Christian Grothoff
|
0bfdd8d71a
|
releasing v1.0.9
v1.0.9
|
2026-07-30 17:46:29 +02:00 |
|
Christian Grothoff
|
641d2e97c9
|
distill the second fuzzing campaign into the seed corpus
|
2026-07-29 19:31:22 +02:00 |
|
Christian Grothoff
|
d623ab0f69
|
more fuzzing fun
|
2026-07-29 17:13:46 +02:00 |
|
Christian Grothoff
|
d43e9a6cb6
|
document new minimum PSK requirement
|
2026-07-29 17:13:42 +02:00 |
|
Christian Grothoff
|
70f1ba0b22
|
use MHD_check_response_header_s_token_ci() as it was designed, avoid crash on add_connection followed immediately by daemon destruction; enforce minimum psk length
|
2026-07-29 17:13:37 +02:00 |
|
Christian Grothoff
|
669daf7a46
|
fix red-zone support in memorypool
|
2026-07-29 13:19:49 +02:00 |
|
Christian Grothoff
|
75549625f0
|
fix over-writing of version string with network data read after parsing header
|
2026-07-29 13:19:44 +02:00 |
|
Christian Grothoff
|
95e54a4510
|
i18n update
v1.0.8
|
2026-07-29 00:05:00 +02:00 |
|
Christian Grothoff
|
5486f6f66d
|
fix races resulting in UB
|
2026-07-29 00:00:21 +02:00 |
|
Christian Grothoff
|
d2e286352a
|
update fuzzer docs
|
2026-07-28 23:31:39 +02:00 |
|
Christian Grothoff
|
fd16f9d2cb
|
add test for suspend_resume_epoll example
|
2026-07-28 23:14:02 +02:00 |
|
Christian Grothoff
|
d59f304524
|
expand fuzzing logic
|
2026-07-28 23:04:14 +02:00 |
|
Christian Grothoff
|
5ae817bd6a
|
fix comment
|
2026-07-28 22:49:10 +02:00 |
|
Christian Grothoff
|
8dbbdd77fe
|
add tutorial for #5657
|
2026-07-28 22:47:32 +02:00 |
|
Christian Grothoff
|
6418a0b3b5
|
-indent fun
|
2026-07-28 19:54:22 +02:00 |
|
Christian Grothoff
|
fdaf9ca025
|
fix memory leaks
|
2026-07-28 19:53:39 +02:00 |
|
Christian Grothoff
|
7d8c068e5e
|
add tutorials for #4944 and #5085
|
2026-07-28 19:46:21 +02:00 |
|
Christian Grothoff
|
56713e94bb
|
-comments
|
2026-07-28 17:18:32 +02:00 |
|
Christian Grothoff
|
a1fb82fc3c
|
more findings
|
2026-07-28 17:04:14 +02:00 |
|
Christian Grothoff
|
07c051dd7e
|
fail MHD_digest_auth_check_digest2 on MHD_DIGEST_ALG_AUTO
|
2026-07-28 16:58:41 +02:00 |
|
Christian Grothoff
|
acef58a077
|
prevent connection upgrade attempts on connections that must-close
|
2026-07-28 16:57:45 +02:00 |
|
Christian Grothoff
|
d0270f583a
|
expand fuzzer coverage
|
2026-07-28 16:56:42 +02:00 |
|
Christian Grothoff
|
1b7b319d04
|
fix fuzzer setup logic
|
2026-07-28 13:50:17 +02:00 |
|
Christian Grothoff
|
6e43206ba1
|
version bumping, this time correctly
|
2026-07-28 12:40:05 +02:00 |
|
Christian Grothoff
|
e34baa3f1a
|
expand test suite, add CI/CD logic as done in other GNUnet projects
|
2026-07-28 12:36:36 +02:00 |
|
Christian Grothoff
|
b4f2b6583f
|
fix spelling
|
2026-07-28 11:40:40 +02:00 |
|
Christian Grothoff
|
2a9c4676ed
|
fix bogus assertion
|
2026-07-28 11:06:10 +02:00 |
|
