pool/libmicrohttpd
SHA256
4
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity
6764701fcd
libmicrohttpd/libmicrohttpd.changes

621 lines
24 KiB
Plaintext
Raw Blame History

-------------------------------------------------------------------
Fri Dec 1 14:05:56 UTC 2017 - tchvatal@suse.com
- Install copying
-------------------------------------------------------------------
Thu Nov 30 15:01:33 UTC 2017 - mpluskal@suse.com
- Update to version 0.9.57:
* See provided Changelog for details
- Drop no longer needed patches:
* libmicrohttpd_test_data.patch
* disable-stalling-test.patch
-------------------------------------------------------------------
Mon May 29 09:38:20 UTC 2017 - tchvatal@suse.com
- Version update to 0.9.55 bsc#1041216:
* See provided Changelog for details
-------------------------------------------------------------------
Mon May 15 11:49:20 UTC 2017 - mpluskal@suse.com
- Update licensing information
-------------------------------------------------------------------
Thu May 11 08:15:24 UTC 2017 - mpluskal@suse.com
- Update to version 0.9.54:
* See provided Changelog for details
-------------------------------------------------------------------
Thu Apr 13 17:02:21 UTC 2017 - mpluskal@suse.com
- Update to version 0.9.53:
* See provided Changelog for details
- Refresh patch:
* libmicrohttpd_test_data.patch
-------------------------------------------------------------------
Wed Mar 8 13:17:21 UTC 2017 - tchvatal@suse.com
- Do not abort on failing tests, as they randomly fail quite a lot
bsc#1012840
-------------------------------------------------------------------
Mon Dec 12 11:03:32 UTC 2016 - tchvatal@suse.com
- Version update to 0.9.52:
* See provided Changelog for details
- Refresh patch:
* disable-stalling-test.patch
-------------------------------------------------------------------
Fri Jun 3 08:23:38 UTC 2016 - mpluskal@suse.com
- Update to version 0.9.50:
* See provided Changelog for details
-------------------------------------------------------------------
Thu Apr 14 18:10:40 UTC 2016 - mpluskal@suse.com
- Update to 0.9.49
* See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies
-------------------------------------------------------------------
Sun Dec 20 09:24:05 UTC 2015 - mpluskal@suse.com
- Update to 0.9.48
* Improved compatibility with VS2010 and other older compilers.
* Default backlog size for listen socket was changed from 32 to
SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
override default backlog size.
* If not all connections can be handled by MHD_select() than at
least some of connections will be processed instead of failing
without any processing.
* Fixed redefenition of FD_SETSIZE on W32 so select() will work
with 2000 connections instead of 64.
* Better handled redefenition of FD_SETSIZE on all platforms.
* Close sockets more aggressively in multi-threaded mode
(possibly relevant for idle servers).
- Update dependencies
-------------------------------------------------------------------
Sat Dec 5 09:22:32 UTC 2015 - mpluskal@suse.com
- Update to 0.9.47
* Reworked VS project files. Used x64 build tools by
efault, many optimizations, fixes.
dded project files for VS 2015. -EG
* SPDY is dead, killing experimental libmicrospdy. -CG
* New logic for controlling socket buffer modes.
Eliminated delay before last packet in response and before
"100 Continue" response on all platforms. Also response
header are pushed to client without waiting for response
body. -EG
* Remove 200ms delay observable with keep-alive on Darwin
and *BSD platfroms. -EG
* Fix issue with shutdown if connection was resumed just
before shutdown. -FC
- Update dependencies
-------------------------------------------------------------------
Fri Nov 13 14:01:04 UTC 2015 - mpluskal@suse.com
- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled
-------------------------------------------------------------------
Tue Nov 10 14:23:58 UTC 2015 - mpluskal@suse.com
- Update to 0.9.46
* Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
original code was counter-intuitive but correct, and the new
code does break pipelining. Ignore empty lines at the beginning
of an HTTP request (more tolerant implementation).
-------------------------------------------------------------------
Sun Nov 1 11:44:58 UTC 2015 - mpluskal@suse.com
- Update to 0.9.45
* Rework deprecation maros: fix errors with old GCC versions,
improved support for old clang and new GCC. -EG
* Return correct header kind in MHD_get_connection_values()
even if a bitmask is used for the "kind" argument. -FC/CG
* Fixing transient resource leak affecting long-lived
connections with many keep-alives and HTTP request
pipelining under certain circumstances (which reduced
the receive window).
