattern as everything
else so similar problems are less likely in the future.

Revision 1.53 / (download) - annotate - [select for diffs], Tue Nov 20 01:19:51 2018 UTC (5 years, 4 months ago) by mrg
Branch: MAIN
Changes since 1.52: +3 -3 lines
Diff to previous 1.52 (colored) to selected 1.33.2.6.2.3 (colored)

fix previous: have_debug was reversed.

Revision 1.52 / (download) - annotate - [select for diffs], Tue Nov 20 01:15:50 2018 UTC (5 years, 4 months ago) by mrg
Branch: MAIN
Changes since 1.51: +38 -19 lines
Diff to previous 1.51 (colored) to selected 1.33.2.6.2.3 (colored)

move some #if support into bozohttpd.h.

Revision 1.51 / (download) - annotate - [select for diffs], Tue Nov 20 01:06:46 2018 UTC (5 years, 4 months ago) by mrg
Branch: MAIN
Changes since 1.50: +8 -4 lines
Diff to previous 1.50 (colored) to selected 1.33.2.6.2.3 (colored)

from CHANGES:

o  reduce default timeouts, and add expand timeouts to handle the
   initial line, each header, and the total time spent
o  add -T option to expose new timeout settings
o  minor RFC fixes related to timeout handling responses

old timeouts:
60 seconds for initial request like, 60 seconds per header line,
and no whole timeout (though the recent total header size changes
do introduce one that would be about 11 hours.)
new timeouts:
30 seconds for initial request like, 10 seconds per header line,
and a total request time of 600 seconds.


the new global timeout is implemented using CLOCK_MONOTONIC, with
a fallback to CLOCK_REALTIME if monotonic time is unavailable.


reject multiple Host: headers.  besides being protocol standard,
this closes one additional memory leak found by JP.  add a simple
test to check this.


clean up option and usage handling some.

Revision 1.50 / (download) - annotate - [select for diffs], Mon Nov 19 04:12:22 2018 UTC (5 years, 4 months ago) by mrg
Branch: MAIN
CVS Tags: bozohttpd-20181118
Changes since 1.49: +6 -2 lines
Diff to previous 1.49 (colored) to selected 1.33.2.6.2.3 (colored)

fix a denial of service attack against header contents, which
is now bounded at 16KiB.  reported by JP.

Revision 1.47.10.1 / (download) - annotate - [select for diffs], Mon May 21 04:35:56 2018 UTC (5 years, 10 months ago) by pgoyette
Branch: pgoyette-compat
Changes since 1.47: +5 -2 lines
Diff to previous 1.47 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with HEAD

Revision 1.49 / (download) - annotate - [select for diffs], Fri May 4 18:07:23 2018 UTC (5 years, 10 months ago) by christos
Branch: MAIN
CVS Tags: phil-wifi-base, pgoyette-compat-1020, pgoyette-compat-0930, pgoyette-compat-0906, pgoyette-compat-0728, pgoyette-compat-0625, pgoyette-compat-0521
Branch point for: phil-wifi
Changes since 1.48: +4 -1 lines
Diff to previous 1.48 (colored) to selected 1.33.2.6.2.3 (colored)

fix the rest of the compilers.

Revision 1.48 / (download) - annotate - [select for diffs], Fri May 4 18:06:44 2018 UTC (5 years, 10 months ago) by christos
Branch: MAIN
Changes since 1.47: +2 -2 lines
Diff to previous 1.47 (colored) to selected 1.33.2.6.2.3 (colored)

fix lint

Revision 1.46.4.1 / (download) - annotate - [select for diffs], Fri Apr 21 16:53:12 2017 UTC (6 years, 11 months ago) by bouyer
Branch: bouyer-socketcan
Changes since 1.46: +2 -2 lines
Diff to previous 1.46 (colored) next main 1.47 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with HEAD

Revision 1.46.2.1 / (download) - annotate - [select for diffs], Mon Mar 20 06:57:00 2017 UTC (7 years ago) by pgoyette
Branch: pgoyette-localcount
Changes since 1.46: +2 -2 lines
Diff to previous 1.46 (colored) next main 1.47 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with HEAD

Revision 1.33.2.4.2.2 / (download) - annotate - [select for diffs], Mon Mar 13 07:41:25 2017 UTC (7 years ago) by skrll
Branch: netbsd-7-nhusb
Changes since 1.33.2.4.2.1: +2 -2 lines
Diff to previous 1.33.2.4.2.1 (colored) to branchpoint 1.33.2.4 (colored) next main 1.33.2.5 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with netbsd-7-1-RELEASE

Revision 1.20.2.3 / (download) - annotate - [select for diffs], Tue Mar 7 07:25:18 2017 UTC (7 years ago) by snj
Branch: netbsd-6
Changes since 1.20.2.2: +4 -2 lines
Diff to previous 1.20.2.2 (colored) to branchpoint 1.20 (colored) next main 1.21 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1437):
	libexec/httpd/CHANGES: up to 1.25
	libexec/httpd/bozohttpd.8: up to 1.65
	libexec/httpd/bozohttpd.c: up to 1.86
	libexec/httpd/bozohttpd.h: up to 1.47
	libexec/httpd/cgi-bozo.c: up to 1.37
	libexec/httpd/content-bozo.c: up to 1.14
	libexec/httpd/libbozohttpd/libbozohttpd.3: up to 1.4
	libexec/httpd/main.c: up to 1.16
	libexec/httpd/small/Makefile: up to 1.3
	libexec/httpd/testsuite/Makefile: up to 1.7
	libexec/httpd/testsuite/cgi-bin/empty: up to 1.1
	libexec/httpd/testsuite/html_cmp: up to 1.5
	libexec/httpd/testsuite/t11.in: up to 1.1
	libexec/httpd/testsuite/t11.out: up to 1.1
	libexec/httpd/testsuite/test-bigfile: up to 1.4
	libexec/httpd/testsuite/test-simple: up to 1.4
Update bozohttpd to 20170201.  Changes:
- fix an infinite loop in cgi processing
- fixes and clean up for the testsuite
- no longer sends encoding header for compressed formats
- add a bozo_get_version() function which returns the version number

Revision 1.20.8.3 / (download) - annotate - [select for diffs], Tue Mar 7 07:21:53 2017 UTC (7 years ago) by snj
Branch: netbsd-6-1
Changes since 1.20.8.2: +4 -2 lines
Diff to previous 1.20.8.2 (colored) to branchpoint 1.20 (colored) next main 1.21 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1437:
	libexec/httpd/CHANGES: up to 1.25
	libexec/httpd/bozohttpd.8: up to 1.65
	libexec/httpd/bozohttpd.c: up to 1.86
	libexec/httpd/bozohttpd.h: up to 1.47
	libexec/httpd/cgi-bozo.c: up to 1.37
	libexec/httpd/content-bozo.c: up to 1.14
	libexec/httpd/libbozohttpd/libbozohttpd.3: up to 1.4
	libexec/httpd/main.c: up to 1.16
	libexec/httpd/small/Makefile: up to 1.3
	libexec/httpd/testsuite/Makefile: up to 1.7
	libexec/httpd/testsuite/cgi-bin/empty: up to 1.1
	libexec/httpd/testsuite/html_cmp: up to 1.5
	libexec/httpd/testsuite/t11.in: up to 1.1
	libexec/httpd/testsuite/t11.out: up to 1.1
	libexec/httpd/testsuite/test-bigfile: up to 1.4
	libexec/httpd/testsuite/test-simple: up to 1.4
Update bozohttpd to 20170201.  Changes:
- fix an infinite loop in cgi processing
- fixes and clean up for the testsuite
- no longer sends encoding header for compressed formats
- add a bozo_get_version() function which returns the version number

Revision 1.20.6.3 / (download) - annotate - [select for diffs], Tue Mar 7 07:16:08 2017 UTC (7 years ago) by snj
Branch: netbsd-6-0
Changes since 1.20.6.2: +4 -2 lines
Diff to previous 1.20.6.2 (colored) to branchpoint 1.20 (colored) next main 1.21 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1437):
	libexec/httpd/CHANGES: up to 1.25
	libexec/httpd/bozohttpd.8: up to 1.65
	libexec/httpd/bozohttpd.c: up to 1.86
	libexec/httpd/bozohttpd.h: up to 1.47
	libexec/httpd/cgi-bozo.c: up to 1.37
	libexec/httpd/content-bozo.c: up to 1.14
	libexec/httpd/libbozohttpd/libbozohttpd.3: up to 1.4
	libexec/httpd/main.c: up to 1.16
	libexec/httpd/small/Makefile: up to 1.3
	libexec/httpd/testsuite/Makefile: up to 1.7
	libexec/httpd/testsuite/cgi-bin/empty: up to 1.1
	libexec/httpd/testsuite/html_cmp: up to 1.5
	libexec/httpd/testsuite/t11.in: up to 1.1
	libexec/httpd/testsuite/t11.out: up to 1.1
	libexec/httpd/testsuite/test-bigfile: up to 1.4
	libexec/httpd/testsuite/test-simple: up to 1.4
Update bozohttpd to 20170201.  Changes:
- fix an infinite loop in cgi processing
- fixes and clean up for the testsuite
- no longer sends encoding header for compressed formats
- add a bozo_get_version() function which returns the version number

Revision 1.33.2.6 / (download) - annotate - [select for diffs], Sun Feb 12 22:07:17 2017 UTC (7 years, 1 month ago) by snj
Branch: netbsd-7
CVS Tags: netbsd-7-2-RELEASE, netbsd-7-1-RELEASE, netbsd-7-1-RC2, netbsd-7-1-2-RELEASE, netbsd-7-1-1-RELEASE
Branch point for: netbsd-7-1
Changes since 1.33.2.5: +2 -2 lines
Diff to previous 1.33.2.5 (colored) to branchpoint 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1357):
	libexec/httpd/CHANGES: revision 1.25
	libexec/httpd/bozohttpd.8: revisions 1.63-1.65
	libexec/httpd/bozohttpd.c: revisions 1.85, 1.86
	libexec/httpd/bozohttpd.h: revision 1.47
	libexec/httpd/cgi-bozo.c: revisions 1.36, 1.37
	libexec/httpd/libbozohttpd/libbozohttpd.3: revision 1.4
	libexec/httpd/testsuite/Makefile: revision 1.7
	libexec/httpd/testsuite/html_cmp: revision 1.5
	libexec/httpd/testsuite/test-bigfile: revision 1.4
	libexec/httpd/testsuite/test-simple: revisions 1.3, 1.4
	libexec/httpd/testsuite/t11.in: revision 1.1
	libexec/httpd/testsuite/t11.out: revision 1.1
	libexec/httpd/testsuite/cgi-bin/empty: revision 1.1
Update bozohttpd to 20170201:
- fix an infinite loop in cgi processing
- fixes and clean up for the testsuite
- no longer sends encoding header for compressed formats

Revision 1.33.2.2.2.3 / (download) - annotate - [select for diffs], Sun Feb 12 21:59:44 2017 UTC (7 years, 1 month ago) by snj
Branch: netbsd-7-0
Changes since 1.33.2.2.2.2: +2 -2 lines
Diff to previous 1.33.2.2.2.2 (colored) to branchpoint 1.33.2.2 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1357):
	libexec/httpd/CHANGES: revision 1.25
	libexec/httpd/bozohttpd.8: revisions 1.63-1.65
	libexec/httpd/bozohttpd.c: revisions 1.85, 1.86
	libexec/httpd/bozohttpd.h: revision 1.47
	libexec/httpd/cgi-bozo.c: revisions 1.36, 1.37
	libexec/httpd/libbozohttpd/libbozohttpd.3: revision 1.4
	libexec/httpd/testsuite/Makefile: revision 1.7
	libexec/httpd/testsuite/html_cmp: revision 1.5
	libexec/httpd/testsuite/test-bigfile: revision 1.4
	libexec/httpd/testsuite/test-simple: revisions 1.3, 1.4
	libexec/httpd/testsuite/t11.in: revision 1.1
	libexec/httpd/testsuite/t11.out: revision 1.1
	libexec/httpd/testsuite/cgi-bin/empty: revision 1.1
Update bozohttpd to 20170201:
- fix an infinite loop in cgi processing
- fixes and clean up for the testsuite
- no longer sends encoding header for compressed formats

Revision 1.47 / (download) - annotate - [select for diffs], Tue Jan 31 14:36:09 2017 UTC (7 years, 1 month ago) by mrg
Branch: MAIN
CVS Tags: prg-localcount2-base3, prg-localcount2-base2, prg-localcount2-base1, prg-localcount2-base, prg-localcount2, pgoyette-localcount-20170426, pgoyette-localcount-20170320, pgoyette-compat-base, pgoyette-compat-0502, pgoyette-compat-0422, pgoyette-compat-0415, pgoyette-compat-0407, pgoyette-compat-0330, pgoyette-compat-0322, pgoyette-compat-0315, perseant-stdc-iso10646-base, perseant-stdc-iso10646, netbsd-8-base, netbsd-8-0-RELEASE, netbsd-8-0-RC2, netbsd-8-0-RC1, matt-nb8-mediatek-base, matt-nb8-mediatek, bouyer-socketcan-base1
Branch point for: pgoyette-compat, netbsd-8
Changes since 1.46: +2 -2 lines
Diff to previous 1.46 (colored) to selected 1.33.2.6.2.3 (colored)

call this bozohttpd 20170201.

