mirrors/libmicrohttpd
2
0
Fork 0
mirror of https://git.gnunet.org/libmicrohttpd.git synced 2026-09-25 04:09:31 +03:00
Code Issues Packages Projects Releases Wiki Activity
5,373 Commits 19 Branches 39 Tags
v1.0.10
Commit Graph
4473 Commits
Author SHA1 Message Date
Christian Grothoff 7922bbd7a9 release v1.0.10 2026-08-07 22:24:52 +02:00
Christian Grothoff 3eea8aaaa0 need per-thread ITC in thread-per-connection mode to avoid races not waking up the thread or the daemon due to sharing of the channel 2026-08-07 22:14:16 +02:00
Christian Grothoff 1778d7b8fe fix assertion failure on resume 2026-08-07 21:18:57 +02:00
Christian Grothoff 0bfdd8d71a releasing v1.0.9 2026-07-30 17:46:29 +02:00
Christian Grothoff 641d2e97c9 distill the second fuzzing campaign into the seed corpus 2026-07-29 19:31:22 +02:00
Christian Grothoff d623ab0f69 more fuzzing fun 2026-07-29 17:13:46 +02:00
Christian Grothoff 70f1ba0b22 use MHD_check_response_header_s_token_ci() as it was designed, avoid crash on add_connection followed immediately by daemon destruction; enforce minimum psk length 2026-07-29 17:13:37 +02:00
Christian Grothoff 669daf7a46 fix red-zone support in memorypool 2026-07-29 13:19:49 +02:00
Christian Grothoff 75549625f0 fix over-writing of version string with network data read after parsing header 2026-07-29 13:19:44 +02:00
Christian Grothoff 5486f6f66d fix races resulting in UB 2026-07-29 00:00:21 +02:00
Christian Grothoff d2e286352a update fuzzer docs 2026-07-28 23:31:39 +02:00
Christian Grothoff fd16f9d2cb add test for suspend_resume_epoll example 2026-07-28 23:14:02 +02:00
Christian Grothoff d59f304524 expand fuzzing logic 2026-07-28 23:04:14 +02:00
Christian Grothoff 5ae817bd6a fix comment 2026-07-28 22:49:10 +02:00
Christian Grothoff 6418a0b3b5 -indent fun 2026-07-28 19:54:22 +02:00
Christian Grothoff fdaf9ca025 fix memory leaks 2026-07-28 19:53:39 +02:00
Christian Grothoff 56713e94bb -comments 2026-07-28 17:18:32 +02:00
Christian Grothoff a1fb82fc3c more findings 2026-07-28 17:04:14 +02:00
Christian Grothoff 07c051dd7e fail MHD_digest_auth_check_digest2 on MHD_DIGEST_ALG_AUTO 2026-07-28 16:58:41 +02:00
Christian Grothoff acef58a077 prevent connection upgrade attempts on connections that must-close 2026-07-28 16:57:45 +02:00
Christian Grothoff d0270f583a expand fuzzer coverage 2026-07-28 16:56:42 +02:00
Christian Grothoff 1b7b319d04 fix fuzzer setup logic 2026-07-28 13:50:17 +02:00
Christian Grothoff 6e43206ba1 version bumping, this time correctly 2026-07-28 12:40:05 +02:00
Christian Grothoff e34baa3f1a expand test suite, add CI/CD logic as done in other GNUnet projects 2026-07-28 12:36:36 +02:00
Christian Grothoff b4f2b6583f fix spelling 2026-07-28 11:40:40 +02:00
Christian Grothoff 2a9c4676ed fix bogus assertion 2026-07-28 11:06:10 +02:00
Christian Grothoff 6fcdfd437e fix bogus assertion 2026-07-28 11:03:00 +02:00
Christian Grothoff 0b7509755f fix bogus assertion 2026-07-28 11:02:27 +02:00
Christian Grothoff e04eb2189b add missing return to ensure 413 is given to client 2026-07-28 11:01:37 +02:00
Christian Grothoff 68c83f22b8 fix bogus assertion 2026-07-28 11:00:28 +02:00
Christian Grothoff 300a2ab01c handle empty username and empty realm provided by client gracefully 2026-07-28 10:59:19 +02:00
Christian Grothoff 888606e004 fix algorithm parsing, string cmp was matching wrong strings to client requests to determine selected algorithm 2026-07-28 10:58:39 +02:00
Christian Grothoff f438804c18 do not abort on nonce slot collisions with different algorithms 2026-07-28 10:55:44 +02:00
Christian Grothoff 3b898eaea7 fix another issue with INVALID enum check where masking did not work because INVALID is zero 2026-07-28 10:53:07 +02:00
Christian Grothoff 5a73c1ae81 ensure digest authentication hex decoder does not overflow if give hex-encoded userhash is too long (potential out-of-bounds stack write); thanks to A. Ramos for reporting 2026-07-27 18:11:25 +02:00
Christian Grothoff c13f4c6484 fix parsing of chunk-extension lines that previously failed to skip the \r\n properly; might be abused for HTTP request smuggling; thanks to A. Ramos for reporting 2026-07-27 18:00:30 +02:00
Christian Grothoff 29eaa56b31 fix read-buffer shift back underflow in special conditionas with trailing query arguments without '='; thanks to A. Ramos for reporting 2026-07-27 17:55:00 +02:00
Christian Grothoff bd49ce930b fix missing check for MHD_DIGEST_AUTH_ALGO3_INVALID case reported by A. Ramos that could result in an abort 2026-07-27 17:42:50 +02:00
Christian Grothoff 6a3d1006b8 bump version to v1.0.6 2026-07-08 12:45:21 +02:00
Christian Grothoff f2af9bc474 -DCE 2026-07-08 12:20:14 +02:00
Christian Grothoff 592c70648b -typos 2026-07-08 12:17:59 +02:00
Christian Grothoff 026525d584 match content-type only at beginning of the line 2026-07-08 12:12:58 +02:00
Christian Grothoff d6fc384fc4 fix overflow check 2026-07-08 12:11:26 +02:00
Christian Grothoff f10d7c71ab fix overflow check 2026-07-08 12:09:38 +02:00
Christian Grothoff b4165ecc09 fix overflow check 2026-07-08 12:07:51 +02:00
Christian Grothoff df2309b0ed fix theoretical div by 0 2026-07-08 12:06:19 +02:00
Christian Grothoff 9a1527ff72 fix CLOSE flag test 2026-07-08 12:03:13 +02:00
Christian Grothoff 5abfcc927a add assertion to prevent underflow 2026-07-08 11:56:37 +02:00
Christian Grothoff 97b4296cc0 fix possible underflow on timeout computation 2026-07-08 11:54:11 +02:00
Christian Grothoff e5f88887df size check before allocating 2026-07-08 11:51:55 +02:00