Christian Grothoff
7922bbd7a9
release v1.0.10
2026-08-07 22:24:52 +02:00
Christian Grothoff
3eea8aaaa0
need per-thread ITC in thread-per-connection mode to avoid races not waking up the thread or the daemon due to sharing of the channel
2026-08-07 22:14:16 +02:00
Christian Grothoff
1778d7b8fe
fix assertion failure on resume
2026-08-07 21:18:57 +02:00
Christian Grothoff
0bfdd8d71a
releasing v1.0.9
2026-07-30 17:46:29 +02:00
Christian Grothoff
641d2e97c9
distill the second fuzzing campaign into the seed corpus
2026-07-29 19:31:22 +02:00
Christian Grothoff
d623ab0f69
more fuzzing fun
2026-07-29 17:13:46 +02:00
Christian Grothoff
d43e9a6cb6
document new minimum PSK requirement
2026-07-29 17:13:42 +02:00
Christian Grothoff
70f1ba0b22
use MHD_check_response_header_s_token_ci() as it was designed, avoid crash on add_connection followed immediately by daemon destruction; enforce minimum psk length
2026-07-29 17:13:37 +02:00
Christian Grothoff
669daf7a46
fix red-zone support in memorypool
2026-07-29 13:19:49 +02:00
Christian Grothoff
75549625f0
fix over-writing of version string with network data read after parsing header
2026-07-29 13:19:44 +02:00
Christian Grothoff
95e54a4510
i18n update
2026-07-29 00:05:00 +02:00
Christian Grothoff
5486f6f66d
fix races resulting in UB
2026-07-29 00:00:21 +02:00
Christian Grothoff
d2e286352a
update fuzzer docs
2026-07-28 23:31:39 +02:00
Christian Grothoff
fd16f9d2cb
add test for suspend_resume_epoll example
2026-07-28 23:14:02 +02:00
Christian Grothoff
d59f304524
expand fuzzing logic
2026-07-28 23:04:14 +02:00
Christian Grothoff
5ae817bd6a
fix comment
2026-07-28 22:49:10 +02:00
Christian Grothoff
8dbbdd77fe
add tutorial for #5657
2026-07-28 22:47:32 +02:00
Christian Grothoff
6418a0b3b5
-indent fun
2026-07-28 19:54:22 +02:00
Christian Grothoff
fdaf9ca025
fix memory leaks
2026-07-28 19:53:39 +02:00
Christian Grothoff
7d8c068e5e
add tutorials for #4944 and #5085
2026-07-28 19:46:21 +02:00
Christian Grothoff
56713e94bb
-comments
2026-07-28 17:18:32 +02:00
Christian Grothoff
a1fb82fc3c
more findings
2026-07-28 17:04:14 +02:00
Christian Grothoff
07c051dd7e
fail MHD_digest_auth_check_digest2 on MHD_DIGEST_ALG_AUTO
2026-07-28 16:58:41 +02:00
Christian Grothoff
acef58a077
prevent connection upgrade attempts on connections that must-close
2026-07-28 16:57:45 +02:00
Christian Grothoff
d0270f583a
expand fuzzer coverage
2026-07-28 16:56:42 +02:00
Christian Grothoff
1b7b319d04
fix fuzzer setup logic
2026-07-28 13:50:17 +02:00
Christian Grothoff
6e43206ba1
version bumping, this time correctly
2026-07-28 12:40:05 +02:00
Christian Grothoff
e34baa3f1a
expand test suite, add CI/CD logic as done in other GNUnet projects
2026-07-28 12:36:36 +02:00
Christian Grothoff
b4f2b6583f
fix spelling
2026-07-28 11:40:40 +02:00
Christian Grothoff
2a9c4676ed
fix bogus assertion
2026-07-28 11:06:10 +02:00
Christian Grothoff
6fcdfd437e
fix bogus assertion
2026-07-28 11:03:00 +02:00
Christian Grothoff
0b7509755f
fix bogus assertion
2026-07-28 11:02:27 +02:00
Christian Grothoff
e04eb2189b
add missing return to ensure 413 is given to client
2026-07-28 11:01:37 +02:00
Christian Grothoff
68c83f22b8
fix bogus assertion
2026-07-28 11:00:28 +02:00
Christian Grothoff
300a2ab01c
handle empty username and empty realm provided by client gracefully
2026-07-28 10:59:19 +02:00
Christian Grothoff
888606e004
fix algorithm parsing, string cmp was matching wrong strings to client requests to determine selected algorithm
2026-07-28 10:58:39 +02:00
Christian Grothoff
f438804c18
do not abort on nonce slot collisions with different algorithms
2026-07-28 10:55:44 +02:00
Christian Grothoff
3b898eaea7