Revision 1.33.2.4.2.1 / (download) - annotate - [select for diffs], Wed Jan 18 08:46:23 2017 UTC (7 years, 2 months ago) by skrll
Branch: netbsd-7-nhusb
Changes since 1.33.2.4: +3 -1 lines
Diff to previous 1.33.2.4 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with netbsd-5

Revision 1.33.2.2.2.2 / (download) - annotate - [select for diffs], Fri Dec 23 07:47:40 2016 UTC (7 years, 3 months ago) by snj
Branch: netbsd-7-0
Changes since 1.33.2.2.2.1: +3 -1 lines
Diff to previous 1.33.2.2.2.1 (colored) to branchpoint 1.33.2.2 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1309):
	libexec/httpd/CHANGES: revisions 1.23, 1.24
	libexec/httpd/bozohttpd.8: revisions 1.60-1.62
	libexec/httpd/bozohttpd.c: revisions 1.81-1.84
	libexec/httpd/bozohttpd.h: revision 1.46
	libexec/httpd/cgi-bozo.c: revision 1.35
	libexec/httpd/content-bozo.c: revision 1.14
	libexec/httpd/main.c: revisions 1.14-1.16
	libexec/httpd/testsuite/Makefile: revision 1.6
	libexec/httpd/testsuite/test-bigfile: revision 1.3
	libexec/httpd/testsuite/test-simple: revisions 1.1, 1.2
update bozohttpd to 2016072:
- fix memory leak
- addd -G option to display version
- fix some content type issues
- fix issues in testsuite

Revision 1.33.2.5 / (download) - annotate - [select for diffs], Fri Dec 23 07:42:09 2016 UTC (7 years, 3 months ago) by snj
Branch: netbsd-7
CVS Tags: netbsd-7-nhusb-base-20170116, netbsd-7-1-RC1
Changes since 1.33.2.4: +3 -1 lines
Diff to previous 1.33.2.4 (colored) to branchpoint 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1309):
	libexec/httpd/CHANGES: revisions 1.23, 1.24
	libexec/httpd/bozohttpd.8: revisions 1.60-1.62
	libexec/httpd/bozohttpd.c: revisions 1.81-1.84
	libexec/httpd/bozohttpd.h: revision 1.46
	libexec/httpd/cgi-bozo.c: revision 1.35
	libexec/httpd/content-bozo.c: revision 1.14
	libexec/httpd/main.c: revisions 1.14-1.16
	libexec/httpd/testsuite/Makefile: revision 1.6
	libexec/httpd/testsuite/test-bigfile: revision 1.3
	libexec/httpd/testsuite/test-simple: revisions 1.1, 1.2
update bozohttpd to 2016072:
- fix memory leak
- addd -G option to display version
- fix some content type issues
- fix issues in testsuite

Revision 1.46 / (download) - annotate - [select for diffs], Tue May 24 21:18:29 2016 UTC (7 years, 10 months ago) by agc
Branch: MAIN
CVS Tags: pgoyette-localcount-base, pgoyette-localcount-20170107, pgoyette-localcount-20161104, pgoyette-localcount-20160806, pgoyette-localcount-20160726, localcount-20160914, bouyer-socketcan-base
Branch point for: pgoyette-localcount, bouyer-socketcan
Changes since 1.45: +3 -1 lines
Diff to previous 1.45 (colored) to selected 1.33.2.6.2.3 (colored)

As proposed in:

	http://mail-index.netbsd.org/tech-userlevel/2016/05/18/msg009999.html

and

	https://www.netbsd.org/~agc/bozo-20160517.diff

add a patch to httpd to return the version string of httpd itself, and use the
-G option on the command line to enable this. This gives httpd the ability to
show, from the command line, what version is running.

	% /usr/build/obj/x86_64/usr/src/libexec/httpd/bozohttpd -G
	bozohttpd version bozohttpd/20160415
	%

Revision 1.20.6.2 / (download) - annotate - [select for diffs], Fri Apr 15 19:38:13 2016 UTC (7 years, 11 months ago) by snj
Branch: netbsd-6-0
Changes since 1.20.6.1: +60 -34 lines
Diff to previous 1.20.6.1 (colored) to branchpoint 1.20 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1377):
	libexec/httpd/CHANGES: up to 1.22
	libexec/httpd/Makefile: up to 1.26 via patch
	libexec/httpd/auth-bozo.c: up to 1.18
	libexec/httpd/bozohttpd.8: up to 1.59
	libexec/httpd/bozohttpd.c: up to 1.80 via patch
	libexec/httpd/bozohttpd.h: up to 1.45
	libexec/httpd/cgi-bozo.c: up to 1.33
	libexec/httpd/content-bozo.c: up to 1.13
	libexec/httpd/daemon-bozo.c: up to 1.17
	libexec/httpd/dir-index-bozo.c: up to 1.25
	libexec/httpd/lua-bozo.c: up to 1.14
	libexec/httpd/lua/bozo.lua: up to 1.2
	libexec/httpd/lua/glue.c: up to 1.2
	libexec/httpd/main.c: up to 1.13
	libexec/httpd/printenv.lua: up to 1.3
	libexec/httpd/ssl-bozo.c: up to 1.22
	libexec/httpd/testsuite/Makefile: up to 1.5
	libexec/httpd/testsuite/t10.out: up to 1.2
	libexec/httpd/testsuite/test-bigfile: up to 1.2
	libexec/httpd/tilde-luzah-bozo.c: up to 1.14
Import bozohttpd 20151028:
o  add CGI support for ~user translation (-E switch)
o  add redirects to ~user translation
o  fix bugs around ~user translation
o  add schema detection for absolute redirects
o  fixed few memory leaks
o  bunch of minor tweaks
o  removed -r support
o  smarter redirects
--
Changes in 20150320:
o  fix redirection handling
o  support transport stream (.ts) and video object (.vob) files
o  directory listings show correct file sizes for large files
--
updates and bozohttpd 20160415:
o  add search-word support for CGI
o  fix a security issue in CGI suffix handler support which would
   allow remote code execution, from shm@netbsd.org
o  -C option supports now CGI scripts only

Revision 1.20.8.2 / (download) - annotate - [select for diffs], Fri Apr 15 19:37:27 2016 UTC (7 years, 11 months ago) by snj
Branch: netbsd-6-1
Changes since 1.20.8.1: +60 -34 lines
Diff to previous 1.20.8.1 (colored) to branchpoint 1.20 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1377):
	libexec/httpd/CHANGES: up to 1.22
	libexec/httpd/Makefile: up to 1.26 via patch
	libexec/httpd/auth-bozo.c: up to 1.18
	libexec/httpd/bozohttpd.8: up to 1.59
	libexec/httpd/bozohttpd.c: up to 1.80 via patch
	libexec/httpd/bozohttpd.h: up to 1.45
	libexec/httpd/cgi-bozo.c: up to 1.33
	libexec/httpd/content-bozo.c: up to 1.13
	libexec/httpd/daemon-bozo.c: up to 1.17
	libexec/httpd/dir-index-bozo.c: up to 1.25
	libexec/httpd/lua-bozo.c: up to 1.14
	libexec/httpd/lua/bozo.lua: up to 1.2
	libexec/httpd/lua/glue.c: up to 1.2
	libexec/httpd/main.c: up to 1.13
	libexec/httpd/printenv.lua: up to 1.3
	libexec/httpd/ssl-bozo.c: up to 1.22
	libexec/httpd/testsuite/Makefile: up to 1.5
	libexec/httpd/testsuite/t10.out: up to 1.2
	libexec/httpd/testsuite/test-bigfile: up to 1.2
	libexec/httpd/tilde-luzah-bozo.c: up to 1.14
Import bozohttpd 20151028:
o  add CGI support for ~user translation (-E switch)
o  add redirects to ~user translation
o  fix bugs around ~user translation
o  add schema detection for absolute redirects
o  fixed few memory leaks
o  bunch of minor tweaks
o  removed -r support
o  smarter redirects
--
Changes in 20150320:
o  fix redirection handling
o  support transport stream (.ts) and video object (.vob) files
o  directory listings show correct file sizes for large files
--
updates and bozohttpd 20160415:
o  add search-word support for CGI
o  fix a security issue in CGI suffix handler support which would
   allow remote code execution, from shm@netbsd.org
o  -C option supports now CGI scripts only

Revision 1.20.2.2 / (download) - annotate - [select for diffs], Fri Apr 15 19:36:08 2016 UTC (7 years, 11 months ago) by snj
Branch: netbsd-6
Changes since 1.20.2.1: +60 -34 lines
Diff to previous 1.20.2.1 (colored) to branchpoint 1.20 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1377):
	libexec/httpd/CHANGES: up to 1.22
	libexec/httpd/Makefile: up to 1.26 via patch
	libexec/httpd/auth-bozo.c: up to 1.18
	libexec/httpd/bozohttpd.8: up to 1.59
	libexec/httpd/bozohttpd.c: up to 1.80 via patch
	libexec/httpd/bozohttpd.h: up to 1.45
	libexec/httpd/cgi-bozo.c: up to 1.33
	libexec/httpd/content-bozo.c: up to 1.13
	libexec/httpd/daemon-bozo.c: up to 1.17
	libexec/httpd/dir-index-bozo.c: up to 1.25
	libexec/httpd/lua-bozo.c: up to 1.14
	libexec/httpd/lua/bozo.lua: up to 1.2
	libexec/httpd/lua/glue.c: up to 1.2
	libexec/httpd/main.c: up to 1.13
	libexec/httpd/printenv.lua: up to 1.3
	libexec/httpd/ssl-bozo.c: up to 1.22
	libexec/httpd/testsuite/Makefile: up to 1.5
	libexec/httpd/testsuite/t10.out: up to 1.2
	libexec/httpd/testsuite/test-bigfile: up to 1.2
	libexec/httpd/tilde-luzah-bozo.c: up to 1.14
Import bozohttpd 20151028:
o  add CGI support for ~user translation (-E switch)
o  add redirects to ~user translation
o  fix bugs around ~user translation
o  add schema detection for absolute redirects
o  fixed few memory leaks
o  bunch of minor tweaks
o  removed -r support
o  smarter redirects
--
Changes in 20150320:
o  fix redirection handling
o  support transport stream (.ts) and video object (.vob) files
o  directory listings show correct file sizes for large files
--
updates and bozohttpd 20160415:
o  add search-word support for CGI
o  fix a security issue in CGI suffix handler support which would
   allow remote code execution, from shm@netbsd.org
o  -C option supports now CGI scripts only