* Fixed assertion failure triggered by a race in
thread-per-connection mode on shutdown in rare
circumstances. -CG
* Deduplicate code between digestauth and connection
parsing logic for URI arguments, shared code moved
to new MHD_parse_arguments_ function in internal.c. -CG
-------------------------------------------------------------------
Fri Oct 2 12:33:17 UTC 2015 - mpluskal@suse.com
- Update to 0.9.44
* Various fixes for W32 VS project files.
* Fix digest authentication with URL arguments where value-less
keys are given before the last argument.
* Do not use shutdown() on listen socket if
MHD_USE_PIPE_FOR_SHUTDOWN is set.
-------------------------------------------------------------------
Sat Sep 19 10:43:28 UTC 2015 - mpluskal@suse.com
- Update to 0.9.43
* Call resume_suspended_connections() when the user is running
its own mainloop and calls MHD_run_from_select() to support
resuming connections with external select. -FC
* Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
is allowed. -CG
* Reimplement monotonic clock functions for better
support various platforms.
Print more information during configure. -EG
* Export MHD_get_reason_phrase_for() symbol. -CG
* Added checks for overflows and buffer overruns, fixed
possible buffer overrun. Updated md5 implementation.
Fixed many compiler warning (mostly for VC compiler). -EG
* Fix failure to properly clean up timed out connections
if running in external select mode without listen socket,
which caused busy waiting until new connections arrived.
(Fixes #3924, thanks to slimp for reporting and testcase). -CG
* Ignore close() errors on sockets except for EBADF,
fixes #3926. -CG
* Make sure to decrement connection counter before
calling connection notifier so that
MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
present stale information (relevant if this is
used for termination detection of a daemon
stopped via MHD_quiesce_daemon()). Thanks to
Markus Doppelbauer for reporting. -CG
* Fix (automatic) handling of HEAD requests with
MHD_create_response_from_callback() and HTTP/1.1
connection keep-alives. Thanks to Cristian Klein
for reporting. -CG
* Add new functions MHD_create_response_from_fd64() and
MHD_create_response_from_fd_at_offset64(). -EG
* Fixing memory leak in digest authentication. -AW
* Add deprecation compiler messages for deprecated functions
and macros. -EG
* Fixing digest authentication when used in combination
with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now
-------------------------------------------------------------------
Wed Jul 15 16:42:35 UTC 2015 - matwey.kornilov@gmail.com
- fux build for SLES11:
* explicitly require libgnutls-devel in -devel package
-------------------------------------------------------------------
Mon Jul 13 13:01:26 UTC 2015 - matwey.kornilov@gmail.com
- fix build for SLES11:
* update disable-stalling-test.patch: Instead of disabling testcase
in Makefile disable testcases in code, this could be even better
we can disable only broken test but not the whole testcase.
* add libmicrohttpd_test_session.patch: Disable test relying on
available libcurl version
(see https://gnunet.org/bugs/view.php?id=3893 for details)
* wrap libmicrosdpy into macro to disable building on
systems with openssl < 1.0.1
- update to 0.9.42:
* fix off-by-one in MHD_start_daemon_va() error handling logic
* fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT
-------------------------------------------------------------------
Sun May 3 10:26:32 UTC 2015 - astieger@suse.com
- update to 0.9.41:
* fix bugs relating to various threading modes
* fix some HTTP 1.0 tests
-------------------------------------------------------------------
Mon Apr 13 11:39:23 UTC 2015 - meissner@suse.com
- updated to 0.9.40
- Fix potential deadlock issue in MHD_USE_THREAD_PER_CONNECTION
mode if shutdown is initiated while connections are active. -CG
- Fix issue in thread-pool mode where a MHD_stop_daemon()
might not reach threads that stopped listening because
we hit the maximum number of concurrent connections and
the option MHD_USE_PIPE_FOR_SHUTDOWN was also not used.
Testcase added as well. -CG
- Update HTTPS testcases to avoid SSLv3, as SSLv3 is dead.
