summaryrefslogtreecommitdiffhomepage
path: root/src (follow)
AgeCommit message (Collapse)AuthorFilesLines
2011-09-30Merging r4137:Igor Sysoev1-2/+4
Fixed loss of chain links in fastcgi module.
2011-09-30Merging r4130, r4131, r4135:Igor Sysoev2-62/+106
Linux AIO related fixes: *) Fixing Linux AIO syscalls return value handling: syscall(2) uses usual libc convention, it returns -1 on error and sets errno. Obsolete _syscall(2) returns negative value of error. *) Fixing Linux AIO initiatialization: AIO operations are disabled if kernel does not support them. Previously worker just exited. *) The "worker_aio_requests" directive. The default value is 32 AIO simultaneous requests per worker. Previously they were hardcoded to 1024, and it was too large, since Linux allocated them early on io_setup(), but not on request itself. So with default value of /proc/sys/fs/aio-max-nr equal to 65536 only 64 worker processes could be run simultaneously. 32 AIO requests are enough for modern disks even if server runs only 1 worker.
2011-09-30Merging r4098:Igor Sysoev1-0/+2
In Mac OS X Lion, Apple deprecated the use of the system OpenSSL library in favour of their CommonCrypto library. This change adds a work-around that allows nginx to still be built on Lion with OpenSSL.
2011-09-30Merging r4036, r4055, r4056, r4057, r4058, r4059, r4060, r4061, r4062, r4063,Igor Sysoev3-49/+67
r4064: Ranges related fixes: The "max_ranges" directive. "max_ranges 0" disables ranges support at all, "max_ranges 1" allows the single range, etc. By default number of ranges is unlimited, to be precise, 2^31-1. If client requests more ranges than "max_ranges" permits, nginx disables ranges and returns just the source response. If total size of all ranges is greater than source response size, then nginx disables ranges and returns just the source response. This fix should not affect well-behaving applications but will defeat DoS attempts exploiting malicious byte ranges. Now unsatisfiable ranges are processed according to RFC 2616.
2011-09-30Merging r4077, r4101, r4102:Igor Sysoev3-5/+10
open_file_cache related fixes: *) Bugfix: open_file_cache lost is_directio flag. On file retest open_file_cache lost is_directio if file wasn't changed. This caused unaligned operations under Linux to fail with EINVAL. It wasn't noticeable with AIO though, as errors wasn't properly logged. *) Bugfix: open_file_cache did not update file info on retest. If file inode was not changed, cached file information was not updated on retest. As a result stale information might be cached forever if file attributes was changed and/or file was extended.
2011-09-30Merging r4010, r4065:Igor Sysoev2-2/+6
SSL related fixes: *) Fixing proxy_set_body and proxy_pass_request_body with SSL. Flush flag wasn't set in constructed buffer and this prevented any data from being actually sent to upstream due to SSL buffering. Make sure we always set flush in the last buffer we are going to sent. See here for report: http://nginx.org/pipermail/nginx-ru/2011-June/041552.html *) Proper SSL shutdown handling. If connection has unsent alerts, SSL_shutdown() tries to send them even if SSL_set_shutdown(SSL_RECEIVED_SHUTDOWN|SSL_SENT_SHUTDOWN) was used. This can be prevented by SSL_set_quiet_shutdown(). SSL_set_shutdown() is required nevertheless to preserve session.
2011-09-30Merging r3933, r4154:Igor Sysoev5-10/+7
A new fix for the case when ssl_session_cache defined, but ssl is not enabled in any server. The previous r1033 does not help when unused zone becomes used after reconfiguration, so it is backed out. The initial thought was to make SSL modules independed from SSL implementation and to keep OpenSSL code dependance as much as in separate files.
2011-09-30Version bump.Igor Sysoev2-3/+3
2011-08-29Merge of r4016:Igor Sysoev3-3/+27
Fix ignored headers handling in fastcgi/scgi/uwsgi. The bug had appeared in r3561 (fastcgi), r3638 (scgi), r3567 (uwsgi).
2011-08-29Merge of r4018:Igor Sysoev1-1/+2
Fix buffer overrun under Windows.