Revision 1.33.2.4 / (download) - annotate - [select for diffs], Fri Apr 15 19:01:05 2016 UTC (7 years, 11 months ago) by snj
Branch: netbsd-7
CVS Tags: netbsd-7-nhusb-base
Branch point for: netbsd-7-nhusb
Changes since 1.33.2.3: +10 -3 lines
Diff to previous 1.33.2.3 (colored) to branchpoint 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1141):
	libexec/httpd/CHANGES: up to 1.22
	libexec/httpd/bozohttpd.8: up to 1.59
	libexec/httpd/bozohttpd.c: up to 1.80
	libexec/httpd/bozohttpd.h: up to 1.45
	libexec/httpd/cgi-bozo.c: up to 1.33
	libexec/httpd/lua/bozo.lua: up to 1.2
	libexec/httpd/lua/glue.c: up to 1.2
Import bozohttpd 20151028:
o  add CGI support for ~user translation (-E switch)
o  add redirects to ~user translation
o  fix bugs around ~user translation
o  add schema detection for absolute redirects
o  fixed few memory leaks
o  bunch of minor tweaks
o  removed -r support
o  smarter redirects
--
Changes in 20150320:
o  fix redirection handling
o  support transport stream (.ts) and video object (.vob) files
o  directory listings show correct file sizes for large files
--
updates and bozohttpd 20160415:
o  add search-word support for CGI
o  fix a security issue in CGI suffix handler support which would
   allow remote code execution, from shm@netbsd.org
o  -C option supports now CGI scripts only

Revision 1.33.2.2.2.1 / (download) - annotate - [select for diffs], Fri Apr 15 18:55:49 2016 UTC (7 years, 11 months ago) by snj
Branch: netbsd-7-0
CVS Tags: netbsd-7-0-2-RELEASE, netbsd-7-0-1-RELEASE
Changes since 1.33.2.2: +56 -31 lines
Diff to previous 1.33.2.2 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1141):
	libexec/httpd/CHANGES: up to 1.22
	libexec/httpd/Makefile: up to 1.26
	libexec/httpd/auth-bozo.c: up to 1.18
	libexec/httpd/bozohttpd.8: up to 1.59
	libexec/httpd/bozohttpd.c: up to 1.80
	libexec/httpd/bozohttpd.h: up to 1.45
	libexec/httpd/cgi-bozo.c: up to 1.33
	libexec/httpd/content-bozo.c: up to 1.13
	libexec/httpd/daemon-bozo.c: up to 1.17
	libexec/httpd/dir-index-bozo.c: up to 1.25
	libexec/httpd/lua-bozo.c: up to 1.14
	libexec/httpd/lua/bozo.lua: up to 1.2
	libexec/httpd/lua/glue.c: up to 1.2
	libexec/httpd/main.c: up to 1.13
	libexec/httpd/printenv.lua: up to 1.3
	libexec/httpd/ssl-bozo.c: up to 1.22
	libexec/httpd/testsuite/Makefile: up to 1.5
	libexec/httpd/testsuite/test-bigfile: up to 1.2
	libexec/httpd/tilde-luzah-bozo.c: up to 1.14
Import bozohttpd 20151028:
o  add CGI support for ~user translation (-E switch)
o  add redirects to ~user translation
o  fix bugs around ~user translation
o  add schema detection for absolute redirects
o  fixed few memory leaks
o  bunch of minor tweaks
o  removed -r support
o  smarter redirects
Changes in 20150320:
o  fix redirection handling
o  support transport stream (.ts) and video object (.vob) files
o  directory listings show correct file sizes for large files
--
updates and bozohttpd 20160415:
o  add search-word support for CGI
o  fix a security issue in CGI suffix handler support which would
   allow remote code execution, from shm@netbsd.org
o  -C option supports now CGI scripts only

Revision 1.45 / (download) - annotate - [select for diffs], Fri Apr 15 17:57:21 2016 UTC (7 years, 11 months ago) by mrg
Branch: MAIN
Changes since 1.44: +2 -1 lines
Diff to previous 1.44 (colored) to selected 1.33.2.6.2.3 (colored)

updates and bozohttpd 20160415:
o  add search-word support for CGI
o  fix a security issue in CGI suffix handler support which would
   allow remote code execution, from shm@netbsd.org
o  -C option supports now CGI scripts only

Revision 1.33.2.3 / (download) - annotate - [select for diffs], Sun Apr 10 10:33:11 2016 UTC (7 years, 11 months ago) by martin
Branch: netbsd-7
Changes since 1.33.2.2: +47 -29 lines
Diff to previous 1.33.2.2 (colored) to branchpoint 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Catch up to -current (via patch), requested by mspo in #1141:

	libexec/httpd/CHANGES                          	 up to 1.21
	libexec/httpd/Makefile                         	 up to 1.26
	libexec/httpd/auth-bozo.c                      	 up to 1.18
	libexec/httpd/bozohttpd.8                      	 up to 1.58
	libexec/httpd/bozohttpd.c                      	 up to 1.79
	libexec/httpd/bozohttpd.h                      	 up to 1.44
	libexec/httpd/cgi-bozo.c                       	 up to 1.32
	libexec/httpd/content-bozo.c                   	 up to 1.13
	libexec/httpd/daemon-bozo.c                    	 up to 1.17
	libexec/httpd/dir-index-bozo.c                 	 up to 1.25
	libexec/httpd/lua-bozo.c                       	 up to 1.14
	libexec/httpd/main.c                           	 up to 1.13
	libexec/httpd/netbsd_queue.h                   	 up to 1.1
	libexec/httpd/printenv.lua                     	 up to 1.3
	libexec/httpd/ssl-bozo.c                       	 up to 1.22
	libexec/httpd/tilde-luzah-bozo.c               	 up to 1.14
	libexec/httpd/testsuite/Makefile               	 up to 1.5
	libexec/httpd/testsuite/test-bigfile           	 up to 1.2

Import bozohttpd 20151028:
o  add CGI support for ~user translation (-E switch)
o  add redirects to ~user translation
o  fix bugs around ~user translation
o  add schema detection for absolute redirects
o  fixed few memory leaks
o  bunch of minor tweaks
o  removed -r support
o  smarter redirects
Changes in 20150320:
o  fix redirection handling
o  support transport stream (.ts) and video object (.vob) files
o  directory listings show correct file sizes for large files

Revision 1.44 / (download) - annotate - [select for diffs], Sat Jan 2 18:40:13 2016 UTC (8 years, 2 months ago) by elric
Branch: MAIN
Changes since 1.43: +9 -3 lines
Diff to previous 1.43 (colored) to selected 1.33.2.6.2.3 (colored)

Add the concept of ``reply headers'', that is a SIMPLEQ of headers that
will be included in the HTTP reply.  We define this as we are about to
add an authentication method that may need to have a conversation with
the client.

Revision 1.43 / (download) - annotate - [select for diffs], Tue Dec 29 04:21:46 2015 UTC (8 years, 3 months ago) by mrg
Branch: MAIN
Changes since 1.42: +1 -2 lines
Diff to previous 1.42 (colored) to selected 1.33.2.6.2.3 (colored)

- convert most asprintf() calls to bozoasprintf().
- don't call getpwuid(0) if we don't need to, or fail it it fails,
  and remove the 'username' member of bozohttpd_t since it is not
  used outside of bozo_setup().

Revision 1.42 / (download) - annotate - [select for diffs], Mon Dec 28 07:37:59 2015 UTC (8 years, 3 months ago) by mrg
Branch: MAIN
Changes since 1.41: +9 -10 lines
Diff to previous 1.41 (colored) to selected 1.33.2.6.2.3 (colored)

rename bozo_err/bozo_warn/bozo_asprintf to bozoerr/etc.
new rule is that function that mirror libc-style functions get no underscore.

Revision 1.41 / (download) - annotate - [select for diffs], Sun Dec 27 10:21:35 2015 UTC (8 years, 3 months ago) by mrg
Branch: MAIN
Changes since 1.40: +12 -10 lines
Diff to previous 1.40 (colored) to selected 1.33.2.6.2.3 (colored)

several clean ups:

- bozostrdup() gains a request parameter, and uses it to determine
  what sort of error handling is required
- bozo_strdup() dies
- size_arrays() reduced slightly, pushing error handling into the caller
- convert to size_t for some array indices
- bozo_set_pref() and bozo_init_prefs() gain httpd parameters
- apply a bunch of manual CSE to vastly reduce the number of times the
  string "request->hr_httpd" appears.
- CGI parse_header() takes a request not httpd now

XXX: lua glue updated to call bozo_init_prefs() with htttpd parameter,
     but i'm only guessing here.

Revision 1.40 / (download) - annotate - [select for diffs], Sat Dec 12 18:06:58 2015 UTC (8 years, 3 months ago) by christos
Branch: MAIN
Changes since 1.39: +5 -1 lines
Diff to previous 1.39 (colored) to selected 1.33.2.6.2.3 (colored)

Introduce bozo_strdup and bozo_asprintf to add error checking and reduce
code duplication.

Note that bozo_strdup is different that bozostrdup; the _ routines exit
loging error to syslog or stderr, whereas the non _ routines send error
responses to the http client.

Revision 1.39 / (download) - annotate - [select for diffs], Sat Dec 12 16:57:53 2015 UTC (8 years, 3 months ago) by christos
Branch: MAIN
Changes since 1.38: +14 -10 lines
Diff to previous 1.38 (colored) to selected 1.33.2.6.2.3 (colored)

- restrict the default list of ciphers to something more secure
- restrict ssl options
From Travis Paul

Revision 1.38 / (download) - annotate - [select for diffs], Wed Oct 28 09:20:15 2015 UTC (8 years, 5 months ago) by shm
Branch: MAIN
Changes since 1.37: +10 -5 lines
Diff to previous 1.37 (colored) to selected 1.33.2.6.2.3 (colored)

* add CGI support for ~user translation (-E switch)
* add redirects to ~user translation
* fix bugs around ~user translation
* add schema detection for absolute redirects
* fixed few memory leaks
* bunch of minor tweaks
* removed -r support
* smarter redirects

OK mrg@

Revision 1.37 / (download) - annotate - [select for diffs], Sun Oct 25 19:06:49 2015 UTC (8 years, 5 months ago) by mrg
Branch: MAIN
Changes since 1.36: +2 -2 lines
Diff to previous 1.36 (colored) to selected 1.33.2.6.2.3 (colored)

s/USE_NBUTIL/HAVE_NBUTIL_H/, to match the Makefile.
fixes a merge problem in introduced when merging the QNX patches.

from Jan Danielsson.

Revision 1.36 / (download) - annotate - [select for diffs], Wed Aug 5 06:50:44 2015 UTC (8 years, 7 months ago) by mrg
Branch: MAIN
Changes since 1.35: +6 -1 lines
Diff to previous 1.35 (colored) to selected 1.33.2.6.2.3 (colored)

on QNX, use nbutil.h.

Revision 1.33.2.2 / (download) - annotate - [select for diffs], Sat May 9 08:50:42 2015 UTC (8 years, 10 months ago) by snj
Branch: netbsd-7
CVS Tags: netbsd-7-0-RELEASE, netbsd-7-0-RC3, netbsd-7-0-RC2, netbsd-7-0-RC1
Branch point for: netbsd-7-0
Changes since 1.33.2.1: +2 -3 lines
Diff to previous 1.33.2.1 (colored) to branchpoint 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #743):
	libexec/httpd/bozohttpd.8: revision 1.51
	libexec/httpd/bozohttpd.c: revision 1.64
	libexec/httpd/bozohttpd.h: revision 1.35
	libexec/httpd/cgi-bozo.c: revision 1.27
	libexec/httpd/content-bozo.c: revision 1.12
fix content type handling to not hard code (wrong) values for length,
but just call strlen() as needed.  call this 20150501.
reported by Jan Danielsson for ".svg".

Revision 1.35 / (download) - annotate - [select for diffs], Sat May 2 11:35:48 2015 UTC (8 years, 10 months ago) by mrg
Branch: MAIN
Changes since 1.34: +2 -3 lines
Diff to previous 1.34 (colored) to selected 1.33.2.6.2.3 (colored)

fix content type handling to not hard code (wrong) values for length,
but just call strlen() as needed.  call this 20150501.

reported by Jan Danielsson for ".svg".

