Lines Matching refs:in
11 * [meson] fix typo in sbindir
18 * [multiple] codespell: correct spelling in comments
43 * [tests] adjust outdated opt in tests/lighttpd.conf
48 * [core] path-info in debug trace may be unset
50 * [autotools] fix typo in -I used --with-pcre2=/path (fixes #3190)
72 * [mod_alias] fix typo in config error message
113 * [core] check for built-in plugins before dlopen
126 * [mod_wstunnel] store value in tmp before byteswap
158 * [core] h2: optim: send window update in 16k units
166 * [doc] more consistent use of vars in examples
187 * [build] meson: fix typo in variable name
205 * [core] include guard consistency in sys-time.h
229 * [mod_magnet] use lua_isnoneornil() in interfaces
240 * [mod_auth] save letter-case diff in require config
243 * [core] fill in un.sun_path after accept() (fixes #3147)
265 * [build] -D_DEFAULT_SOURCE consistency in builds
293 * [mod_magnet] set script env in func first upvalue
297 * [core] remove func decls duplicated in plugin.h
305 * [mod_accesslog] do not double-count hdr len in %I
328 * [mod_accesslog] reorder fields in switch()
386 * [mod_dirlisting] fix logic inversion in cache
387 * [core] mark expect cond in http_response_send_file
397 * [mod_webdav] copy_file_range() new in FreeBSD 13
398 * [mod_webdav] copy_file_range() new in FreeBSD 13
446 * [tests] _WIN32 adjustments in LightyTest.pm
447 * [tests] revert _WIN32 adjustments in LightyTest.pm
450 * [mbedtls] save (mbedtls_ssl_config *) in hctx
451 * [multiple] permit UTF-8 in SSL_CLIENT_S_DN_*
452 * [mod_openssl] do not esc UTF-8 in cert subject
455 * [mod_mbedtls] remove use of out_left in mbedtls 3
461 * [core] fix reqpool mem corruption in 1.4.62 (fixes #3118)
479 * [tests] disable test_mod_ssi in cmake (temporary)
480 * [tests] disable test_mod_ssi in cmake (temporary)
481 * [tests] reenable test_mod_ssi in cmake
482 * [core] run plugin cleanup hooks in reverse
487 * [core] use ck_assert() in vector.[ch]
489 * [mod_ssi] 0-init ssi_val_t in ssi_ctx_t
508 * [core] save pcre result state in config_pcre_match
516 * [core] fix compiler warning in 32-bit build
522 * [doc] refresh/update dependency lists in doc
543 * [core] accept up to 5 digit port num in host cond
555 * [core] allow debug.log-state-handling in condition
562 * [core] remove redundant checks in same context
567 * [doc] uncomment mod_auth load in conf.d/auth.conf
571 * [multiple] add assert after malloc in two spots
578 * [mod_magnet] avoid infinite loop in atpanic (fixes #3065)
582 * [tests] remove stray option in test lighttpd.conf
589 * [core] allow '*' in "*:80" socket spec
610 * [core] add some ifdefs in algo_hmac.c
631 * [core] modify path in-place checking for path-info
641 * [mod_ssi] inline some buffers in ssi plugin_data
675 * [mod_dirlisting] process dir in subrequest handler
677 * [mod_dirlisting] read dir in pieces; less blocking
679 * [mod_dirlisting] parse query string in javascript
685 * [build] fix zstd option in meson (fixes #3076)
700 * [mod_webdav] accept alt syntax in webdav.opts
703 * [core] move timegm() impl inline in sys-time.h
719 * [core] consolidate overflow checks in li_to_base64
721 * [core] tighten code in request_check_hostname()
730 * [core] mark cold paths in http_response_config
734 * [core] remove excess assertions in buffer_commit()
744 * [core] accept in network_server_handle_fdevent()
745 * [mod_*_dbi] fix sqlite3_dbdir spelling in comments
755 * [tests] quite coverity warning in test_request.c
764 * [core] remove size maint in algo_splaytree
778 * [mod_secdownload] include algo_hmac.c in mod
787 * [core] reduce repeated work in http_cgi_headers()
803 * [mod_magnet] inline name and etag buffers in cache
805 * [core] clear etag in stat_cache_get_entry_open()
817 * [core] reduce memcmp in http_request_parse_header
828 * [multiple] inline struct in con->dst_addr_buf
838 * [core] reduce excess cc inlining in http_chunk.c
839 * [core] const buffer * in config_check_cond_nocache
853 * [tests] use generated date in HTTP If conditionals
860 * [core] report Y2038 support in lighttpd -V