- Do not enforce FD_SETSIZE-limit on worker control
pipe when using MHD_USE_EPOLL_LINUX_ONLY (#3751). -MH/CG
- Adding MHD_OPTION_NOTIFY_CONNECTION,
MHD_CONNECTION_NOTIFY_STARTED,
MHD_CONNECTION_NOTIFY_CLOSED and
MHD_CONNECTION_INFO_SOCKET_CONTEXT to allow
applications to trigger operations when TCP
connections start or end, instead of just
exposing HTTP requests starting and ending. -RG/CG
- Fixing bug that prevented MHD_OPTION_HTTPS_MEM_DHPARAMS
from working within a MHD_OPTION_ARRAY. -DD
- Adding MHD_OPTION_HTTPS_KEY_PASSWORD as proposed by
Andrew Basile. -CG/AB
- Fix issue where for HTTP/1.0-clients that set
Connection: Keep-Alive header a response of
indefinite size was generated with chunked encoding. -CG
- Fix potential infinite loop on shutdown in multi-threaded mode
under certain conditions. -CG
- fixed info deinstall
-------------------------------------------------------------------
Thu Jan 8 08:48:47 UTC 2015 - meissner@suse.com
- libmicrohttpd.keyring: replaced maintainers keyring by new one with:
pub 4096R/E29FC3CC 2014-12-09
uid Christian Grothoff <grothoff@gnunet.org>
uid Christian Grothoff <christian@grothoff.org>
uid Christian Grothoff <christian.grothoff@inria.fr>
sub 4096R/117E1AFB 2014-12-09
-------------------------------------------------------------------
Wed Jan 7 13:44:46 UTC 2015 - prusnak@opensuse.org
- updated to 0.9.39
- dropped libmicrohttpd-0.9.34-spdy-pc.patch (included upstream)
-------------------------------------------------------------------
Thu May 8 14:00:36 UTC 2014 - meissner@suse.com
- do not define test_data before system header inclusion, libgcrypt
uses this as argument parameters. (libmicrohttpd_test_data.patch)
-------------------------------------------------------------------
Mon Apr 28 07:23:50 UTC 2014 - coolo@suse.com
- disable problematic test case that causes the testsuite to deadlock
just too often (disable-stalling-test.patch)
-------------------------------------------------------------------
Thu Apr 24 07:32:10 UTC 2014 - dmueller@suse.com
- remove dependency on gpg-offline, source validator already
does that
-------------------------------------------------------------------
Mon Apr 21 06:44:06 UTC 2014 - tchvatal@suse.com
- Version bump to 0.9.34:
* Drop tls patch seems to build fine
* Remove code for other distros we build against 13.1+ anywhere
within obs and it just clutters the spec.
* Explicitely name switches in configure to make sure things go
the desired way.
* Fix install of libmicrohttpspdy pc file.
+ Added support for TCP FASTOPEN.
+ Removed dependency on plibc for simpler compilation for W32.
+ Added configure option "--disable-pipes" to use socketpairs
instead of pipes for signalling to child threads. Pipes are
always disabled on W32.
+ Corrected some uses of 'int' vs. 'size_t'.
+ MHD_USE_DUAL_STACK in libmicrohttpd currently just *inhibits
setting* the IPV6_V6ONLY socket option, but per Microsoft's
documentation the default on Windows is that this is enabled, thus
MHD_USE_DUAL_STACK will not work (since it leaves the
default). libmicrohttpd should probably just unconditionally set
IPV6_V6ONLY to the desired value when the option is available.
+ Allow Keep-Alive with HTTP 1.0 (if explicitly requested),
and automatically set "Connection: Keep-Alive" in response
in this case as well.
+ Adding explicit annotations to hide symbols that are not for
export in the C code (gcc 4.0 or higher only).
+ Adding a few lines to avoid warnings from picky compilers.
- Added patches:
* libmicrohttpd-0.9.34-spdy-pc.patch
- Dropped patches:
* libmicrohttpd-drop-test_tls_options.patch
-------------------------------------------------------------------
Tue Mar 4 12:42:30 UTC 2014 - coolo@suse.com
- do not run checks in parallel - they deadlock from time to time
- enable make debug to debug the problem on OBS in case it reappears
-------------------------------------------------------------------
Mon Jan 27 19:52:38 UTC 2014 - sleep_walker@suse.cz
- refresh libmicrohttpd-drop-test_tls_options.patch
- add there also ignoring test_https_sni
- Update to 0.9.33 bsc#854443 CVE-2013-7038 CVE-2013-7039
+ Fixed an issue with a missing argument in the postexample.
+ Fixed issue with bogus offset increment involving sendfile on
GNU/Linux. Adding support for SNI.
+ Fix for per-worker daemon pipes enabled with
MHD_USE_SUSPEND_RESUME that were not closed in MHD_stop_daemon.
+ Fixing warnings and build issue if --disable-https is given to
configure.
+
0.9.32:
+ Security fix: do not read past 0-terminator when unescaping
strings (thanks to Florian Weimer for reporting).
+ Signaling n times for shutdown works, but for resume we need to
wake up the correct daemon. Even if we signal n times in
that case also, there's no guarantee that some daemon can't
run through its select loop more than once before the
daemon we want to wake up gets a chance to read. Thus we
need a signal pipe per thread in the thread pool IF
MHD_suspend_connection is used. This introduces a new flag
MHD_USE_SUSPEND_RESUME to add those additional pipes and
only allow MHD_suspend_connection to be used in conjunction
with this flag.