Revision 1.33.2.1 / (download) - annotate - [select for diffs], Mon Jan 12 10:02:29 2015 UTC (9 years, 2 months ago) by martin
Branch: netbsd-7
Changes since 1.33: +3 -1 lines
Diff to previous 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #408):
	libexec/httpd/content-bozo.c: revision 1.11
	libexec/httpd/dir-index-bozo.c: revision 1.20
	libexec/httpd/bozohttpd.h: revision 1.34
	libexec/httpd/bozohttpd.c: revision 1.57
	libexec/httpd/bozohttpd.8: revision 1.47
	libexec/httpd/bozohttpd.c: revision 1.58
	libexec/httpd/bozohttpd.8: revision 1.48
	libexec/httpd/bozohttpd.c: revision 1.59
	libexec/httpd/lua-bozo.c: revision 1.11
	libexec/httpd/bozohttpd.c: revision 1.60
	libexec/httpd/auth-bozo.c: revision 1.14
	libexec/httpd/auth-bozo.c: revision 1.15
	libexec/httpd/auth-bozo.c: revision 1.16

Update bozohttpd to 20141225:
- NUL terminate a string.
- don't truncate file sizes to 32 bits for directory indexes.
- Fixed off-by-one in virtualhost processing. Previous code was
  checking if Host header is a prefix of any existing vhost.
  This behaviour might be used to uncover existing vitual hosts
  from the remote.
- Fixed memory leak in case of multiple authentication headers sent
  by the client.
- Avoid array access out of bounds.

Revision 1.34 / (download) - annotate - [select for diffs], Fri Nov 21 08:58:28 2014 UTC (9 years, 4 months ago) by shm
Branch: MAIN
CVS Tags: bozohttpd-20150320, bozohttpd-20141225
Changes since 1.33: +3 -1 lines
Diff to previous 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Fixed memory leak in case of multiple authentication headers sent by the
client.

OK mrg@

Revision 1.23.2.1 / (download) - annotate - [select for diffs], Wed Aug 20 00:02:22 2014 UTC (9 years, 7 months ago) by tls
Branch: tls-maxphys
Changes since 1.23: +55 -10 lines
Diff to previous 1.23 (colored) next main 1.24 (colored) to selected 1.33.2.6.2.3 (colored)

Rebase to HEAD as of a few days ago.

Revision 1.32.2.1 / (download) - annotate - [select for diffs], Sun Aug 10 06:52:40 2014 UTC (9 years, 7 months ago) by tls
Branch: tls-earlyentropy
Changes since 1.32: +3 -3 lines
Diff to previous 1.32 (colored) next main 1.33 (colored) to selected 1.33.2.6.2.3 (colored)

Rebase.

Revision 1.33 / (download) - annotate - [select for diffs], Thu Jul 17 06:27:52 2014 UTC (9 years, 8 months ago) by mrg
Branch: MAIN
CVS Tags: tls-maxphys-base, tls-earlyentropy-base, netbsd-7-base
Branch point for: netbsd-7
Changes since 1.32: +3 -3 lines
Diff to previous 1.32 (colored) to selected 1.33.2.6.2.3 (colored)

rewrite much of the SSL code:
- handle errors in many places they weren't properly
- make SSL_accept() an error the main code notices
- expand bozo_ssl_err() to include bozo_ssl_warn(), bozo_clear_ssl_queue()
- remove empty bozo_ssl_flush()

Revision 1.5.8.2.6.1 / (download) - annotate - [select for diffs], Wed Jul 9 16:09:39 2014 UTC (9 years, 8 months ago) by msaitoh
Branch: netbsd-5-1
CVS Tags: netbsd-5-1-5-RELEASE
Changes since 1.5.8.2: +238 -125 lines
Diff to previous 1.5.8.2 (colored) next main 1.5.8.3 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1913):
libexec/httpd/CHANGES				1.3-1.18
libexec/httpd/Makefile				1.8-1.22 via patch
libexec/httpd/Makefile.boot			1.3-1.6
libexec/httpd/auth-bozo.c			1.5-1.13
libexec/httpd/bozohttpd.8			1.6-1.46
libexec/httpd/bozohttpd.c			1.8,1.12-1.54
libexec/httpd/bozohttpd.h			1.8-1.32
libexec/httpd/cgi-bozo.c			1.11-1.25
libexec/httpd/content-bozo.c			1.4-1.10
libexec/httpd/daemon-bozo.c			1.5-1.16
libexec/httpd/dir-index-bozo.c			1.6-1.19
libexec/httpd/ssl-bozo.c			1.5-1.16
libexec/httpd/tilde-luzah-bozo.c		1.5-1.10
libexec/httpd/lua-bozo.c			1.1-1.9
libexec/httpd/main.c				1.1-1.7
libexec/httpd/netbsd_queue.h			1.1
libexec/httpd/printenv.lua			1.1-1.2
libexec/httpd/debug/Makefile			1.1
libexec/httpd/libbozohttpd/Makefile		1.2
libexec/httpd/libbozohttpd/libbozohttpd.3	1.3
libexec/httpd/libbozohttpd/shlib_version	1.1
libexec/httpd/lua/Makefile			1.1
libexec/httpd/lua/bozo.lua			1.1
libexec/httpd/lua/glue.c			1.1
libexec/httpd/lua/optparse.lua			1.1
libexec/httpd/lua/shlib_version			1.1
libexec/httpd/small/Makefile			1.1-1.2
libexec/httpd/testsuite/Makefile		1.4
libexec/httpd/testsuite/html_cmp		1.4
libexec/httpd/testsuite/t1.in			1.3
libexec/httpd/testsuite/t1.out			1.3
libexec/httpd/testsuite/t10.in			1.1
libexec/httpd/testsuite/t10.out			1.1
libexec/httpd/testsuite/t2.in			1.3
libexec/httpd/testsuite/t2.out			1.3
libexec/httpd/testsuite/t3.in			1.3
libexec/httpd/testsuite/t3.out			1.3
libexec/httpd/testsuite/t4.in			1.3
libexec/httpd/testsuite/t4.out			1.3
libexec/httpd/testsuite/t5.in			1.3
libexec/httpd/testsuite/t5.out			1.3
libexec/httpd/testsuite/t6.in			1.3
libexec/httpd/testsuite/t6.out			1.3
libexec/httpd/testsuite/t7.in			1.3
libexec/httpd/testsuite/t7.out			1.3
libexec/httpd/testsuite/t8.in			1.3
libexec/httpd/testsuite/t8.out			1.3
libexec/httpd/testsuite/t9.in			1.3
libexec/httpd/testsuite/t9.out			1.3
libexec/httpd/testsuite/test-bigfile		1.1
libexec/httpd/testsuite/data/bigfile		1.1
libexec/httpd/testsuite/data/bigfile.partial4000 1.1
libexec/httpd/testsuite/data/bigfile.partial8000 1.1
libexec/httpd/testsuite/data/file		1.3
libexec/httpd/testsuite/data/index.html		1.3

	Update bozohttpd from 20080303+patches to 20140708.

changes in bozohttpd 20140708:
	o  fixes for virtual host support, from rajeev_v_pillai@yahoo.com
	o  avoid printing double errors, from shm@netbsd.org
	o  fix a security issue in basic HTTP authentication which would allow
	   authentication to be bypassed, from shm@netbsd.org

changes in bozohttpd 20140201:
	o  support .svg files
	o  fix a core dump when requests timeout

changes in bozohttpd 20140102:
	o  update a few content types
	o  add support for directly calling lua scripts to handle
	   processes, from mbalmer@netbsd.org
	o  properly escape generated HTML
	o  add authentication for redirections, from martin@netbsd.org
	o  handle chained ssl certifications, from elric@netbsd.org
	o  add basic support for gzipped files, from elric@netbsd.org
	o  properly escape generated URIs

changes in bozohttpd 20111118:
	o  add -P <pidfile> option, from jmmv@netbsd.org
	o  avoid crashes with http basic auth, from pooka@netbsd.org
	o  add support for REDIRECT_STATUS variable, from tls@netbsd.org
	o  support .mp4 files in the default map
	o  directory indexes with files with : are now displayed properly, from
	   reed@netbsd.org
	o  allow -I option to be useful in non-inetd mode as well

changes in bozohttpd 20100920:
	o  properly fully disable multi-file mode for now
	o  fix the -t and -U options when used without the -e option, broken since
	   the library-ifcation
	o  be explicit that logs go to the FTP facility in syslog
	o  use scandir() with alphasort() for sorted directory lists, from moof
	o  fix a serious error in vhost handling; "Host:.." would allow access to
	   the next level directory from the virtual root directory, from seanb
	o  fix some various non standard compile time errors, from rudolf
	o  fix dynamic CGI content maps, from rudolf

changes in bozohttpd 20100617:
	o  fix some compile issues
	o  fix SSL mode.  from rtr
	o  fix some cgi-bin issues, as seen with cvsweb
	o  disable multi-file daemon mode for now, it breaks
	o  return 404's instead of 403's when chdir of ~user dirs fail
	o  remove "noreturn" attribute from bozo_http_error() that was
	   causing incorrect runtime behaviour

changes in bozohttpd 20100509:
	o  major rework and clean up of internal interfaces.  move the main
	   program into main.c, the remaining parts are useable as library.
	   add bindings for lua.  by Alistair G. Crooks <agc@netbsd.org>
	o  fix http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566325

changes in bozohttpd 20090522:
	o  avoid dying in daemon mode for some uncommon, but recoverable, errors
	o  close leaking file descriptors for CGI and daemon mode
	o  handle poll errors properly
	o  don't try to handle more than one request per process yet
	o  add subdirs for build "debug" and "small" versions
	o  clean up a bad merge / duplicate code
	o  make mmap() usage portable, fixes linux & ranges: support
	o  document the -f option
	o  daemon mode now serves 6 files per child

changes in bozohttpd 20090417:
	o  make bozohttpd internally more modular, preparing the way
	   to handle more than one request per process
	o  fix http-auth, set $REMOTE_USER not $REMOTEUSER.  also fix
	   cgi-bin with cvsweb, from Holger Weiss <holger@CIS.FU-Berlin.DE>
	o  fix an uninitialised variable use in daemon mode
	o  fix ssl mode with newer OpenSSL
	o  mmap large files in manageable sizes so we can serve any size file
	o  refactor url processing to handle query strings correctly for CGI
	   from Sergey Katsev at Coyote Point
	o  add If-Modified-Since support, from Joerg Sonnenberger
	   <joerg@netbsd.org>
	o  many more manual fixes, from NetBSD