fix another issue with INVALID enum check where masking did not work because INVALID is zero
2026-07-28 10:53:07 +02:00
Christian Grothoff
fc353cf059
release v1.0.7
2026-07-27 18:14:11 +02:00
Christian Grothoff
5a73c1ae81
ensure digest authentication hex decoder does not overflow if give hex-encoded userhash is too long (potential out-of-bounds stack write); thanks to A. Ramos for reporting
2026-07-27 18:11:25 +02:00
Christian Grothoff
c13f4c6484
fix parsing of chunk-extension lines that previously failed to skip the \r\n properly; might be abused for HTTP request smuggling; thanks to A. Ramos for reporting
2026-07-27 18:00:30 +02:00
Christian Grothoff
29eaa56b31
fix read-buffer shift back underflow in special conditionas with trailing query arguments without '='; thanks to A. Ramos for reporting
2026-07-27 17:55:00 +02:00
Christian Grothoff
bd49ce930b
fix missing check for MHD_DIGEST_AUTH_ALGO3_INVALID case reported by A. Ramos that could result in an abort
2026-07-27 17:42:50 +02:00
Christian Grothoff
24872e88ff
POT update
2026-07-27 17:42:33 +02:00
Christian Grothoff
d2375954a1
releasing v1.0.5
2026-04-16 10:38:04 +02:00
Christian Grothoff
d30316fda9
bump version
2026-04-13 11:43:19 +02:00
Christian Grothoff
f07e09b7dc
add code to reject requests with multiple Content-Length HTTP headers being sent by the client; thanks to SYSS.de for reporting
2026-04-07 17:54:42 +02:00
Christian Grothoff
5f207ceede
fix bug in list traversal that could cause ready connections to be skipped if other connections were suspended
2026-04-02 00:18:18 +02:00
Christian Grothoff
0a112de8ec
add SECURITY.md
2025-09-23 17:54:19 +02:00
Christian Grothoff
593bac45c2
remove websocket examples
2025-09-16 11:08:31 +02:00
Christian Grothoff
8a163c3f73
fix example FTBFS
2025-09-16 11:05:23 +02:00
Christian Grothoff
f4e2c13c68
fix example FTBFS
2025-09-16 11:04:48 +02:00
Christian Grothoff
ff13abc1c1
remove broken experimental code
2025-09-16 11:00:37 +02:00
Christian Grothoff
1fd9b3779f
fix #10333
2025-09-07 01:09:18 +02:00
Christian Grothoff
0db39f453a
remove pre-1.0 comment
2025-08-31 20:43:26 +02:00
Christian Grothoff
e9aa6dcdc1
fix rvalues ( #9667 )
2025-08-16 15:48:06 +02:00
Christian Grothoff
f2e3bbda41
-bump header version
2025-07-14 17:09:42 +02:00
Christian Grothoff
ebe728629c
fix double-close() bug reported by MC on the mailinglist
2025-07-14 17:06:25 +02:00
Christian Grothoff
6fe3a41cae
-whitespace and indentation changes only
2024-02-18 15:16:54 +01:00
Christian Grothoff
2f892f4c6b
small typo likely from copy&paste causing macro names to be different
...
between builds with and without messages resulting in compilation
failure if configured with --disable-messages
Signed-off-by: Jan Palus <jpalus@fastmail.com >
2024-02-04 18:29:15 +01:00
Christian Grothoff
0b5ccc723a
-remove trailing whitespace, update PO file, no semantic change(s)
2024-02-01 10:17:19 +01:00
Christian Grothoff
32aa4d0d99
fix #8012
2024-01-21 12:29:38 +01:00
Christian Grothoff
45aa83f172
fix memory leak on error path
2024-01-21 11:44:15 +01:00
Christian Grothoff
0e4d6c2f93
clean up logic, simplify one dead branch in test
2024-01-21 10:45:19 +01:00
Christian Grothoff
52a5e46584
use correct HTTP header (content type, not content encoding) for mime type in example; do check return value in example
2024-01-21 10:33:44 +01:00
Christian Grothoff
9131da3340
regenerate POTfiles
2024-01-21 10:18:35 +01:00
Christian Grothoff
0d85d57380
add missing lock, do not call 'close(-1)' on very rare error path
2024-01-21 10:18:21 +01:00
Christian Grothoff
639435c215
notes on MHD2 API
2024-01-19 20:13:23 +01:00
Christian Grothoff
9c032ccca7
Revert "-add support for ICECAST-style uploads"
...