868 * [core] define _DEFAULT_SOURCE in first.h
869 * [build] check for sys/filio.h in CMake and meson
883 * [core] clarify error message in gw_backend.c
915 * [core] use mod name in trace instead of mod_gw
927 * [mod_magnet] ignore 1xx return in response start
940 * [build] propagate HAVE_DLFCN_H in builds
946 * [core] reduce stack use in main()
952 * [core] reduce wait time in gw_spawn_connection()
966 * [core] reject HTTP/2 pseudo-header in trailers (#3102)
967 * [core] remove redundant check in h2_recv_headers()
978 * [core] create temp file name in chunk buffer
986 * [multiple] avoid empty chunks in chunkqueue
995 * [tests] ignore SIGINT, SIGUSR1 in fcgi-responder
997 * [core] fix typo in h2_send_cqdata()
1021 * [tests] use ephemeral ports in tests
1033 * [core] fix crash in error trace if backend is down (fixes #3052)
1044 * [core] add decls in connections.h
1051 * [build] fix typo in src/CMakeLists.txt
1052 * [build] adjust mbedtls vars in src/CMakeLists.txt
1054 * [build] adjust crypto vars in src/CMakeLists.txt
1056 * [build] adjust crypto vars in src/CMakeLists.txt
1057 * [mod_alias] modify r->physical.path in place
1071 * [core] skip interest in POLLRDHUP after POLLRDHUP (#3059)
1073 * [multiple] avoid duplicate parsing in trigger func (#3056)
1081 * [build] fix typo in SConstruct (fixes #3061)
1093 * [core] re-validate h2 CONTINUATION frame len in cq
1105 * [core] add comment for FastCGI mem use in hctx->rb (#3033)
1116 * [tests] load required modules in alt .conf tests
1118 * [core] fix crash after specific err in config file
1119 * [core] fix bug in FastCGI uploads (#3033)
1126 * [core] fix bug in read retry found by coverity
1131 * [core] handle U+00A0 in config parser
1133 * [core] quiet start/shutdown trace in one-shot mode
1134 * [core] allow keep-alives in one-shot mode (#3042)
1151 * [core] warn if mod_authn_file needed in conf
1175 * [core] store struct server * in struct connection
1190 * [core] more 'const' in request.c prototypes
1197 * [core] prefer uint32_t to size_t in base.h
1201 * [core] array keys are non-empty in key-value list
1205 * [core] (const buffer *) in (struct burl_parts_t)
1218 * [core] const char *op in data_config
1219 * [core] buffer string in data_config
1227 * [core] const char *name in struct plugin
1237 * [core] use (const char *) in config file parsing
1271 * [core] store addtl data in pcre_keyvalue_buffer
1289 * [mod_auth] inline arrays in http_auth_require_t
1310 * [core] inline buffer in log_error_st errh
1311 * [multiple] store srv->tmp_buf in tb var
1316 * [core] store log filename in (log_error_st *)
1344 * [core] (const connection *) in http_header_*_get()
1352 * [core] store (plugin *) in p->data
1358 * [tests] stub out config funcs in test_mod_*
1360 * [core] dispatch handler in handle_request func
1369 * [core] use uint32_t in http_header.[ch]
1370 * [core] perf: tighten some code in some hot paths
1372 * [doc] add link to wiki in doc/outdated/ssl.txt
1379 * [multiple] correct misspellings in comments
1380 * [multiple] fix some cc warnings in 32-bit, powerpc
1381 * [tests] fix skip count in mod-fastcgi w/o php-cgi
1387 * [mod_accesslog] process backslash-escapes in fmt
1397 * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
1398 * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
1411 * [doc] update comments in doc/config/modules.conf
1444 * [core] splaytree_djbhash() in splaytree.h (reuse)
1448 * [build] fix typo in src/Makefile.am EXTRA_DIST
1450 * [core] store fd in srv->stdin_fd during setup
1465 * [mod_vhostdb_dbi] allow strings and ints in config
1470 * [build] bzip2 default to not-enabled in build
1471 * [mod_deflate] fix typo in config option
1481 * [multiple] con hooks store ctx in con->plugin_ctx
1533 * [multiple] isolate more con code in connections.c
1534 * [core] isolate more resp code in response.c
1543 * [core] link in ls-hpack (EXPERIMENTAL)
1563 * [core] document algorithm used in lighttpd etag
1566 * [build] fix typo in option description for wolfSSL