Also, as MHD_resume_connection() will be called on a
non-daemon thread, but none of the queue insert/delete
calls are thread safe, we need to be concerned about (a)
corrupting the queue, and (b) having to add mutex
protection around every access to the queues, including
loops through timer queues, etc. This wasn't a problem
before adding resume; even suspend should be safe since it
happens in a callback from the daemon.
I think it's easier to (a) have MHD_suspend_connection() move
the connection to a suspended queue, (b) have
MHD_resume_connection() mark the connection as resuming,
and then (c) do all the actual queue manipulations in
MHD_select (poll, epoll, etc.) to move the resumed
connections back to their normal queues, in response to the
wake up. The changes are simpler & cleaner. There is a cost
to the basic select loop that is avoided by making
suspend/resume a startup option. The per-worker pipes can
then also be enabled only with that option set.
+ Eliminating theoretical stack overflow by limiting length
of URIs in authentication headers to 32k (only applicable
if the application explicitly raised the memroy limits,
and only applies to MHD_digest_auth_check). Issue was
reported by Florian Weimer.
+ Fix race on shutdown signal with thread pool on non-Linux
systems by signalling n times for n threads.
+ Introduce state to mark connections in suspended state (with
epoll); add missing locking operations in MHD_suspend_connection.
+ Fix definition of MHD_TLS_CONNECTION_INIT.
+ Fixing issue in PostProcessor when getting partial boundary
at the beginning, expanding test suite.
+ Implementing faster processing of upload data in multipart
encoding (thanks to performance analysis by Adam Homolya).
+ Adding support for connection flow control via
MHD_suspend_connection and MHD_resume_connection.
0.9.31:
+ Fixing build issues on OS X with CLOCK_MONOTONIC not being
implemented on OS X.
+ Make libmicrohttpd play nicely with upcoming libgcrypt 1.6.0.
+ Improved configure checks for cURL.
+ Signal connection termination as OK (and not as ERROR) if the
stream was terminated by the callback returning
MHD_CONTENT_READER_END_OF_STREAM. Also, release response
mutex before calling the termination callback, to avoid
possible deadlock if the client destroys the response in
the termination callback (due to non-recursiveness of the
lock).
+ Adding #define MHD_HTTP_HEADER_ACCESS_CONTROL_ALLOW_ORIGIN.
+ Also pass MHD connection handle in URI log callback.
+ Improved check for proper OpenSSL version for
libmicrospdy.
+ Set IPV6_V6ONLY socket option correctly when IPv6 is
enabled (MHD_USE_IPv6) but not dual stack
(MHD_USE_DUAL_STACK)
-------------------------------------------------------------------
Thu Oct 3 12:59:19 UTC 2013 - mvyskocil@suse.com
- Update to 0.9.30
+ implements the "SHOULD" clause of RFC 2616 section 8.1.4, which
may reduce bandwidth consumption when clients cancel requests.
+ fixes build errors with various combinations of operating systems,
libc versions, and configure flags.
+ fixes a use-after-free crash when using epoll() in combination with
read errors
0.9.29:
+ epoll can now also be used with SSL connections
+ following recent HTTP/1.1 clarfications, MHD no longer send
a "Content-length" header in CONNECT responses.
+ the "MHD_add_connection" call now consistently sets an "errno"
value to indicate the cause of errors.
Connections added this way are now always processed immediately.
+ fixes a recently-introduced bug which prevented HTTP pipelining
from working properly in some cases and a build error in
conjunction with the "--disable-messages" configure option.
- Enable build of (experimental) SPDY support.
-------------------------------------------------------------------
Wed Jul 24 10:18:44 UTC 2013 - mvyskocil@suse.com
- Update to 0.9.28
+ support for epoll-based event loops (Linux-only)
+ various new options:
- MHD_USE_DUAL_STACK for binding to IPv4 and IPv6 at the same time
- MHD_USE_PIPE_FOR_SHUTDOWN to cleanly support MHD_quiesce_daemon on
non-Linux systems
- MHD_CONNECTION_INFO_CONNECTION_FD to allow COMET applications to
disable TCP Nagle
- MHD_OPTION_CONNECTION_MEMORY_INCREMENT for better control over
buffer size allocations
+ and fixes various minor bugs
-------------------------------------------------------------------
Thu Jun 6 08:15:30 UTC 2013 - mvyskocil@suse.com
- drop test_tls_options if build is in OBS
libmicrohttpd-drop-test_tls_options.patch
-------------------------------------------------------------------
Wed Jun 5 16:42:38 UTC 2013 - jengelh@inai.de
- More robust make install call
- Remove redundant %clean section
- Requires(pre) is useless without a %pre script
-------------------------------------------------------------------
Thu May 16 07:42:59 UTC 2013 - mvyskocil@suse.com
- Update to 0.9.27
+ performance improvements for POST processing
+ new API call to reduce the number of select calls (if in "external"
select mode)
+ new function to allow applications to stop MHD from processing new
incoming connections while finishing ongoing requests
+ fixes an initialization problem on some platforms
+ fixes bug in the postprocessor's URL parser.