This reverts commit 19e1ed8355
2023-09-26 11:58:44 +02:00
Christian Grothoff
4a031e5482
-fix theoretical use-after-free in test on error path
2023-09-25 21:52:48 +02:00
Christian Grothoff
64d90a1a85
-tighten test further
2023-09-25 21:49:57 +02:00
Christian Grothoff
5083df300e
fix check order
2023-09-25 21:41:10 +02:00
Christian Grothoff
0ae494028b
check rvalues from MHD_post_process in examples
2023-09-25 21:38:23 +02:00
Christian Grothoff
138ee33a41
check rvalues from MHD_add_response_header in examples
2023-09-25 21:31:59 +02:00
Christian Grothoff
9327a8cc46
check rvalues from MHD_add_response_header in examples
2023-09-25 21:30:03 +02:00
Christian Grothoff
2212a37256
check rvalues from pthread_mutex_ operations in examples
2023-09-25 21:26:31 +02:00
Christian Grothoff
e42c783bb8
-very theoretically, 0 would be OK, too
2023-09-25 21:13:17 +02:00
Christian Grothoff
19e1ed8355
-add support for ICECAST-style uploads
2023-09-25 20:32:53 +02:00
Christian Grothoff
d011008332
-typos
2023-07-10 19:47:02 +02:00
Christian Grothoff
dc1973a702
-typos
2023-06-03 12:58:55 +02:00
Christian Grothoff
84f3cde452
-typo
2023-05-13 22:04:56 +02:00
Christian Grothoff
eeb4166266
-fix bogus assert, use proper libgcrypt type
2023-04-17 10:55:22 +02:00
Christian Grothoff
46357a33c1
-fix typos
2023-04-10 23:32:49 +02:00
Christian Grothoff
e8118a6fca
-typo
2023-02-27 16:54:17 +01:00
Christian Grothoff
6d6846e20b
fix parser bug that could be used to crash servers using the MHD_PostProcessor
2023-02-26 17:51:39 +01:00
Christian Grothoff
08f933a6ad
epoll: immediately notice when other side closes the socket, instead of waiting for timeout ( fixes #7192 )
2023-02-08 15:26:19 +01:00
Christian Grothoff
4627d005d2
add assertion to guard against bad behavior described in #7196 , also document that after suspending one must return MHD_YES
2023-02-08 14:28:49 +01:00
Christian Grothoff
b85d48cd95
-support mime-types by file extension in demo.c
2022-10-28 15:20:38 +02:00
Christian Grothoff
bb33e458ef
-typo
2022-07-31 21:59:09 +02:00
Christian Grothoff
5c3cdf717b
-fix typos
2022-07-30 23:40:22 +02:00
Christian Grothoff
9eb7b4de64
-fix typos
2022-07-28 22:05:12 +02:00
Christian Grothoff
bd88a19e2d
-typo
2022-07-20 21:04:25 +02:00
Christian Grothoff
d629ada1a2
-fix typos
2022-06-26 15:24:24 +02:00
Christian Grothoff
4195c246bb
-more minor fixes
2022-06-07 18:01:13 +02:00
Christian Grothoff
b627fdaf25
-fix read-only off-by one in 'if ( (0 != memcmp (nn->nonce, nonce, noncelen)) ||
...
772 (0 != nn->nonce[noncelen]) )' by making buffer one element larger
2022-06-07 17:57:26 +02:00
Christian Grothoff
711099c7ea
unsure why this was left as a TODO, fix seems trivial (EG: please check)
2022-06-07 17:41:54 +02:00
Christian Grothoff
82abaee62f
-minor cleanups
2022-06-07 17:40:28 +02:00
Christian Grothoff
4720ace1a7
-fix memory leaks in tests
2022-06-07 17:29:24 +02:00
Christian Grothoff
a940c3ba58
-fix warning
2022-06-06 20:41:10 +02:00
Christian Grothoff
06819f2e89
-indentation fix
2022-04-04 07:47:32 +02:00
Christian Grothoff