1567 * [core] use djbhash in gw_backend to choose host
1583 * [core] set r->state in h2.c
1590 * [core] Content-Length in http_response_send_file()
1618 * [multiple] use sock_addr_get_family in more places
1625 * [core] walk queue in connection_write_chunkqueue()
1632 * [mod_deflate] fix potential NULL deref in err case
1641 * [core] limit num ranges in Range requests
1648 * [core] coalesce nearby ranges in Range requests
1665 * [TLS] ignore empty "CipherString" in ssl-conf-cmd
1680 * [core] silence coverity warnings in ls-hpack
1684 * [core] use inline funcs in sys-crypto-md.h
1699 * [core] fix (startup) mem leaks in configparser.y
1713 * [build] WITHOUT_LIB_CRYPTO option in code
1715 * [mod_mbedtls] wrap addtl code in preproc defines
1717 * [core] workaround fragile code in wolfssl types.h
1725 * [build] fix typo in configure.ac
1731 * [core] use inotify in stat_cache.[ch] on Linux
1739 * [core] use struct kevent on stack in stat_cache
1744 * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
1746 * [build] check for xxhash in more ways
1750 * [doc] update optional pkg dependencies in INSTALL
1813 * [core] preserve %2b and %2B in query string (fixes #2999)
1819 * [core] Solaris has getloadavg in sys/loadavg.h
1836 * [core] parse request in connection_read_header()
1837 * [core] log_request_header_on_error in one place
1854 * [core] fix gw_backend spelling of directive in err
1855 * [multiple] reduce code dup in list resizing
1889 * [core] pass conf.follow_symlink in more places
1898 * [core] fix abort in http-parseopts (fixes #2945)
1899 * [core] remove repeated slashes in http-parseopts
1900 * [core] fix 1.4.52 regression in mem use with POST (fixes #2948)
1901 * [multiple] cleaner calloc use in SETDEFAULTS_FUNC
1912 * [mod_webdav] fix misbehavior on blank nodes in PROPPATCH
1916 * [mod_webdav] provide ETag in more responses
1936 * [core] use high precision stat timestamp in etag
1940 * [multiple] open target file earlier in some cases
1958 * [mod_webdav] invalidate parent dir in stat_cache
1985 * [tests] update skip count in mod-fastcgi.t
1992 * [core] use connected sock port in dir redirect
2017 * [core] typo in trace
2090 * [multiple] validate UTF-8 in url-decoded paths
2129 * [tests] #undef NDEBUG before assert.h in t/test_*
2143 * [build] put request.c in common src
2146 * [core] better consistency in buffer_is_equal*()
2148 * [mod_openssl] no renegotiation in TLS 1.3 (fixes #2912)
2163 * [core] fix crash if 'host' empty in config (fixes #2876)
2164 * [mod_magnet] fix regression in lighty.stat (fixes #2877)
2165 * [core] minor code cleanup in gw_recv_response()
2167 * [mod_proxy] fix segfault in Set-Cookie reverse map (fixes #2879)
2184 * [core] check for continuation in server.tag
2195 * [core] remove some duplicative code in log.c
2219 * [mod_alias] security: path traversal in mod_alias (in some use cases) (fixes #2898)
2249 * [core] fix path-info calculation in git master (fixes #2861)
2267 * [core] fix var.CWD (regression in 1.4.46) (fixes #2835)
2271 * [stat_cache] remove debug code littered in file
2273 * [core] cleanup: consolidate FAM code in stat_cache
2275 * [autobuild] allow sendfile() in cross-compile (fixes #2836)
2278 * [mod_openssl] error if ssl.engine in wrong section (fixes #2837)
2297 * [core] fix 1.4.46 regression in config match (fixes #2830)
2301 * [core] fix 1.4.46 regression in Last-Modified
2328 * [mod_auth] LDAP escape username in DN and filters
2332 * [core] permit connection-level state in modules
2333 * [TLS] include <openssl/opensslv.h> in rand.c
2341 * [core] check issetugid() early in main()
2355 * [core] use kqueue in level-triggered mode (fixes #2788)
2358 * [core] set default server_tag in server.c
2359 * [core] include lighttpd vers in server started msg
2411 * [core] save connection-level proto in con->proto
2413 * [mod_extforward] fix typos in Forwarded handling
2426 * [core] permit strings and integers in config array
2428 * [core] permit strings,ints,arrays in config array
2430 * [mod_proxy] simple host/url mapping in headers (fixes #152)