Revision 1.5.8.2.10.1 / (download) - annotate - [select for diffs], Wed Jul 9 16:04:13 2014 UTC (9 years, 8 months ago) by msaitoh
Branch: netbsd-5-2
CVS Tags: netbsd-5-2-3-RELEASE
Changes since 1.5.8.2: +238 -125 lines
Diff to previous 1.5.8.2 (colored) next main 1.5.8.3 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1913):
libexec/httpd/CHANGES				1.3-1.18
libexec/httpd/Makefile				1.8-1.22 via patch
libexec/httpd/Makefile.boot			1.3-1.6
libexec/httpd/auth-bozo.c			1.5-1.13
libexec/httpd/bozohttpd.8			1.6-1.46
libexec/httpd/bozohttpd.c			1.8,1.12-1.54
libexec/httpd/bozohttpd.h			1.8-1.32
libexec/httpd/cgi-bozo.c			1.11-1.25
libexec/httpd/content-bozo.c			1.4-1.10
libexec/httpd/daemon-bozo.c			1.5-1.16
libexec/httpd/dir-index-bozo.c			1.6-1.19
libexec/httpd/ssl-bozo.c			1.5-1.16
libexec/httpd/tilde-luzah-bozo.c		1.5-1.10
libexec/httpd/lua-bozo.c			1.1-1.9
libexec/httpd/main.c				1.1-1.7
libexec/httpd/netbsd_queue.h			1.1
libexec/httpd/printenv.lua			1.1-1.2
libexec/httpd/debug/Makefile			1.1
libexec/httpd/libbozohttpd/Makefile		1.2
libexec/httpd/libbozohttpd/libbozohttpd.3	1.3
libexec/httpd/libbozohttpd/shlib_version	1.1
libexec/httpd/lua/Makefile			1.1
libexec/httpd/lua/bozo.lua			1.1
libexec/httpd/lua/glue.c			1.1
libexec/httpd/lua/optparse.lua			1.1
libexec/httpd/lua/shlib_version			1.1
libexec/httpd/small/Makefile			1.1-1.2
libexec/httpd/testsuite/Makefile		1.4
libexec/httpd/testsuite/html_cmp		1.4
libexec/httpd/testsuite/t1.in			1.3
libexec/httpd/testsuite/t1.out			1.3
libexec/httpd/testsuite/t10.in			1.1
libexec/httpd/testsuite/t10.out			1.1
libexec/httpd/testsuite/t2.in			1.3
libexec/httpd/testsuite/t2.out			1.3
libexec/httpd/testsuite/t3.in			1.3
libexec/httpd/testsuite/t3.out			1.3
libexec/httpd/testsuite/t4.in			1.3
libexec/httpd/testsuite/t4.out			1.3
libexec/httpd/testsuite/t5.in			1.3
libexec/httpd/testsuite/t5.out			1.3
libexec/httpd/testsuite/t6.in			1.3
libexec/httpd/testsuite/t6.out			1.3
libexec/httpd/testsuite/t7.in			1.3
libexec/httpd/testsuite/t7.out			1.3
libexec/httpd/testsuite/t8.in			1.3
libexec/httpd/testsuite/t8.out			1.3
libexec/httpd/testsuite/t9.in			1.3
libexec/httpd/testsuite/t9.out			1.3
libexec/httpd/testsuite/test-bigfile		1.1
libexec/httpd/testsuite/data/bigfile		1.1
libexec/httpd/testsuite/data/bigfile.partial4000 1.1
libexec/httpd/testsuite/data/bigfile.partial8000 1.1
libexec/httpd/testsuite/data/file		1.3
libexec/httpd/testsuite/data/index.html		1.3

	Update bozohttpd from 20080303+patches to 20140708.

changes in bozohttpd 20140708:
	o  fixes for virtual host support, from rajeev_v_pillai@yahoo.com
	o  avoid printing double errors, from shm@netbsd.org
	o  fix a security issue in basic HTTP authentication which would allow
	   authentication to be bypassed, from shm@netbsd.org

changes in bozohttpd 20140201:
	o  support .svg files
	o  fix a core dump when requests timeout

changes in bozohttpd 20140102:
	o  update a few content types
	o  add support for directly calling lua scripts to handle
	   processes, from mbalmer@netbsd.org
	o  properly escape generated HTML
	o  add authentication for redirections, from martin@netbsd.org
	o  handle chained ssl certifications, from elric@netbsd.org
	o  add basic support for gzipped files, from elric@netbsd.org
	o  properly escape generated URIs

changes in bozohttpd 20111118:
	o  add -P <pidfile> option, from jmmv@netbsd.org
	o  avoid crashes with http basic auth, from pooka@netbsd.org
	o  add support for REDIRECT_STATUS variable, from tls@netbsd.org
	o  support .mp4 files in the default map
	o  directory indexes with files with : are now displayed properly, from
	   reed@netbsd.org
	o  allow -I option to be useful in non-inetd mode as well

changes in bozohttpd 20100920:
	o  properly fully disable multi-file mode for now
	o  fix the -t and -U options when used without the -e option, broken since
	   the library-ifcation
	o  be explicit that logs go to the FTP facility in syslog
	o  use scandir() with alphasort() for sorted directory lists, from moof
	o  fix a serious error in vhost handling; "Host:.." would allow access to
	   the next level directory from the virtual root directory, from seanb
	o  fix some various non standard compile time errors, from rudolf
	o  fix dynamic CGI content maps, from rudolf

changes in bozohttpd 20100617:
	o  fix some compile issues
	o  fix SSL mode.  from rtr
	o  fix some cgi-bin issues, as seen with cvsweb
	o  disable multi-file daemon mode for now, it breaks
	o  return 404's instead of 403's when chdir of ~user dirs fail
	o  remove "noreturn" attribute from bozo_http_error() that was
	   causing incorrect runtime behaviour

changes in bozohttpd 20100509:
	o  major rework and clean up of internal interfaces.  move the main
	   program into main.c, the remaining parts are useable as library.
	   add bindings for lua.  by Alistair G. Crooks <agc@netbsd.org>
	o  fix http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566325

changes in bozohttpd 20090522:
	o  avoid dying in daemon mode for some uncommon, but recoverable, errors
	o  close leaking file descriptors for CGI and daemon mode
	o  handle poll errors properly
	o  don't try to handle more than one request per process yet
	o  add subdirs for build "debug" and "small" versions
	o  clean up a bad merge / duplicate code
	o  make mmap() usage portable, fixes linux & ranges: support
	o  document the -f option
	o  daemon mode now serves 6 files per child

changes in bozohttpd 20090417:
	o  make bozohttpd internally more modular, preparing the way
	   to handle more than one request per process
	o  fix http-auth, set $REMOTE_USER not $REMOTEUSER.  also fix
	   cgi-bin with cvsweb, from Holger Weiss <holger@CIS.FU-Berlin.DE>
	o  fix an uninitialised variable use in daemon mode
	o  fix ssl mode with newer OpenSSL
	o  mmap large files in manageable sizes so we can serve any size file
	o  refactor url processing to handle query strings correctly for CGI
	   from Sergey Katsev at Coyote Point
	o  add If-Modified-Since support, from Joerg Sonnenberger
	   <joerg@netbsd.org>
	o  many more manual fixes, from NetBSD

Revision 1.5.8.3 / (download) - annotate - [select for diffs], Wed Jul 9 15:21:21 2014 UTC (9 years, 8 months ago) by msaitoh
Branch: netbsd-5
Changes since 1.5.8.2: +238 -125 lines
Diff to previous 1.5.8.2 (colored) to branchpoint 1.5 (colored) next main 1.6 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1913):
libexec/httpd/CHANGES				1.3-1.18
libexec/httpd/Makefile				1.8-1.22 via patch
libexec/httpd/Makefile.boot			1.3-1.6
libexec/httpd/auth-bozo.c			1.5-1.13
libexec/httpd/bozohttpd.8			1.6-1.46
libexec/httpd/bozohttpd.c			1.8,1.12-1.54
libexec/httpd/bozohttpd.h			1.8-1.32
libexec/httpd/cgi-bozo.c			1.11-1.25
libexec/httpd/content-bozo.c			1.4-1.10
libexec/httpd/daemon-bozo.c			1.5-1.16
libexec/httpd/dir-index-bozo.c			1.6-1.19
libexec/httpd/ssl-bozo.c			1.5-1.16
libexec/httpd/tilde-luzah-bozo.c		1.5-1.10
libexec/httpd/lua-bozo.c			1.1-1.9
libexec/httpd/main.c				1.1-1.7
libexec/httpd/netbsd_queue.h			1.1
libexec/httpd/printenv.lua			1.1-1.2
libexec/httpd/debug/Makefile			1.1
libexec/httpd/libbozohttpd/Makefile		1.2
libexec/httpd/libbozohttpd/libbozohttpd.3	1.3
libexec/httpd/libbozohttpd/shlib_version	1.1
libexec/httpd/lua/Makefile			1.1
libexec/httpd/lua/bozo.lua			1.1
libexec/httpd/lua/glue.c			1.1
libexec/httpd/lua/optparse.lua			1.1
libexec/httpd/lua/shlib_version			1.1
libexec/httpd/small/Makefile			1.1-1.2
libexec/httpd/testsuite/Makefile		1.4
libexec/httpd/testsuite/html_cmp		1.4
libexec/httpd/testsuite/t1.in			1.3
libexec/httpd/testsuite/t1.out			1.3
libexec/httpd/testsuite/t10.in			1.1
libexec/httpd/testsuite/t10.out			1.1
libexec/httpd/testsuite/t2.in			1.3
libexec/httpd/testsuite/t2.out			1.3
libexec/httpd/testsuite/t3.in			1.3
libexec/httpd/testsuite/t3.out			1.3
libexec/httpd/testsuite/t4.in			1.3
libexec/httpd/testsuite/t4.out			1.3
libexec/httpd/testsuite/t5.in			1.3
libexec/httpd/testsuite/t5.out			1.3
libexec/httpd/testsuite/t6.in			1.3
libexec/httpd/testsuite/t6.out			1.3
libexec/httpd/testsuite/t7.in			1.3
libexec/httpd/testsuite/t7.out			1.3
libexec/httpd/testsuite/t8.in			1.3
libexec/httpd/testsuite/t8.out			1.3
libexec/httpd/testsuite/t9.in			1.3
libexec/httpd/testsuite/t9.out			1.3
libexec/httpd/testsuite/test-bigfile		1.1
libexec/httpd/testsuite/data/bigfile		1.1
libexec/httpd/testsuite/data/bigfile.partial4000 1.1
libexec/httpd/testsuite/data/bigfile.partial8000 1.1
libexec/httpd/testsuite/data/file		1.3
libexec/httpd/testsuite/data/index.html		1.3

	Update bozohttpd from 20080303+patches to 20140708.

changes in bozohttpd 20140708:
	o  fixes for virtual host support, from rajeev_v_pillai@yahoo.com
	o  avoid printing double errors, from shm@netbsd.org
	o  fix a security issue in basic HTTP authentication which would allow
	   authentication to be bypassed, from shm@netbsd.org

changes in bozohttpd 20140201:
	o  support .svg files
	o  fix a core dump when requests timeout

changes in bozohttpd 20140102:
	o  update a few content types
	o  add support for directly calling lua scripts to handle
	   processes, from mbalmer@netbsd.org
	o  properly escape generated HTML
	o  add authentication for redirections, from martin@netbsd.org
	o  handle chained ssl certifications, from elric@netbsd.org
	o  add basic support for gzipped files, from elric@netbsd.org
	o  properly escape generated URIs

changes in bozohttpd 20111118:
	o  add -P <pidfile> option, from jmmv@netbsd.org
	o  avoid crashes with http basic auth, from pooka@netbsd.org
	o  add support for REDIRECT_STATUS variable, from tls@netbsd.org
	o  support .mp4 files in the default map
	o  directory indexes with files with : are now displayed properly, from
	   reed@netbsd.org
	o  allow -I option to be useful in non-inetd mode as well

changes in bozohttpd 20100920:
	o  properly fully disable multi-file mode for now
	o  fix the -t and -U options when used without the -e option, broken since
	   the library-ifcation
	o  be explicit that logs go to the FTP facility in syslog
	o  use scandir() with alphasort() for sorted directory lists, from moof
	o  fix a serious error in vhost handling; "Host:.." would allow access to
	   the next level directory from the virtual root directory, from seanb
	o  fix some various non standard compile time errors, from rudolf
	o  fix dynamic CGI content maps, from rudolf

changes in bozohttpd 20100617:
	o  fix some compile issues
	o  fix SSL mode.  from rtr
	o  fix some cgi-bin issues, as seen with cvsweb
	o  disable multi-file daemon mode for now, it breaks
	o  return 404's instead of 403's when chdir of ~user dirs fail
	o  remove "noreturn" attribute from bozo_http_error() that was
	   causing incorrect runtime behaviour

changes in bozohttpd 20100509:
	o  major rework and clean up of internal interfaces.  move the main
	   program into main.c, the remaining parts are useable as library.
	   add bindings for lua.  by Alistair G. Crooks <agc@netbsd.org>
	o  fix http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566325

changes in bozohttpd 20090522:
	o  avoid dying in daemon mode for some uncommon, but recoverable, errors
	o  close leaking file descriptors for CGI and daemon mode
	o  handle poll errors properly
	o  don't try to handle more than one request per process yet
	o  add subdirs for build "debug" and "small" versions
	o  clean up a bad merge / duplicate code
	o  make mmap() usage portable, fixes linux & ranges: support
	o  document the -f option
	o  daemon mode now serves 6 files per child

changes in bozohttpd 20090417:
	o  make bozohttpd internally more modular, preparing the way
	   to handle more than one request per process
	o  fix http-auth, set $REMOTE_USER not $REMOTEUSER.  also fix
	   cgi-bin with cvsweb, from Holger Weiss <holger@CIS.FU-Berlin.DE>
	o  fix an uninitialised variable use in daemon mode
	o  fix ssl mode with newer OpenSSL
	o  mmap large files in manageable sizes so we can serve any size file
	o  refactor url processing to handle query strings correctly for CGI
	   from Sergey Katsev at Coyote Point
	o  add If-Modified-Since support, from Joerg Sonnenberger
	   <joerg@netbsd.org>
	o  many more manual fixes, from NetBSD

