<feed xmlns='http://www.w3.org/2005/Atom'>
<title>nginx.git, branch release-1.9.7</title>
<subtitle>nginx</subtitle>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/'/>
<entry>
<title>nginx-1.9.7-RELEASE</title>
<updated>2015-11-17T14:50:56+00:00</updated>
<author>
<name>Maxim Dounin</name>
<email>mdounin@mdounin.ru</email>
</author>
<published>2015-11-17T14:50:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=da078ec22daa6079576cb72e6f507916929af235'/>
<id>da078ec22daa6079576cb72e6f507916929af235</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Realip: the $realip_remote_addr variable.</title>
<updated>2015-11-16T13:02:02+00:00</updated>
<author>
<name>Ruslan Ermilov</name>
<email>ru@nginx.com</email>
</author>
<published>2015-11-16T13:02:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=1ce16107637d98440c0bb336c6970b5ef23165fb'/>
<id>1ce16107637d98440c0bb336c6970b5ef23165fb</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>HTTP/2: reused HEADERS and CONTINUATION frames buffers.</title>
<updated>2015-11-13T17:10:50+00:00</updated>
<author>
<name>Valentin Bartenev</name>
<email>vbart@nginx.com</email>
</author>
<published>2015-11-13T17:10:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=a52bbefd84f718af15efc8176bc1ee6a461c4db4'/>
<id>a52bbefd84f718af15efc8176bc1ee6a461c4db4</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>HTTP/2: fixed handling of output HEADERS frames.</title>
<updated>2015-11-13T17:10:50+00:00</updated>
<author>
<name>Valentin Bartenev</name>
<email>vbart@nginx.com</email>
</author>
<published>2015-11-13T17:10:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=548e31f6084e2a90d0befcb5c8ff549466a111d3'/>
<id>548e31f6084e2a90d0befcb5c8ff549466a111d3</id>
<content type='text'>
The HEADERS frame is always represented by more than one buffer since
b930e598a199, but the handling code hasn't been adjusted.

Only the first buffer of HEADERS frame was checked and if it had been
sent while others had not, the rest of the frame was dropped, resulting
in broken connection.

Before b930e598a199, the problem could only be seen in case of HEADERS
frame with CONTINUATION.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The HEADERS frame is always represented by more than one buffer since
b930e598a199, but the handling code hasn't been adjusted.

Only the first buffer of HEADERS frame was checked and if it had been
sent while others had not, the rest of the frame was dropped, resulting
in broken connection.