2437 * [core] configparser: fix resource handling in error cases (fixes #2809)
2438 * [core] fix crash for invalid syntax in config file (fixes #2810)
2444 * [core] optional condition in config "else" clause (fixes #1268)
2480 * [mod_fastcgi] set request_id in fcgi_create_env()
2499 * [core] do not remove pid-file in test mode
2506 * [mod_extforward] typo in comment
2520 * [core] attempt to quiet compiler warning in LEDE
2551 * [core] fix $REQUEST_HEADER[...] parsing in config (#1556)
2587 * fix race in dynamic handler configs (reentrancy) (fixes #2774)
2588 * [mod_authn_mysql] close mysql_conn in cleanup
2590 * load mod_auth & mod_authn_file in sample/test.conf
2591 * comment out auth.backend.ldap.* in tests/*.conf
2593 * RAND_pseudo_bytes() is deprecated in openssl 1.1.0
2605 * [mod_ssi] produce content in subrequest hook
2608 * [core] permit connection-level state in modules
2629 * [mod_deflate] ignore '*' in deflate.mimetypes
2646 * [mod_rewrite] add more info in error log msg
2679 * dynamic handlers store debug flag in handler_ctx
2689 * [SCons] fix syntax error in SConstruct
2691 * [CMake] fix clang -Wcast-align warnings in lemon.c
2702 * [mod_auth] fix printing of IP in error trace
2706 * [core] optional condition in config "else" clause (fixes #1268)
2710 * [TLS] replace env entries in https_add_ssl_entries
2730 * [core] stay in CON_STATE_CLOSE until done with req
2733 * do not set REDIRECT_URI in mod_magnet, mod_rewrite (#2738)
2743 * [security] encode quoting chars in HTML and XML
2770 …* [mod_secdownload] fix buffer overflow in secdl_verify_mac (reported by Fortify Open Review Proje…
2774 * [core] fix memory leak in configparser_merge_data
2776 * [core] configparser: error on duplicate keys in array merge (fixes #2685)
2780 * [ssl] support disabling ssl.verifyclient.activate in SNI callback (fixes #2531)
2784 …* [core] fix request_start in keep-alive requests to mark time when received first byte (fixes #24…
2809 * [mod_auth] send charset="UTF-8" in WWW-Authenticate (fixes #1468)
2835 * [core] support IPv6 in $HTTP["remote-ip"] CIDR cond match (fixes #2706)
2867 * [core] wrap IPv6 literal in "[]" in redirect URL
2872 * [config] normalize IP strings in lighttpd.conf
2918 * [config] check config option scope; warn if server option is given in conditional
2920 * [core] add '~' to safe characters in ENCODING_REL_URI/ENCODING_REL_URI_PART encoding
2921 * [core] encode path with ENCODING_REL_URI in redirect to directory (fixes #2661, thx gstrauss)
2937 * [bsd xattr] fix compile break with BSD extended attributes in stat_cache
2940 * [plugins] when modules are linked statically still only load the modules given in the config
2941 * [mmap] handle SIGBUS in network; those get triggered if the file gets smaller during reading
2942 …* fix some warnings found by coverity ("leak" in setup phase, not catching too long unix socket pa…
2946 * fix bad shift in conditional netmask ".../0" handling
2952 * fixed typo in example config found by openSUSE user (boo# 907709)
2953 …* [network] fix compile break in calculation of sockaddr_un size if SUN_LEN is not defined (fixes …
2954 * [connections] fix bug in connection state handling
2955 * print backtrace in assert logging with libunwind
2959 * fix segfaults in many plugins if they failed configuration
2961 * fix hex escape in accesslog (fixes #2559)
2964 * fix memory leak in mod_status when no counters are set (found by coverity)
2980 * [buffer] fix length check in buffer_is_equal_right_len
2981 * fix resource leaks in error cases on config parsing and other initializations
2987 * [mod_webdav] fix logic error in handling file creation error
3000 * maintain physical.basedir (the "acting" doc-root as prefix of physical.path) in more places
3001 * [core] decode URL before rewrite, enabling it to work in $HTTP["url"] conditionals (fixes #2526)
3007 …* mod_fastcgi: fix mix up of "mode" => "authorizer" in other fastcgi configs (fixes #2465, thx pee…
3011 * call ERR_clear_error only for ssl connections in CON_STATE_ERROR