Revision 1.20.6.1 / (download) - annotate - [select for diffs], Wed Jul 9 09:47:10 2014 UTC (9 years, 8 months ago) by msaitoh
Branch: netbsd-6-0
CVS Tags: netbsd-6-0-6-RELEASE
Changes since 1.20: +61 -15 lines
Diff to previous 1.20 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1095):
libexec/httpd/CHANGES				1.12-1.18
libexec/httpd/Makefile				1.13-1.22
libexec/httpd/Makefile.boot			1.6
libexec/httpd/auth-bozo.c			1.11-1.13
libexec/httpd/bozohttpd.8			1.33-1.46
libexec/httpd/bozohttpd.c			1.31-1.54
libexec/httpd/bozohttpd.h			1.21-1.32
libexec/httpd/cgi-bozo.c			1.21-1.25
libexec/httpd/content-bozo.c			1.8-1.10
libexec/httpd/daemon-bozo.c			1.16-1.16
libexec/httpd/dir-index-bozo.c			1.15-1.19
libexec/httpd/lua-bozo.c			1.1-1.9
libexec/httpd/main.c				1.6-1.7
libexec/httpd/netbsd_queue.h			1.1
libexec/httpd/printenv.lua			1.1-1.2
libexec/httpd/ssl-bozo.c			1.14-1.16
libexec/httpd/tilde-luzah-bozo.c		1.10
libexec/httpd/libbozohttpd/Makefile		1.2
libexec/httpd/libbozohttpd/libbozohttpd.3	1.2-1.3
libexec/httpd/small/Makefile			1.2

	Update bozohttpd from 20111118 to 20140708.

	changes in bozohttpd 20140708:
	o  fixes for virtual host support, from rajeev_v_pillai@yahoo.com
	o  avoid printing double errors, from shm@netbsd.org
	o  fix a security issue in basic HTTP authentication which would allow
	   authentication to be bypassed, from shm@netbsd.org

	changes in bozohttpd 20140201:
	o  support .svg files
	o  fix a core dump when requests timeout

	changes in bozohttpd 20140102:
	o  update a few content types
	o  add support for directly calling lua scripts to handle
	   processes, from mbalmer@netbsd.org
	o  properly escape generated HTML
	o  add authentication for redirections, from martin@netbsd.org
	o  handle chained ssl certifications, from elric@netbsd.org
	o  add basic support for gzipped files, from elric@netbsd.org
	o  properly escape generated URIs

Revision 1.20.8.1 / (download) - annotate - [select for diffs], Wed Jul 9 09:44:56 2014 UTC (9 years, 8 months ago) by msaitoh
Branch: netbsd-6-1
CVS Tags: netbsd-6-1-5-RELEASE
Changes since 1.20: +61 -15 lines
Diff to previous 1.20 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1095):
libexec/httpd/CHANGES				1.12-1.18
libexec/httpd/Makefile				1.13-1.22
libexec/httpd/Makefile.boot			1.6
libexec/httpd/auth-bozo.c			1.11-1.13
libexec/httpd/bozohttpd.8			1.33-1.46
libexec/httpd/bozohttpd.c			1.31-1.54
libexec/httpd/bozohttpd.h			1.21-1.32
libexec/httpd/cgi-bozo.c			1.21-1.25
libexec/httpd/content-bozo.c			1.8-1.10
libexec/httpd/daemon-bozo.c			1.16-1.16
libexec/httpd/dir-index-bozo.c			1.15-1.19
libexec/httpd/lua-bozo.c			1.1-1.9
libexec/httpd/main.c				1.6-1.7
libexec/httpd/netbsd_queue.h			1.1
libexec/httpd/printenv.lua			1.1-1.2
libexec/httpd/ssl-bozo.c			1.14-1.16
libexec/httpd/tilde-luzah-bozo.c		1.10
libexec/httpd/libbozohttpd/Makefile		1.2
libexec/httpd/libbozohttpd/libbozohttpd.3	1.2-1.3
libexec/httpd/small/Makefile			1.2

	Update bozohttpd from 20111118 to 20140708.

	changes in bozohttpd 20140708:
	o  fixes for virtual host support, from rajeev_v_pillai@yahoo.com
	o  avoid printing double errors, from shm@netbsd.org
	o  fix a security issue in basic HTTP authentication which would allow
	   authentication to be bypassed, from shm@netbsd.org

	changes in bozohttpd 20140201:
	o  support .svg files
	o  fix a core dump when requests timeout

	changes in bozohttpd 20140102:
	o  update a few content types
	o  add support for directly calling lua scripts to handle
	   processes, from mbalmer@netbsd.org
	o  properly escape generated HTML
	o  add authentication for redirections, from martin@netbsd.org
	o  handle chained ssl certifications, from elric@netbsd.org
	o  add basic support for gzipped files, from elric@netbsd.org
	o  properly escape generated URIs

Revision 1.20.2.1 / (download) - annotate - [select for diffs], Wed Jul 9 09:42:39 2014 UTC (9 years, 8 months ago) by msaitoh
Branch: netbsd-6
Changes since 1.20: +61 -15 lines
Diff to previous 1.20 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by mrg in ticket #1095):
libexec/httpd/CHANGES				1.12-1.18
libexec/httpd/Makefile				1.13-1.22
libexec/httpd/Makefile.boot			1.6
libexec/httpd/auth-bozo.c			1.11-1.13
libexec/httpd/bozohttpd.8			1.33-1.46
libexec/httpd/bozohttpd.c			1.31-1.54
libexec/httpd/bozohttpd.h			1.21-1.32
libexec/httpd/cgi-bozo.c			1.21-1.25
libexec/httpd/content-bozo.c			1.8-1.10
libexec/httpd/daemon-bozo.c			1.16-1.16
libexec/httpd/dir-index-bozo.c			1.15-1.19
libexec/httpd/lua-bozo.c			1.1-1.9
libexec/httpd/main.c				1.6-1.7
libexec/httpd/netbsd_queue.h			1.1
libexec/httpd/printenv.lua			1.1-1.2
libexec/httpd/ssl-bozo.c			1.14-1.16
libexec/httpd/tilde-luzah-bozo.c		1.10
libexec/httpd/libbozohttpd/Makefile		1.2
libexec/httpd/libbozohttpd/libbozohttpd.3	1.2-1.3
libexec/httpd/small/Makefile			1.2

	Update bozohttpd from 20111118 to 20140708.

	changes in bozohttpd 20140708:
	o  fixes for virtual host support, from rajeev_v_pillai@yahoo.com
	o  avoid printing double errors, from shm@netbsd.org
	o  fix a security issue in basic HTTP authentication which would allow
	   authentication to be bypassed, from shm@netbsd.org

	changes in bozohttpd 20140201:
	o  support .svg files
	o  fix a core dump when requests timeout

	changes in bozohttpd 20140102:
	o  update a few content types
	o  add support for directly calling lua scripts to handle
	   processes, from mbalmer@netbsd.org
	o  properly escape generated HTML
	o  add authentication for redirections, from martin@netbsd.org
	o  handle chained ssl certifications, from elric@netbsd.org
	o  add basic support for gzipped files, from elric@netbsd.org
	o  properly escape generated URIs

Revision 1.19.2.3 / (download) - annotate - [select for diffs], Thu May 22 11:37:13 2014 UTC (9 years, 10 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.19.2.2: +53 -8 lines
Diff to previous 1.19.2.2 (colored) to branchpoint 1.19 (colored) next main 1.20 (colored) to selected 1.33.2.6.2.3 (colored)

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs.  ("Protocol error: too many arguments")

Revision 1.32 / (download) - annotate - [select for diffs], Sun Feb 9 01:46:10 2014 UTC (10 years, 1 month ago) by mrg
Branch: MAIN
CVS Tags: yamt-pagecache-base9, riastradh-xf86-video-intel-2-7-1-pre-2-21-15, riastradh-drm2-base3
Branch point for: tls-earlyentropy
Changes since 1.31: +3 -2 lines
Diff to previous 1.31 (colored) to selected 1.33.2.6.2.3 (colored)

some fixes for virtual hosting support from Rajeev V. Pillai:

- memory leaks in virtual host plugged
- ensure hr_host is only the host/port part when the request
  contains the hostname in the URI not Host: header.


also update the references to the old http/1.1 draft rev 06
to RFC 2616 (fortunately, most sections hadn't moved.)

Revision 1.31 / (download) - annotate - [select for diffs], Thu Jan 2 08:21:38 2014 UTC (10 years, 2 months ago) by mrg
Branch: MAIN
CVS Tags: bozohttpd-20140102
Changes since 1.30: +2 -2 lines
Diff to previous 1.30 (colored) to selected 1.33.2.6.2.3 (colored)

- update CHANGES with recent changes
- update version to 20140102
- update copyrights
- use getcwd() over getwd()
- fix lean build (don't include lua)

Revision 1.30 / (download) - annotate - [select for diffs], Sat Oct 12 17:24:07 2013 UTC (10 years, 5 months ago) by mbalmer
Branch: MAIN
Changes since 1.29: +33 -1 lines
Diff to previous 1.29 (colored) to selected 1.33.2.6.2.3 (colored)

add Lua scripting support to bozohttpd, see httpd(8) for details

Revision 1.29 / (download) - annotate - [select for diffs], Sat Oct 12 07:49:40 2013 UTC (10 years, 5 months ago) by mbalmer
Branch: MAIN
Changes since 1.28: +3 -3 lines
Diff to previous 1.28 (colored) to selected 1.33.2.6.2.3 (colored)

remove trailing whitespace

Revision 1.28 / (download) - annotate - [select for diffs], Wed Sep 4 22:59:50 2013 UTC (10 years, 6 months ago) by pooka
Branch: MAIN
Changes since 1.27: +6 -2 lines
Diff to previous 1.27 (colored) to selected 1.33.2.6.2.3 (colored)

allow compile-time overriding of BOZO_WRSZ/MMAPSZ parameters

Revision 1.27 / (download) - annotate - [select for diffs], Thu Jul 11 08:24:47 2013 UTC (10 years, 8 months ago) by mrg
Branch: MAIN
CVS Tags: riastradh-drm2-base2, riastradh-drm2-base1, riastradh-drm2-base, riastradh-drm2, bozohttpd-20130711
Changes since 1.26: +2 -2 lines
Diff to previous 1.26 (colored) to selected 1.33.2.6.2.3 (colored)

prepare for netbsd to be mastersrc for bozohttpd.

Revision 1.26 / (download) - annotate - [select for diffs], Thu Jul 11 07:46:37 2013 UTC (10 years, 8 months ago) by mrg
Branch: MAIN
Changes since 1.25: +2 -2 lines
Diff to previous 1.25 (colored) to selected 1.33.2.6.2.3 (colored)

copyright maint.

