<feed xmlns='http://www.w3.org/2005/Atom'>
<title>nginx.git/src/http, branch release-1.5.12</title>
<subtitle>nginx</subtitle>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/'/>
<entry>
<title>SPDY: always check size of data to be saved into state buffer.</title>
<updated>2014-03-18T13:00:19+00:00</updated>
<author>
<name>Maxim Dounin</name>
<email>mdounin@mdounin.ru</email>
</author>
<published>2014-03-18T13:00:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=c6c702c32902d30937b16f5e88f5741afb0cab42'/>
<id>c6c702c32902d30937b16f5e88f5741afb0cab42</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Added server-side support for PROXY protocol v1 (ticket #355).</title>
<updated>2014-03-17T13:41:24+00:00</updated>
<author>
<name>Roman Arutyunyan</name>
<email>arut@nginx.com</email>
</author>
<published>2014-03-17T13:41:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=0b5f3297849c6061cf07b359e8b42768889e28cd'/>
<id>0b5f3297849c6061cf07b359e8b42768889e28cd</id>
<content type='text'>
Client address specified in the PROXY protocol header is now
saved in the $proxy_protocol_addr variable and can be used in
the realip module.

This is currently not implemented for mail.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Client address specified in the PROXY protocol header is now
saved in the $proxy_protocol_addr variable and can be used in
the realip module.

This is currently not implemented for mail.
</pre>
</div>
</content>
</entry>
<entry>
<title>FastCGI: f-&gt;split_parts reset on request start.</title>
<updated>2014-03-17T11:34:36+00:00</updated>
<author>
<name>Maxim Dounin</name>
<email>mdounin@mdounin.ru</email>
</author>
<published>2014-03-17T11:34:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=2f917b6d0636bd62ab0dfce0cad28148b0e9b002'/>
<id>2f917b6d0636bd62ab0dfce0cad28148b0e9b002</id>
<content type='text'>
Additionally, make sure to check for errors from ngx_http_parse_header_line()
call after joining saved parts.  There shouldn't be any errors, though
check may help to catch bugs like missing f-&gt;split_parts reset.

Reported by Lucas Molas.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Additionally, make sure to check for errors from ngx_http_parse_header_line()
call after joining saved parts.  There shouldn't be any errors, though
check may help to catch bugs like missing f-&gt;split_parts reset.

Reported by Lucas Molas.
</pre>
</div>
</content>
</entry>
<entry>
<title>SPDY: fixed potential integer overflow while parsing headers.</title>
<updated>2014-03-03T15:24:55+00:00</updated>
<author>
<name>Valentin Bartenev</name>
<email>vbart@nginx.com</email>
</author>
<published>2014-03-03T15:24:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=0c05e5b55fe799bb0d6330bcf75dbde370bf0ba6'/>
<id>0c05e5b55fe799bb0d6330bcf75dbde370bf0ba6</id>
<content type='text'>
Previously r-&gt;header_size was used to store length for a part of
value that represents an individual already parsed HTTP header,
while r-&gt;header_end pointed to the end of the whole value.

Instead of storing length of a following name or value as pointer
to a potential end address (r-&gt;header_name_end and r-&gt;header_end)
that might be overflowed, now r-&gt;lowercase_index counter is used
to store remaining length of a following unparsed field.

It also fixes incorrect $body_bytes_sent value if a request is
closed while parsing of the request header.  Since r-&gt;header_size
is intended for counting header size, thus abusing it for header
parsing purpose was certainly a bad idea.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Previously r-&gt;header_size was used to store length for a part of
value that represents an individual already parsed HTTP header,
while r-&gt;header_end pointed to the end of the whole value.

Instead of storing length of a following name or value as pointer
to a potential end address (r-&gt;header_name_end and r-&gt;header_end)
that might be overflowed, now r-&gt;lowercase_index counter is used
to store remaining length of a following unparsed field.

It also fixes incorrect $body_bytes_sent value if a request is
closed while parsing of the request header.  Since r-&gt;header_size
is intended for counting header size, thus abusing it for header
parsing purpose was certainly a bad idea.
</pre>
</div>
</content>
</entry>
<entry>
<title>SPDY: constant number of preallocated structures for headers.</title>
<updated>2014-03-03T15:24:54+00:00</updated>
<author>
<name>Valentin Bartenev</name>
<email>vbart@nginx.com</email>
</author>
<published>2014-03-03T15:24:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=3925c1b110ef13a3e4130e95a06cc85594bc4494'/>
<id>3925c1b110ef13a3e4130e95a06cc85594bc4494</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Request body: avoid potential overflow.</title>
<updated>2014-03-03T13:39:53+00:00</updated>
<author>
<name>Maxim Dounin</name>
<email>mdounin@mdounin.ru</email>
</author>
<published>2014-03-03T13:39:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=a2a26a7ce19ba8308cef5381456070fe599d0eb7'/>
<id>a2a26a7ce19ba8308cef5381456070fe599d0eb7</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Gzip static: fixed NGX_CONF_FLAG misuse.</title>
<updated>2014-03-03T13:17:25+00:00</updated>
<author>
<name>Valentin Bartenev</name>
<email>vbart@nginx.com</email>
</author>
<published>2014-03-03T13:17:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=2c0defac9b301293babf2520c0575d4a70aeee71'/>
<id>2c0defac9b301293babf2520c0575d4a70aeee71</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Disabled redirects to named locations if URI is not set.</title>
<updated>2014-02-27T16:36:35+00:00</updated>
<author>
<name>Maxim Dounin</name>
<email>mdounin@mdounin.ru</email>
</author>
<published>2014-02-27T16:36:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=96af3e9dfb1d890bbbbc78d88be8bb34a6e4d7a7'/>
<id>96af3e9dfb1d890bbbbc78d88be8bb34a6e4d7a7</id>
<content type='text'>
If something like "error_page 400 @name" is used in a configuration,
a request could be passed to a named location without URI set, and this
in turn might result in segmentation faults or other bad effects
as most of the code assumes URI is set.

With this change nginx will catch such configuration problems in
ngx_http_named_location() and will stop request processing if URI
is not set, returning 500.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
If something like "error_page 400 @name" is used in a configuration,
a request could be passed to a named location without URI set, and this
in turn might result in segmentation faults or other bad effects
as most of the code assumes URI is set.

With this change nginx will catch such configuration problems in
ngx_http_named_location() and will stop request processing if URI
is not set, returning 500.
</pre>
</div>
</content>
</entry>
<entry>
<title>Upstream: fixed error message wording.</title>
<updated>2014-02-20T09:48:40+00:00</updated>
<author>
<name>Konstantin Pavlov</name>
<email>thresh@nginx.com</email>
</author>
<published>2014-02-20T09:48:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=c539aaf352f5bf557d9f437105384c5589ec611a'/>
<id>c539aaf352f5bf557d9f437105384c5589ec611a</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Access: supplemented the obfuscated code with a comment.</title>
<updated>2014-02-19T17:45:27+00:00</updated>
<author>
<name>Ruslan Ermilov</name>
<email>ru@nginx.com</email>
</author>
<published>2014-02-19T17:45:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sigsegv.uk/nginx.git/commit/?id=3da53f339d37f03aaf5c60119898b235ee466a48'/>
<id>3da53f339d37f03aaf5c60119898b235ee466a48</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