3012 * reject non ASCII characters in HTTP header names
3019 * [mod_auth] fix invalid read in digest qop=auth-int handling (fixes #2478)
3022 …* [core] return 501 Not Implemented in static file mode for all methods except GET/POST/HEAD/OPTIO…
3036 …* [core] set signal handlers before forking child processes in modules/plugins_call_set_defaults (…
3042 …* configure.ac: remove old stuff, add some new to fix warnings in automake 1.12 (fixes #2419, thx …
3044 * fix :port handling in $HTTP["host"] checks (fixes #2135. thx liming)
3049 * fix DoS in Connection header value split (reported by Jesse Sipprell, CVE-2012-5533)
3053 …* [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI (thx carpi…
3058 …* Fix handling of empty header list entries in http_request_split_value, fixing invalid read in va…
3066 * Fix --enable-mmap handling in configure.ac
3070 …* Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow s…
3074 * Fix mod_status bug: always showed "0/0" in the "Read" column for uploads (fixes #2351)
3075 * [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362)
3078 * [core] accept dots in ipv6 addresses in host header (fixes #2359)
3080 * [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)
3093 * [*cgi] Use physical base dir (alias, userdir) as DOCUMENT_ROOT in cgi environments (fixes #2216)
3108 …* Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_de…
3118 * mod_accesslog: Fix var declarations mixed in source (fixes #2233)
3135 * Fix mod_cgi cgi.execute-x-only option in global block
3138 …* Fix fd leaks in mod_cgi (fds not closed on pipe/fork failures, found by Rodrigo, fixes #2158, #2…
3140 …* Append to previous buffer in con read, fix DoS/OOM vulnerability (fixes #2147, found by liming, …
3141 …* Fix HUP detection in close-state if event-backend doesn't support FDEVENT_HUP (like select or po…
3149 …* reset tlsext_server_name in connection_reset - fixes random hostnames in the $HTTP["host"] condi…
3159 …* Keep url/host values from connection to display information while keep-alive in mod_status (fixe…
3165 * Fix unused function webdav_lockdiscovery in mod_webdav
3169 * Reset ignored signals to SIG_DFL before exec() in fastcgi/scgi (fixes #2029)
3171 * Fix hanging connection in mod_scgi (fixes #2024)
3172 * Allow digits in hostnames in more places (fixes #1148)
3180 * Use disable-time in fastcgi for all disables after errors, default is 1sec (fixes #2040)
3183 * Fix ipv6 in mod_proxy (fixes #2043)
3187 * Print an error if you use too many captures in a regex pattern (fixes #2059)
3188 …* Combine Cache-Control header value in mod_expire to existing HTTP header if header already added…
3189 * Remember keep-alive-idle in separate variable (fixes #1988)
3193 * Read hostname from absolute uris in the request line (fixes #1937)
3213 * Fix broken return values from int to enum in mod_fastcgi
3216 …* Added some extra warning options in cmake and fix the resulting warnings (unused/static function…
3218 * Create rrd file for empty rrdfile in mod_rrdtool (#1788)
3226 * Rename configure.in to configure.ac, with small cleanups (fixes #1932)
3228 * Check for regular file in mod_cgi, so we don't try to start directories
3233 * Fix trailing zero char in REQUEST_URI after "strip-request-uri" in mod_fastcgi
3243 * Add '%_' pattern for complete hostname in mod_evhost (fixes #1737)
3251 * Fix max-age value in mod_expire for 'modification' (fixes #1978)
3257 * Workaround broken operating systems: check for trailing '/' in filenames (fixes #1989)
3260 * Fix segfault in mod_expire after failed config parsing (fixes #1992)
3263 * Adding support for additional chars in LDAP usernames (fixes #1941)
3270 * Fix wrong lua type for CACHE_MISS/CACHE_HIT in mod_cml (fixes #533)
3271 * Fix default vhost in mod_simple_vhost (fixes #1905)
3272 * Handle EINTR in mod_rrdtool (fixes #604)
3275 * Fix segfault in mod_scgi (fixes #1911)
3276 * Treat EPIPE as connection-closed error in network_freebsd_sendfile.c (another fix from #1913)
3277 …* Fix useless redirection of stderr in mod_rrdtool, as it gets redirected to /dev/null later. (fix…