Revision 1.25 / (download) - annotate - [select for diffs], Thu Jul 11 07:44:19 2013 UTC (10 years, 8 months ago) by mrg
Branch: MAIN
Changes since 1.24: +3 -2 lines
Diff to previous 1.24 (colored) to selected 1.33.2.6.2.3 (colored)

- update CHANGES with recent changes
- export esacpe_html() and use it in directory indexing
- update manual to include recent contributors

Revision 1.24 / (download) - annotate - [select for diffs], Thu Jun 27 10:01:31 2013 UTC (10 years, 9 months ago) by martin
Branch: MAIN
Changes since 1.23: +8 -1 lines
Diff to previous 1.23 (colored) to selected 1.33.2.6.2.3 (colored)

Redo previous (fixing a memory leak introduced), and while there rework
virtual server support - in daemonized mode mixed virtual and "main"
server usage would alter the virtual hostname depending on order of
requests.
To fix, move the effective virtual hostname into the request structure
and leave the httpd server description static.

Revision 1.19.2.2 / (download) - annotate - [select for diffs], Tue Oct 30 18:59:22 2012 UTC (11 years, 5 months ago) by yamt
Branch: yamt-pagecache
CVS Tags: yamt-pagecache-tag8
Changes since 1.19.2.1: +2 -1 lines
Diff to previous 1.19.2.1 (colored) to branchpoint 1.19 (colored) to selected 1.33.2.6.2.3 (colored)

sync with head

Revision 1.23 / (download) - annotate - [select for diffs], Thu Jul 19 09:53:06 2012 UTC (11 years, 8 months ago) by mrg
Branch: MAIN
CVS Tags: yamt-pagecache-base8, yamt-pagecache-base7, yamt-pagecache-base6, agc-symver-base, agc-symver
Branch point for: tls-maxphys
Changes since 1.22: +2 -1 lines
Diff to previous 1.22 (colored) to selected 1.33.2.6.2.3 (colored)

when generating URIs escape various characters as specified in RFC 3986.
this makes, among other things, files/dirs with "?" work with dir indexing.

Revision 1.19.2.1 / (download) - annotate - [select for diffs], Tue Apr 17 00:05:35 2012 UTC (11 years, 11 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.19: +20 -21 lines
Diff to previous 1.19 (colored) to selected 1.33.2.6.2.3 (colored)

sync with head

Revision 1.22 / (download) - annotate - [select for diffs], Wed Mar 14 23:47:19 2012 UTC (12 years ago) by joerg
Branch: MAIN
CVS Tags: yamt-pagecache-base5, yamt-pagecache-base4
Changes since 1.21: +8 -9 lines
Diff to previous 1.21 (colored) to selected 1.33.2.6.2.3 (colored)

Add BOZO_PRINTFLIKE for functions that pass an argument and va_arg to
a vprintf-like function.

Revision 1.21 / (download) - annotate - [select for diffs], Mon Feb 20 09:26:56 2012 UTC (12 years, 1 month ago) by elric
Branch: MAIN
Changes since 1.20: +2 -1 lines
Diff to previous 1.20 (colored) to selected 1.33.2.6.2.3 (colored)

Check in very basic compressed file support.  httpd will now serve
a precompressed .gz file if it exists, the client claims to support
gzip and the request is not ranged.

Revision 1.20 / (download) - annotate - [select for diffs], Fri Nov 18 09:51:31 2011 UTC (12 years, 4 months ago) by mrg
Branch: MAIN
CVS Tags: netbsd-6-base, netbsd-6-1-RELEASE, netbsd-6-1-RC4, netbsd-6-1-RC3, netbsd-6-1-RC2, netbsd-6-1-RC1, netbsd-6-1-4-RELEASE, netbsd-6-1-3-RELEASE, netbsd-6-1-2-RELEASE, netbsd-6-1-1-RELEASE, netbsd-6-0-RELEASE, netbsd-6-0-RC2, netbsd-6-0-RC1, netbsd-6-0-5-RELEASE, netbsd-6-0-4-RELEASE, netbsd-6-0-3-RELEASE, netbsd-6-0-2-RELEASE, netbsd-6-0-1-RELEASE, matt-nb6-plus-nbase, matt-nb6-plus-base, matt-nb6-plus
Branch point for: netbsd-6-1, netbsd-6-0, netbsd-6
Changes since 1.19: +12 -13 lines
Diff to previous 1.19 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20111118

Revision 1.1.1.10 / (download) - annotate - [select for diffs] (vendor branch), Fri Nov 18 09:40:36 2011 UTC (12 years, 4 months ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20111118
Changes since 1.1.1.9: +20 -14 lines
Diff to previous 1.1.1.9 (colored) to selected 1.33.2.6.2.3 (colored)

update to bozohttpd 20111118.  nothing major is missing here but
the changes since the prior import were:

        o  add -P <pidfile> option, from jmmv@netbsd.org
        o  avoid crashes with http basic auth, from pooka@netbsd.org
        o  add support for REDIRECT_STATUS variable, from tls@netbsd.org
        o  support .mp4 files in the default map
        o  directory indexes with files with : are now displayed properly, from
           reed@netbsd.org
        o  allow -I option to be useful in non-inetd mode as well

Revision 1.19 / (download) - annotate - [select for diffs], Sat Aug 27 15:33:59 2011 UTC (12 years, 7 months ago) by joerg
Branch: MAIN
CVS Tags: yamt-pagecache-base3, yamt-pagecache-base2, yamt-pagecache-base
Branch point for: yamt-pagecache
Changes since 1.18: +9 -4 lines
Diff to previous 1.18 (colored) to selected 1.33.2.6.2.3 (colored)

Don't check for __attribute__ being defined, it won't. Check for GCC 3.x
or compatible and define BOZO_PRINTFLIKE / BOZO_DEAD. Fix fallout.

Revision 1.18 / (download) - annotate - [select for diffs], Tue Mar 29 07:22:31 2011 UTC (13 years ago) by jmmv
Branch: MAIN
CVS Tags: cherry-xenmp-base, cherry-xenmp
Changes since 1.17: +2 -1 lines
Diff to previous 1.17 (colored) to selected 1.33.2.6.2.3 (colored)

Add pid file support: if the new -P option is provided, it specifies the
location of the pid file to create.

OKed by mrg@.

Revision 1.17 / (download) - annotate - [select for diffs], Mon Sep 20 23:11:38 2010 UTC (13 years, 6 months ago) by mrg
Branch: MAIN
CVS Tags: matt-mips64-premerge-20101231, bouyer-quota2-nbase, bouyer-quota2-base, bouyer-quota2
Changes since 1.16: +4 -4 lines
Diff to previous 1.16 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20100920

Revision 1.1.1.9 / (download) - annotate - [select for diffs] (vendor branch), Mon Sep 20 23:07:21 2010 UTC (13 years, 6 months ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20100920
Changes since 1.1.1.8: +5 -5 lines
Diff to previous 1.1.1.8 (colored) to selected 1.33.2.6.2.3 (colored)

initial import of bozohttpd 20100920.  the only change missing in here is:

        o  fix dynamic CGI content maps, from rudolf

Revision 1.16 / (download) - annotate - [select for diffs], Thu Sep 9 04:41:49 2010 UTC (13 years, 6 months ago) by mrg
Branch: MAIN
Changes since 1.15: +2 -2 lines
Diff to previous 1.15 (colored) to selected 1.33.2.6.2.3 (colored)

fix another compile error if NO_DAEMON_MODE is defined.  also from rudolf.

Revision 1.15 / (download) - annotate - [select for diffs], Wed Sep 8 00:47:44 2010 UTC (13 years, 6 months ago) by mrg
Branch: MAIN
Changes since 1.14: +2 -2 lines
Diff to previous 1.14 (colored) to selected 1.33.2.6.2.3 (colored)

fix a compile error if NO_DIRINDEX_SUPPORT is defined.  from rudolf.

Revision 1.14 / (download) - annotate - [select for diffs], Thu Jun 17 19:43:30 2010 UTC (13 years, 9 months ago) by mrg
Branch: MAIN
Changes since 1.13: +37 -37 lines
Diff to previous 1.13 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20100617.

Revision 1.1.1.8 / (download) - annotate - [select for diffs] (vendor branch), Thu Jun 17 19:41:04 2010 UTC (13 years, 9 months ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20100621, bozohttpd-20100617
Changes since 1.1.1.7: +36 -36 lines
Diff to previous 1.1.1.7 (colored) to selected 1.33.2.6.2.3 (colored)

initial import of bozohttpd 20100617.  recent changes:
o  fix some compile issues
o  fix SSL mode.  from rtr
o  fix some cgi-bin issues, as seen with cvsweb
o  disable multi-file daemon mode for now, it breaks
o  return 404's instead of 403's when chdir of ~user dirs fail
o  remove "noreturn" attribute from bozo_http_error() that was
   causing incorrect runtime behaviour

Revision 1.13 / (download) - annotate - [select for diffs], Mon May 10 14:44:19 2010 UTC (13 years, 10 months ago) by mrg
Branch: MAIN
Changes since 1.12: +8 -8 lines
Diff to previous 1.12 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20100510.

Revision 1.1.1.7 / (download) - annotate - [select for diffs] (vendor branch), Mon May 10 14:41:26 2010 UTC (13 years, 10 months ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20100512, bozohttpd-20100510
Changes since 1.1.1.6: +7 -7 lines
Diff to previous 1.1.1.6 (colored) to selected 1.33.2.6.2.3 (colored)

import bozohttpd 20100510 -- just fixes some compile errors.

Revision 1.12 / (download) - annotate - [select for diffs], Mon May 10 03:37:45 2010 UTC (13 years, 10 months ago) by mrg
Branch: MAIN
Changes since 1.11: +167 -115 lines
Diff to previous 1.11 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20100509.

Revision 1.1.1.6 / (download) - annotate - [select for diffs] (vendor branch), Mon May 10 03:30:04 2010 UTC (13 years, 10 months ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20100509
Changes since 1.1.1.5: +163 -114 lines
Diff to previous 1.1.1.5 (colored) to selected 1.33.2.6.2.3 (colored)

import bozohttpd 20100509.  it has these changes:
o  major rework and clean up of internal interfaces.  move the main
   program into main.c, the remaining parts are useable as library.
   add bindings for lua.  by Alistair G. Crooks <agc@netbsd.org>
o  fix http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566325


special thanks to al for the majority of these changes.

Revision 1.11 / (download) - annotate - [select for diffs], Sat May 23 02:26:03 2009 UTC (14 years, 10 months ago) by mrg
Branch: MAIN
CVS Tags: matt-premerge-20091211
Changes since 1.10: +5 -2 lines
Diff to previous 1.10 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20090522

Revision 1.1.1.5 / (download) - annotate - [select for diffs] (vendor branch), Sat May 23 02:21:19 2009 UTC (14 years, 10 months ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20090522
Changes since 1.1.1.4: +4 -1 lines
Diff to previous 1.1.1.4 (colored) to selected 1.33.2.6.2.3 (colored)

import bozohttpd 20090522, which has these changes:
	o  close more leaking file descriptors for CGI and daemon mode
	o  add subdirs for build "debug" and "small" versions
	o  clean up a bad merge / duplicate code
	o  make mmap() usage portable, fixes linux & ranges: support
	o  document the -f option
	o  daemon mode now serves 6 files per child

Revision 1.6.2.1 / (download) - annotate - [select for diffs], Wed May 13 19:18:38 2009 UTC (14 years, 10 months ago) by jym
Branch: jym-xensuspend
Changes since 1.6: +40 -32 lines
Diff to previous 1.6 (colored) next main 1.7 (colored) to selected 1.33.2.6.2.3 (colored)

Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html

Revision 1.10 / (download) - annotate - [select for diffs], Sat Apr 18 21:22:03 2009 UTC (14 years, 11 months ago) by mrg
Branch: MAIN
CVS Tags: jym-xensuspend-nbase, jym-xensuspend-base
Changes since 1.9: +2 -2 lines
Diff to previous 1.9 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20090418.  remove a couple of minor do-nothing local
changes that don't need to cause conflicts.