Before b930e598a199, the problem could only be seen in case of HEADERS
frame with CONTINUATION.
</pre>
</div>
</content>
</entry>
<entry>
<title>HTTP/2: fixed invalid headers handling (ticket #831).</title>
<updated>2015-11-13T17:10:50+00:00</updated>
<author>
<name>Valentin Bartenev</name>
<email>vbart@nginx.com</email>
</author>
<published>2015-11-13T17:10:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=8323cd693b493be7372d4bbb0aed4dcb768b87b8'/>
<id>8323cd693b493be7372d4bbb0aed4dcb768b87b8</id>
<content type='text'>
The r-&gt;invalid_header flag wasn't reset once an invalid header appeared in a
request, resulting in all subsequent headers in the request were also marked
as invalid.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The r-&gt;invalid_header flag wasn't reset once an invalid header appeared in a
request, resulting in all subsequent headers in the request were also marked
as invalid.
</pre>
</div>
</content>
</entry>
<entry>
<title>Upstream: proxy_cache_convert_head directive.</title>
<updated>2015-11-11T12:47:30+00:00</updated>
<author>
<name>Roman Arutyunyan</name>
<email>arut@nginx.com</email>
</author>
<published>2015-11-11T12:47:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=89a049be89a2d0507bf1e4558733934bf6597432'/>
<id>89a049be89a2d0507bf1e4558733934bf6597432</id>
<content type='text'>
The directive toggles conversion of HEAD to GET for cacheable proxy requests.
When disabled, $request_method must be added to cache key for consistency.
By default, HEAD is converted to GET as before.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The directive toggles conversion of HEAD to GET for cacheable proxy requests.
When disabled, $request_method must be added to cache key for consistency.
By default, HEAD is converted to GET as before.
</pre>
</div>
</content>
</entry>
<entry>
<title>SSL: only select HTTP/2 using NPN if "http2" is enabled.</title>
<updated>2015-11-05T12:01:09+00:00</updated>
<author>
<name>Valentin Bartenev</name>
<email>vbart@nginx.com</email>
</author>
<published>2015-11-05T12:01:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=93aef089b44cf2a0bcb276eaa17ccea43024f5c2'/>
<id>93aef089b44cf2a0bcb276eaa17ccea43024f5c2</id>
<content type='text'>
OpenSSL doesn't check if the negotiated protocol has been announced.
As a result, the client might force using HTTP/2 even if it wasn't
enabled in configuration.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
OpenSSL doesn't check if the negotiated protocol has been announced.
As a result, the client might force using HTTP/2 even if it wasn't
enabled in configuration.
</pre>
</div>
</content>
</entry>
<entry>
<title>HTTP/2: backed out 16905ecbb49e (ticket #822).</title>
<updated>2015-11-05T12:01:01+00:00</updated>
<author>
<name>Valentin Bartenev</name>
<email>vbart@nginx.com</email>
</author>
<published>2015-11-05T12:01:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=b22c0e0846be6ee21a93a4e7dc6a3cfad25b1758'/>
<id>b22c0e0846be6ee21a93a4e7dc6a3cfad25b1758</id>
<content type='text'>
It caused inconsistency between setting "in_closed" flag and the moment when
the last DATA frame was actually read.  As a result, the body buffer might not
be initialized properly in ngx_http_v2_init_request_body(), which led to a
segmentation fault in ngx_http_v2_state_read_data().  Also it might cause
start processing of incomplete body.

This issue could be triggered when the processing of a request was delayed,
e.g. in the limit_req or auth_request modules.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
It caused inconsistency between setting "in_closed" flag and the moment when
the last DATA frame was actually read.  As a result, the body buffer might not
be initialized properly in ngx_http_v2_init_request_body(), which led to a
segmentation fault in ngx_http_v2_state_read_data().  Also it might cause
start processing of incomplete body.

This issue could be triggered when the processing of a request was delayed,
e.g. in the limit_req or auth_request modules.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fixed ngx_parse_time() out of bounds access (ticket #821).</title>
<updated>2015-10-30T18:43:30+00:00</updated>
<author>
<name>Maxim Dounin</name>
<email>mdounin@mdounin.ru</email>
</author>
<published>2015-10-30T18:43:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=f9cce38e497577449f1a29017d177ca753491885'/>
<id>f9cce38e497577449f1a29017d177ca753491885</id>
<content type='text'>
The code failed to ensure that "s" is within the buffer passed for
parsing when checking for "ms", and this resulted in unexpected errors when
parsing non-null-terminated strings with trailing "m".  The bug manifested
itself when the expires directive was used with variables.

Found by Roman Arutyunyan.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The code failed to ensure that "s" is within the buffer passed for
parsing when checking for "ms", and this resulted in unexpected errors when
parsing non-null-terminated strings with trailing "m".  The bug manifested
itself when the expires directive was used with variables.

Found by Roman Arutyunyan.
</pre>
</div>
</content>
</entry>
<entry>
<title>Syslog: added "nohostname" option.</title>
<updated>2015-10-26T16:06:42+00:00</updated>
<author>
<name>Vladimir Homutov</name>
<email>vl@nginx.com</email>
</author>
<published>2015-10-26T16:06:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=e7d298f3fc79785d22a1227b3c140529a6356fff'/>
<id>e7d298f3fc79785d22a1227b3c140529a6356fff</id>
<content type='text'>
The option disables sending hostname in the syslog message header.  This is
useful with syslog daemons that do not expect it (tickets #677 and #783).
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The option disables sending hostname in the syslog message header.  This is
useful with syslog daemons that do not expect it (tickets #677 and #783).
</pre>
</div>
</content>
</entry>
</feed>