3279 * Fix segfault if siginfo_t* is NULL in sigaction handler (fixes #1926)
3283 * Fix base64 decoding in mod_auth (#1757, thx guido)
3289 …* Try to convert string options to shorts for numeric options in config file; allows to use env-va…
3290 * Do not cache default vhost in mod_simple_vhost (#709)
3292 …* Fix fastcgi authorization in subdirectories with check-local=disabled; don't split pathinfo for …
3293 * Add possibility to disable methods in mod_compress (#1773)
3295 * Fixed fix for round-robin in mod_proxy (forgot to increment the index) (#1715)
3297 * Compare address family in inet_ntop_cache
3300 * Optimized buffer usage in mod_proxy (fixes #1850)
3301 * Fix uninitialized value in time struct after strptime
3302 * Do not pass Proxy-Connection: header from client to backend http server in mod_proxy (#1877)
3303 …* Fix wrong malloc sizes in mod_accesslog (probably nothing bad happened...) (fixes #1855, thx ych…
3310 * Use modified etags in mod_compress (fixes #1800)
3312 * Fix error handling in freebsd-sendfile (fixes #1813)
3314 * Allow tabs in header values (fixes #1822)
3324 * Fix mod_magnet: enable "request.method" and "request.protocol" in lighty.env (#1308)
3326 …* Use data_response_init in mod_fastcgi x-sendfile handling for response.headers, fix a small "mem…
3329 …* Enable escaping of % and $ in redirect/rewrite; only two cases changed their behaviour: "%%" => …
3332 …* Overwrite Content-Type header in mod_dirlisting instead of inserting (#1614), patch by Henrik Ho…
3333 * Handle EINTR in mod_cgi during write() (#1640)
3339 …* Implement a clean way to open /dev/null and use it to close stdin/out/err in the needed places (…
3342 * close connection after redirect in trigger_b4_dl (thx icy)
3343 * close connection in mod_magnet if returned status code
3344 * fix bug with IPv6 in mod_evasive (#1579)
3348 …* [tests] fixed tests needing php running (if not running on port 1026, search php in env[PHP] or …
3349 * fixed typo in mod_accesslog (#1699)
3352 * Handle only HEAD, GET and POST in mod_dirlisting (same as in staticfile) (#1687)
3356 * fixed round-robin balancing in mod_proxy (#1715)
3357 * fixed EINTR handling for waitpid in mod_fastcgi
3361 * allow digits in [s]cgi env vars (#1712)
3363 * print helpful error message on conditionals in global block (#1550)
3364 * decode url before matching in mod_rewrite (#1720) -- (reverted for 1.4.21)
3366 …* Match headers case insensitive in response (removing of X-{Sendfile,LIGHTTPD-*}, catching Date/S…
3367 …* fixed bug with case-insensitive filenames in mod_userdir (#1589), spotted by "anders1" (CVE-2008…
3368 * fixed format string bugs in mod_accesslog for SYSLOG
3369 * replaced fprintf with log_error_write in fastcgi debug
3370 * fixed mem leak in ssi expression parser (#1753), thx Take5k
3377 * fix memleak in request header parsing (#1774, thx qhy) (CVE-2008-4298)
3379 * use decoded url for matching in mod_redirect (#1720) (CVE-2008-4359) -- (reverted for 1.4.21)
3384 * added support for matching $HTTP["scheme"] in configs
3389 matching the end of the uri in fcgi,scgi and proxy modules (#1489)
3392 * prevent crash in certain php-fcgi configurations (#841)
3393 * add IdleServers and Scoreboard directives in ?auto mode for mod_status (#1507)
3397 * support letterhomes in mod_userdir (#1473)
3398 * support chained proxies in mod_extforward (#1528)
3400 * fixed ECONNRESET handling in network-openssl
3401 * fixed handling of EAGAIN in network-linux-sendfile (#657)
3403 * create directories in mod_compress (was broken with alias/userdir) (#1027)
3404 * fixed out of range access in fd array (#1562, #372) (CVE-2008-0983)
3411 * fixed including of stdint.h/inttypes.h in etag.c (#1413)
3413 * log the ip of failed auth tries in error.log (enhancement #1544)
3414 * fixed RoundRobin in mod_proxy (#516)
3418 * fixed Content-Length header if response body gets removed in connections.c (#1412, part 2)
3424 * fix min-procs handling in mod_scgi.c, just set to max-procs (patch from #623)