Revision 1.1.1.4 / (download) - annotate - [select for diffs] (vendor branch), Sat Apr 18 21:09:40 2009 UTC (14 years, 11 months ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20090418
Changes since 1.1.1.3: +4 -4 lines
Diff to previous 1.1.1.3 (colored) to selected 1.33.2.6.2.3 (colored)

import bozohttpd 20090418.  changes include:

o  avoid dying in daemon mode for some uncommon, but recoverable, errors
o  close leaking file descriptors for CGI and daemon mode
o  handle poll errors properly
o  don't try to handle more than one request per process yet

this covers PR#38489 and PR#40079, as well some some issues reported
privately.

Revision 1.9 / (download) - annotate - [select for diffs], Sat Apr 18 07:37:08 2009 UTC (14 years, 11 months ago) by mrg
Branch: MAIN
CVS Tags: mrg-merged-to-bozohttpd-20090417-post
Changes since 1.8: +4 -4 lines
Diff to previous 1.8 (colored) to selected 1.33.2.6.2.3 (colored)

de-const some variables passed to free().

Revision 1.8 / (download) - annotate - [select for diffs], Sat Apr 18 07:28:24 2009 UTC (14 years, 11 months ago) by mrg
Branch: MAIN
Changes since 1.7: +36 -29 lines
Diff to previous 1.7 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20090417

Revision 1.1.1.3 / (download) - annotate - [select for diffs] (vendor branch), Sat Apr 18 07:09:27 2009 UTC (14 years, 11 months ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20090417
Changes since 1.1.1.2: +36 -27 lines
Diff to previous 1.1.1.2 (colored) to selected 1.33.2.6.2.3 (colored)

import latest bozohttpd sources.  changes include:

        o  make bozohttpd internally more modular, preparing the way
           to handle more than one request per process
        o  fix http-auth, set $REMOTE_USER not $REMOTEUSER.  also fix
           cgi-bin with cvsweb, from Holger Weiss <holger@CIS.FU-Berlin.DE>
        o  fix an uninitialised variable use in daemon mode
        o  fix ssl mode with newer OpenSSL
        o  mmap large files in manageable sizes so we can serve any size file
        o  refactor url processing to handle query strings correctly for CGI
           from Sergey Katsev at Coyote Point
        o  add If-Modified-Since support, from Joerg Sonnenberger
           <joerg@netbsd.org>
        o  many more manual fixes, from NetBSD

Revision 1.5.8.2 / (download) - annotate - [select for diffs], Wed Feb 18 00:05:41 2009 UTC (15 years, 1 month ago) by snj
Branch: netbsd-5
CVS Tags: netbsd-5-2-RELEASE, netbsd-5-2-RC1, netbsd-5-2-2-RELEASE, netbsd-5-2-1-RELEASE, netbsd-5-1-RELEASE, netbsd-5-1-RC4, netbsd-5-1-RC3, netbsd-5-1-RC2, netbsd-5-1-RC1, netbsd-5-1-4-RELEASE, netbsd-5-1-3-RELEASE, netbsd-5-1-2-RELEASE, netbsd-5-1-1-RELEASE, netbsd-5-0-RELEASE, netbsd-5-0-RC4, netbsd-5-0-RC3, netbsd-5-0-2-RELEASE, netbsd-5-0-1-RELEASE, netbsd-5-0, matt-nb5-pq3-base, matt-nb5-pq3, matt-nb5-mips64-u2-k2-k4-k7-k8-k9, matt-nb5-mips64-u1-k1-k5, matt-nb5-mips64-premerge-20101231, matt-nb5-mips64-premerge-20091211, matt-nb5-mips64-k15, matt-nb5-mips64, matt-nb4-mips64-k7-u2a-k9b
Branch point for: netbsd-5-2, netbsd-5-1
Changes since 1.5.8.1: +2 -1 lines
Diff to previous 1.5.8.1 (colored) to branchpoint 1.5 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by joerg in ticket #438):
	libexec/httpd/bozohttpd.h: revision 1.7
	libexec/httpd/bozohttpd.c: revision 1.10
Add If-Modified-Since support.

Revision 1.7 / (download) - annotate - [select for diffs], Mon Feb 9 17:06:11 2009 UTC (15 years, 1 month ago) by joerg
Branch: MAIN
Changes since 1.6: +2 -1 lines
Diff to previous 1.6 (colored) to selected 1.33.2.6.2.3 (colored)

Add If-Modified-Since support.

Revision 1.5.8.1 / (download) - annotate - [select for diffs], Sun Feb 8 20:30:20 2009 UTC (15 years, 1 month ago) by snj
Branch: netbsd-5
CVS Tags: netbsd-5-0-RC2
Changes since 1.5: +3 -2 lines
Diff to previous 1.5 (colored) to selected 1.33.2.6.2.3 (colored)

Pull up following revision(s) (requested by tls in ticket #428):
	libexec/httpd/bozohttpd.c: revision 1.9
	libexec/httpd/bozohttpd.h: revision 1.6
	libexec/httpd/cgi-bozo.c: revision 1.9
	libexec/httpd/dir-index-bozo.c: revision 1.5
	libexec/httpd/tilde-luzah-bozo.c: revision 1.4
From Sergey Katsev at Coyote Point: fix bugs in request transformation and
CGI handling, including bin/40355 .  There are two main changes here:
1) call process_cgi() after transform_request(), not before.  Now it is
   possible to have a default cgi handler catch a request for a path that
   was produced by transformation, e.g. by index generation -- so now the
   index can be "generated" by a CGI if that is what the user desires.
2) More clearly distinguish "file" from "query" portions of the request
   URL, so we do not feed ?-suffixed "arguments" to plain files, fail to
   match filename extensions due to ?-suffixes, etc.
   After this change, there are only two cases which use the "query"
   portion of the request (the portion after the ?):
     a) A redirect issued by HTTPD will redirect to the new file, but
	with the same query string.
     b) process_cgi() will, of course continue to use the query string.

Revision 1.6 / (download) - annotate - [select for diffs], Wed Feb 4 22:55:58 2009 UTC (15 years, 1 month ago) by tls
Branch: MAIN
Branch point for: jym-xensuspend
Changes since 1.5: +3 -2 lines
Diff to previous 1.5 (colored) to selected 1.33.2.6.2.3 (colored)

From Sergey Katsev at Coyote Point: fix bugs in request transformation and
CGI handling, including bin/40355 .  There are two main changes here:

1) call process_cgi() after transform_request(), not before.  Now it is
   possible to have a default cgi handler catch a request for a path that
   was produced by transformation, e.g. by index generation -- so now the
   index can be "generated" by a CGI if that is what the user desires.

2) More clearly distinguish "file" from "query" portions of the request
   URL, so we do not feed ?-suffixed "arguments" to plain files, fail to
   match filename extensions due to ?-suffixes, etc.

   After this change, there are only two cases which use the "query"
   portion of the request (the portion after the ?):

     a) A redirect issued by HTTPD will redirect to the new file, but
	with the same query string.

     b) process_cgi() will, of course continue to use the query string.

Revision 1.4.6.1 / (download) - annotate - [select for diffs], Mon Mar 24 07:14:46 2008 UTC (16 years ago) by keiichi
Branch: keiichi-mipv6
Changes since 1.4: +12 -8 lines
Diff to previous 1.4 (colored) next main 1.5 (colored) to selected 1.33.2.6.2.3 (colored)

sync with head.

Revision 1.4.2.3 / (download) - annotate - [select for diffs], Sun Mar 23 00:41:24 2008 UTC (16 years ago) by matt
Branch: matt-armv6
Changes since 1.4.2.2: +12 -8 lines
Diff to previous 1.4.2.2 (colored) to branchpoint 1.4 (colored) next main 1.5 (colored) to selected 1.33.2.6.2.3 (colored)

sync with HEAD

Revision 1.5 / (download) - annotate - [select for diffs], Mon Mar 3 22:15:08 2008 UTC (16 years ago) by mrg
Branch: MAIN
CVS Tags: yamt-pf42-baseX, yamt-pf42-base4, yamt-pf42-base3, yamt-pf42-base2, yamt-pf42-base, yamt-pf42, wrstuden-revivesa-base-3, wrstuden-revivesa-base-2, wrstuden-revivesa-base-1, wrstuden-revivesa-base, wrstuden-revivesa, netbsd-5-base, netbsd-5-0-RC1, matt-mips64-base2, matt-armv6-nbase, keiichi-mipv6-base, hpcarm-cleanup-nbase
Branch point for: netbsd-5
Changes since 1.4: +12 -8 lines
Diff to previous 1.4 (colored) to selected 1.33.2.6.2.3 (colored)

merge bozohttpd 20080303

Revision 1.1.1.2 / (download) - annotate - [select for diffs] (vendor branch), Mon Mar 3 22:03:05 2008 UTC (16 years ago) by mrg
Branch: bozohttpd
CVS Tags: bozohttpd-20080303
Changes since 1.1.1.1: +11 -8 lines
Diff to previous 1.1.1.1 (colored) to selected 1.33.2.6.2.3 (colored)

import latest bozohttpd.  changes include:

	o  fix some cgi header processing, from <thelsdj@gmail.com>
	o  add simple Range: header processing, from <bad@bsd.de>
	o  man page fixes, from NetBSD
	o  clean up various parts, from NetBSD
	o  prefix some function names with "bozo"
	o  align directory indexing <hr> markers
	o  clean up some code GCC4 grumbled about

Revision 1.4.2.2 / (download) - annotate - [select for diffs], Tue Nov 6 23:12:03 2007 UTC (16 years, 4 months ago) by matt
Branch: matt-armv6
CVS Tags: matt-armv6-prevmlocking
Changes since 1.4.2.1: +225 -0 lines
Diff to previous 1.4.2.1 (colored) to branchpoint 1.4 (colored) to selected 1.33.2.6.2.3 (colored)

sync with HEAD

Revision 1.4.2.1, Sun Nov 4 15:20:11 2007 UTC (16 years, 4 months ago) by matt
Branch: matt-armv6
Changes since 1.4: +0 -225 lines
FILE REMOVED

file bozohttpd.h was added on branch matt-armv6 on 2007-11-06 23:12:03 +0000

Revision 1.4 / (download) - annotate - [select for diffs], Sun Nov 4 15:20:11 2007 UTC (16 years, 4 months ago) by rtr
Branch: MAIN
CVS Tags: mrg-merged-to-bozohttpd-20080303, matt-armv6-base, hpcarm-cleanup-base, cube-autoconf-base, cube-autoconf
Branch point for: matt-armv6, keiichi-mipv6
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored) to selected 1.33.2.6.2.3 (colored)

- remove const from h_header, this pointer is occasionally free'd
- remove unused write_str var
+ move header parsing to new function separation of parsing vs processing
+ alter some variable names to avoid confusion between header value and
  header name (caused breakage with previous rev)

Revision 1.3 / (download) - annotate - [select for diffs], Wed Oct 17 18:48:00 2007 UTC (16 years, 5 months ago) by tls
Branch: MAIN
Changes since 1.2: +2 -0 lines
Diff to previous 1.2 (colored) to selected 1.33.2.6.2.3 (colored)

RCS IDs

Revision 1.2 / (download) - annotate - [select for diffs], Tue Oct 16 01:31:04 2007 UTC (16 years, 5 months ago) by tls
Branch: MAIN
Changes since 1.1: +1 -4 lines
Diff to previous 1.1 (colored) to selected 1.33.2.6.2.3 (colored)

Get httpd ready for inclusion in build.

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Tue Oct 16 01:14:04 2007 UTC (16 years, 5 months ago) by tls
Branch: bozohttpd
CVS Tags: bozohttpd-20060517
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored) to selected 1.33.2.6.2.3 (colored)

Import of bozohttpd for its originally intended purpose: a small (~30k)
simple run-from-inetd httpd suitable for small systems (and some large
ones).

Revision 1.1 / (download) - annotate - [select for diffs], Tue Oct 16 01:14:04 2007 UTC (16 years, 5 months ago) by tls
Branch: MAIN
Diff to selected 1.33.2.6.2.3 (colored)

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>