Christian Grothoff
|
6fcdfd437e
|
fix bogus assertion
|
2026-07-28 11:03:00 +02:00 |
|
Christian Grothoff
|
0b7509755f
|
fix bogus assertion
|
2026-07-28 11:02:27 +02:00 |
|
Christian Grothoff
|
e04eb2189b
|
add missing return to ensure 413 is given to client
|
2026-07-28 11:01:37 +02:00 |
|
Christian Grothoff
|
68c83f22b8
|
fix bogus assertion
|
2026-07-28 11:00:28 +02:00 |
|
Christian Grothoff
|
300a2ab01c
|
handle empty username and empty realm provided by client gracefully
|
2026-07-28 10:59:19 +02:00 |
|
Christian Grothoff
|
888606e004
|
fix algorithm parsing, string cmp was matching wrong strings to client requests to determine selected algorithm
|
2026-07-28 10:58:39 +02:00 |
|
Christian Grothoff
|
f438804c18
|
do not abort on nonce slot collisions with different algorithms
|
2026-07-28 10:55:44 +02:00 |
|
Christian Grothoff
|
3b898eaea7
|
fix another issue with INVALID enum check where masking did not work because INVALID is zero
|
2026-07-28 10:53:07 +02:00 |
|
Christian Grothoff
|
fc353cf059
|
release v1.0.7
v1.0.7
|
2026-07-27 18:14:11 +02:00 |
|
Christian Grothoff
|
5a73c1ae81
|
ensure digest authentication hex decoder does not overflow if give hex-encoded userhash is too long (potential out-of-bounds stack write); thanks to A. Ramos for reporting
|
2026-07-27 18:11:25 +02:00 |
|
Christian Grothoff
|
c13f4c6484
|
fix parsing of chunk-extension lines that previously failed to skip the \r\n properly; might be abused for HTTP request smuggling; thanks to A. Ramos for reporting
|
2026-07-27 18:00:30 +02:00 |
|
Christian Grothoff
|
29eaa56b31
|
fix read-buffer shift back underflow in special conditionas with trailing query arguments without '='; thanks to A. Ramos for reporting
|
2026-07-27 17:55:00 +02:00 |
|
Christian Grothoff
|
bd49ce930b
|
fix missing check for MHD_DIGEST_AUTH_ALGO3_INVALID case reported by A. Ramos that could result in an abort
|
2026-07-27 17:42:50 +02:00 |
|
Christian Grothoff
|
24872e88ff
|
POT update
|
2026-07-27 17:42:33 +02:00 |
|
Christian Grothoff
|
0f23455719
|
update NEWS
v1.0.6
|
2026-07-08 12:48:44 +02:00 |
|
Christian Grothoff
|
6a3d1006b8
|
bump version to v1.0.6
|
2026-07-08 12:45:21 +02:00 |
|
Christian Grothoff
|
f2af9bc474
|
-DCE
|
2026-07-08 12:20:14 +02:00 |
|
Christian Grothoff
|
592c70648b
|
-typos
|
2026-07-08 12:17:59 +02:00 |
|
Christian Grothoff
|
026525d584
|
match content-type only at beginning of the line
|
2026-07-08 12:12:58 +02:00 |
|
Christian Grothoff
|
d6fc384fc4
|
fix overflow check
|
2026-07-08 12:11:26 +02:00 |
|
Christian Grothoff
|
f10d7c71ab
|
fix overflow check
|
2026-07-08 12:09:38 +02:00 |
|
Christian Grothoff
|
b4165ecc09
|
fix overflow check
|
2026-07-08 12:07:51 +02:00 |
|
Christian Grothoff
|
df2309b0ed
|
fix theoretical div by 0
|
2026-07-08 12:06:19 +02:00 |
|