3425 * fix sending "408 - Timeout" instead of "410 - Gone" for timedout urls in mod_secdownload (#1440)
3434 * fixed FastCGI header overrun in mod_fastcgi (reported by [email protected])
3437 * fixed crashing when using undefined environment variables in the config
3442 * added dir-listing.set-footer in mod_dirlisting (#1277)
3444 * fixed hardcoded font-sizes in mod_dirlisting (#1267)
3449 * fixed crash on mixed EOL sequences in mod_cgi
3451 * fixed invalid char in header values (#1286)
3454 * fixed counter overrun in ?auto in mod_status (#909)
3456 * fixed possible overflow in unix-socket path checks on BSD (#713)
3463 * fixed crash when freeing the config in mod_alias
3467 * use more LSB like paths in the sample config (#1242)
3479 * fixed mem-leak in mod_auth (reported by Stefan Esser)
3480 * fixed crash with md5-sess and cnonce not set in mod_auth (reported by Stefan Esser)
3481 * fixed missing check for base64 encoded string in mod_auth and Basic auth
3483 * fixed possible crash in Auth-Digest header parser on trailing WS in
3487 * fixed crash on 32bit archs when debug-msgs are printed in mod_scgi, mod_fastcgi
3513 * fix cpu hog in certain requests [1473] CVE-2007-1869
3519 * fixed accesslog.use-syslog in a conditional and the caching of the
3522 * fixed handling of %% in accesslog.format
3526 * fixed crash on url.redirect and url.rewrite if %0 is used in a global context
3528 * fixed possible crash in debug-message in mod_extforward
3530 * fixed include of empty in the configfiles (#1076)
3532 * fixed missing AUTH_TYPE entry in the fastcgi environment. (#889)
3533 * fixed compilation in network_writev.c on MacOS X 10.3.9 (#903)
3538 * added initgroups in spawn-fcgi (#871)
3539 * added apr1 support htpasswd in mod-auth (#870)
3541 * fixed segfault in split CRLF CRLF sequences
3542 (introduced in 1.4.12) (#876)
3543 * fixed compilation of LOCK support in mod-webdav
3544 * fixed fragments in request-URLs (#869)
3555 extensions in mod_magnet scripts
3561 * added Content-Range support for PUT in webdav
3562 * added support for += on empty arrays in config-files
3573 * fixed mem-leak in mod_flv_streaming
3574 * fixed required trailing newline in configfiles (#142)
3593 * fixed error-messages in mod_auth and mod_fastcgi
3595 * fixed handling of deleted files in linux-sendfile
3608 * fixed extra newline for syslog() in mod_accesslog
3609 * fixed user-track cookie for IE in mod_usertrack
3610 * fixed crash in digest handling in mod_auth
3625 * fixed 100% cpu loops in mod_cgi ("sandy" <sjen/at/cs.stanford.edu>)
3627 * fixed IE bug in content-charset in the output of mod_dirlisting (sniper/at/php.net)
3628 * fixed typos and language in the docs (ryan-2005/at/ryandesign.com)
3629 * fixed assertion in mod_cgi on HEAD request is Content-Length (<sandy/at/meebo.com>)
3631 * fixed endless loops in mod_fastcgi if backend is dead
3632 * fixed Depth: 1 handling in PROPFIND requests on empty dirs
3640 * added auto-reconnect to ldap-server in mod_auth
3644 * added strip_request_uri in mod_fastcgi
3653 * fixed max-age timestamps in mod_expire
3654 * fixed encoding the filenames in PROPFIND in mod_webdav
3655 * fixed range request handling in network_writev
3656 * fixed retry on connect error in mod_fastcgi
3658 * fixed possible crash in mod_webdav if sqlite3 support
3662 * fixed missing cleanup in mysql_vhost
3663 * fixed assert() in "connections.c:962:
3665 * fixed 64bit issue in md5
3666 * fixed crash in mod_status
3667 * fixed duplicate headers in mod_proxy
3668 * fixed Content-Length in HEAD request in mod_proxy
3670 * fixed streaming in mod_cgi
3671 * fixed possible overflow in password-salt handling
3679 * added madvise() to instruct the kernel the do proper read-ahead in network_writev
3680 * added support for %I in mod_accesslog
3681 * added better compat to Apache for ?auto in mod_status
3682 * added support for userdirs without a entry in /etc/passwd in mod_userdir
3686 * added webdav.log-xml for logging xml-content in mod_webdav
3689 non-keep-alive requests in SSL request