+ SSL connections are no longer dropped if the system uptime is less
than the connection timeout
+ allows creating responses with zero bytes using
MHD_create_response_from_callback.
+ few "const" statements have been added to allow keeping more static
strings in ROM.
+ post processor now tolerates uploads which don't contain "\r\n" and
also returns keys which don't have a matching value
+ fixes the loss of a parameter in processing POST data from IE8 and
Chrome. It automatically sets a "Connection: close" header if the
client requests the connection to be closed. Finally, given both
'chunked' encoding and 'content-length', MHD now ignores the
'content-length' header as per the RFC
+ adds support for building libmicrohttpd for Android
+ fixes an issue with data in TLS buffers sometimes not being completely
drained if there was no activity on the socket.
- reenabled tests and moved to %check
- add source verification using gpg
-------------------------------------------------------------------
Wed Oct 3 11:33:35 CEST 2012 - fcrozat@suse.com
- Add copyright header to specfile.
-------------------------------------------------------------------
Fri Sep 28 09:57:40 UTC 2012 - fcrozat@suse.com
- Update to 0.9.22:
+ Allow to configure basic and digest authentication separately
+ Fix URI argument parsing when string contained keys without
equals sign in middle of the argument.
+ Reduce default size in poft processor buffer.
- Remove --enable-client-side from configure call, it doesn't exist
anymore.
- Update License tag to new SPDX format.
-------------------------------------------------------------------
Fri Aug 10 21:48:48 UTC 2012 - bitshuffler@opensuse.org
- Updated to 0.9.21
-------------------------------------------------------------------
Sun Feb 5 13:02:18 UTC 2012 - bitshuffler@opensuse.org
- Updated to 0.9.19
-------------------------------------------------------------------
Sun Nov 27 13:23:42 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.17
-------------------------------------------------------------------
Sat Nov 12 20:37:00 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.16
-------------------------------------------------------------------
Sun Oct 16 11:37:43 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.15
-------------------------------------------------------------------
Sat May 21 12:31:02 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.11
-------------------------------------------------------------------
Fri Apr 29 18:06:18 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.10
-------------------------------------------------------------------
Wed Mar 30 16:50:42 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.9
-------------------------------------------------------------------
Sat Mar 5 21:38:11 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.8
-------------------------------------------------------------------
Tue Feb 15 16:54:35 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.7
-------------------------------------------------------------------
Thu Jan 27 02:33:32 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.6
-------------------------------------------------------------------
Sat Jan 15 15:02:29 UTC 2011 - bitshuffler@opensuse.org
- Updated to 0.9.5
-------------------------------------------------------------------
Wed Dec 29 15:15:48 UTC 2010 - bitshuffler@opensuse.org
- Updated to 0.9.4
-------------------------------------------------------------------
Wed Nov 24 16:02:15 UTC 2010 - bitshuffler@opensuse.org
- Updated to 0.9.3
-------------------------------------------------------------------
Thu Oct 21 13:21:06 UTC 2010 - bitshuffler@opensuse.org
- Updated to 0.9.2
-------------------------------------------------------------------
Mon Sep 20 17:17:03 UTC 2010 - bitshuffler@opensuse.org
- Updated to 0.9.1
-------------------------------------------------------------------
Tue Jul 27 07:26:27 UTC 2010 - bitshuffler@opensuse.org
- Updated to 0.9.0
-------------------------------------------------------------------
Mon Mar 15 08:35:12 UTC 2010 - pascal.bleser@opensuse.org
- update to 0.4.6:
* fixes use of poll causing busy waiting
* fixes a segfault if inconsistent options were used
* fixes SSL support on big-endian architectures
* fixes an issue with error signalling for PUT/POST requests in HTTP 1.1
-------------------------------------------------------------------
Tue Feb 2 13:10:52 UTC 2010 - bitshuffler@opensuse.org
- Updated to 0.4.5.
-------------------------------------------------------------------
Sun Jan 17 19:52:07 UTC 2010 - bitshuffler@opensuse.org
- Initial RPM.
Reference in New Issue View Git Blame Copy Permalink