3698 * fixed compressed output if caching was disabled (seen in IE and Opera)
3700 * fixed mysql-vhost module (was broken in 1.4.5)
3701 * fixed false positive in the detection of case-insensitive FS
3707 * added warning for unused variables in conditionals
3711 * fixed infinite loop in exec-cmd in mod_ssi
3712 * fixed segfault in config handling for mod_mysql_vhost
3717 * fixed crc errors in mod_compress on 64bit platforms
3718 * fixed handling of overlapping fastcgi packets (bug added in 1.4.4)
3720 * fixed a segfault in mod_rewrite if %1 references were used
3721 * fixed handling of empty request URIs in HTTP requests
3724 * added support for %V in mod_accesslog
3727 * fixed METHOD in mod_accesslog of WebDAV methods
3728 * fixed check for permission before files in sent
3732 * fixed memleak in stat-cache
3733 * fixed aborted connections if file was moved while in transfer
3745 * fixed bin-copy-env in mod_fastcgi
3750 * fixed memleak in stat-cache
3751 * fixed infinite loop in mod_cgi
3754 * fixed infinite loop in SSL
3761 * fixed response header in body problem in mod_cgi
3764 * fixed conditional options in mod_dirlisting
3765 * fixed segfault in mod_dirlisting for NFS directories
3766 * fixed check for docroot in change-root environments
3774 * fixed cleanup in mod_proxy and mod_fastcgi
3782 * added support for PATH_INFO guessing if check-local is disabled in
3789 * fixed endless loops in mod_rewrite
3792 * fixed 'can't reach host' in mod_proxy
3801 * relaxed handling of characters in URIs even more
3813 * fixed endless loops in mod_fastcgi, mod_cgi and mod_proxy
3829 * fixed segfault in debug-code
3832 * fixed endless loop in mod_fastcgi
3843 * fixed crash in mod_auth if config-options are missing
3844 * fixed handling of missing trailing / in mod_userdir
3846 * fixed REPORT ME error due to failed reconnects in mod_fastcgi
3847 * fixed cmdline handling in mod_fastcgi
3851 * added support for full commandline in spawn-fcgi
3852 * fixed missing check for IP-address in mod_fastcgi
3853 * fixed compile error with openssl in mod_fastcgi
3862 * improved performance in FastCGI in buildind the FastCGI header
3863 * fixed min-procs and max-procs in FastCGI on PowerPC
3864 * fixed crash in setenv.add-response-header
3865 * fixed handling of nph-scripts in CGI
3866 * fixed accidentally sending out physical file in CGI on error
3877 * added support for syslog in mod_accesslog
3879 * improved debug output in request handling
3882 * fixed handling of != and !~ in configutation
3883 * fixed special cases in keep-alive handling
3884 * fixed timeout handling in handling POST requests
3885 * fixed mode AUTHORIZER in FastCGI
3899 * added support for ${...} in mod_ssi
3901 * fixed multipart handling in cgi
3903 * fixed wrap-around in mod_status
3912 * added support in fastcgi module to spawn fastcgi
3915 * fixed connection handling in fastcgi if no chunk
3930 * fixed segfault in pipelining
3931 * fixed a segfault in writev() handler if LFS is used
3940 * fixed SERVER_NAME in CGI and FastCGI
3944 * added support for NL terminators in CGI-scripts
3945 * added support for conditionals in mod_auth,
3948 * fixed request counter in the rrdtool module
3976 * fixed handling of comments in If-Modified-Since
3977 * fixed error handling in FastCGI code
3989 * fixed rare problem in FastCGI header generation
3995 * improved performance in the string compare functions
3996 * fixed double-free in fastcgi handler
3997 * fixed error-handling in cgi handler
4014 * fixed large post uploads in fastcgi
4022 * fixed index-files for FastCGI if webserver is in chroot
4025 * fixed timestamps in Last-Modified checks
4032 * added support for unix domain sockets in FastCGI
4060 * added 'check-local' option to disable local stat() in the FastCGI module
4085 * fixed some memory leaks in the configfile parser
4093 * use localtime in accesslog if possible
4116 * fixed logcycling in chroot()
4151 * request-headers are now handled case-in-sensitive as required
4157 * some updates in the documentation
4158 * a entry in the error-log for a 404