2011-08-29Merge of r3964, r3977, r3978:Igor Sysoev6-8/+22
Proxy related fixes: *) finalizing with rc == 0 in unbuffered proxy mode caused nginx to wait for another send_timeout before actually closing client's connection if client timed out while still talking to upstream server *) update r3945 with more descriptive error message *) test length of proxy_pass with variables; patch by Lanshun Zhou
2011-08-29Merge of r3982, r3984, r3985, r3991:Igor Sysoev3-2/+31
Lingering closing related fixes: *) lingering_close "off|on|always" *) enable lingering close for pipelined requests *) do not send RST on normal lingering close read timeout, if reset_timedout_connection is on
2011-08-29Merge of r3960, r3961, r3962, r3963, r3965:Igor Sysoev8-36/+119
SSL related fixes: *) MSIE export versions are rare now, so RSA 512 key is generated on demand and is shared among all hosts instead of pregenerating for every HTTPS host on configuraiton phase. This decreases start time for configuration with large number of HTTPS hosts. *) ECDHE support; patch by Adrian Kotelba *) fix build by gcc46 with -Wunused-value option *) fix SSL connection issues on platforms with 32-bit off_t *) do not try to reuse and save a SSL session for a peer created on the fly by ngx_http_upstream_create_round_robin_peer(), since the peer lives only during request so the saved SSL session will never be used again and just causes memory leak
2011-08-29Merge of r3979, r3980, r3981, r3983, r3987, r3994, r3995:Igor Sysoev3-16/+154
Accept-Encoding refactoring: *) "gzip; q=0" support *) and removal of ancient MSIE 4.x test for gzip
2011-08-29Merge of r3972, r3973, r3974:Igor Sysoev1-5/+7
Cache fixes: *) do not close connection if cache file is too small: replace it with valid one *) rename ngx_http_file_cache_manager_sleep() to ngx_http_file_cache_loader_sleep() and do not use it all in cache manager: this is a vestige of the times when cache manager loaded cache *) set correct configuration file values while adding path
2011-08-29Merge of r3966, r3967, r3968, r3969, r3970, r3971:Igor Sysoev5-67/+23
Cache loader improvements: The cache loader performs two tasks: inserting cache objects in inactivity list and evaluating total cache size. Reading just directory is enough for this purpose. Elimination of reading cache files saves at least one disk I/O operation per file.
2011-08-29Merge of r4035:Igor Sysoev1-0/+1
Cache size accounting fix: actual cache size on disk was less than needed by sum of sizes of files loaded by worker processes themselves while cache loader was running. The bug has been introduced in r3900.
2011-08-29Version bump.Igor Sysoev2-3/+3
2011-07-19fix segfault if cache key is larger than upstream buffer sizeIgor Sysoev1-0/+9
patch by Lanshun Zhou
2011-07-19$uid_resetIgor Sysoev1-18/+63
2011-07-19fix r3756: release lock to allow other process to delete cache nodeIgor Sysoev1-1/+2
patch by Maxim Dounin
2011-07-18fix building by MSVCIgor Sysoev1-26/+26
2011-06-28revert r3935 and fix "stalled cache updating" alertIgor Sysoev1-16/+10
by freeing cache at upstream finalize phase patch by Maxim Dounin
2011-06-28referer_hash_max_size and referer_hash_bucket_size directivesIgor Sysoev1-2/+32
patch by Witold Filipczyk
2011-06-27use !aNULL to disable all anonymous cipher suitesIgor Sysoev2-2/+2
patch by Rob Stradling
2011-06-27bump versionIgor Sysoev2-3/+3
2011-06-01fix "stalled cache updating" alert,Igor Sysoev1-0/+9
when non-cachable HEAD response did not not free an expired cache node
2011-05-30revert r3875 since now map uses case sensetive regexes by defaultIgor Sysoev1-0/+6
2011-05-30change ngx_http_map_find(): use case sensitive regexesIgor Sysoev3-11/+24
2011-05-27fix building on FreeBSD 6 or earlier against system md5Igor Sysoev1-1/+1
2011-05-27make built-in ngx_md5_update() interface consistent with other implemenationsIgor Sysoev2-4/+3
2011-05-26fix building --without-http_auth_basic_module,Igor Sysoev1-0/+4
the bug has been introduced in r3923
2011-05-26bump versionIgor Sysoev2-3/+3
2011-05-16"$apr1", "{PLAIN}", and "{SSHA}" password methods in auth basic moduleIgor Sysoev7-5/+259
patch by Maxim Dounin
2011-05-16fix testing IPv4 address mapped to IPv6, when only IPv6 access rules are definedIgor Sysoev1-12/+19
2011-05-16support IPv4 mapped to IPv6 in geo moduleIgor Sysoev1-4/+28
2011-05-16support IPv4 mapped to IPv6 in geoip moduleIgor Sysoev1-28/+42
2011-05-13fix debug loggingIgor Sysoev1-1/+1
2011-05-13fix a broken cached response if bypass/no_cache directive values are different,Igor Sysoev2-28/+14
the bug has been introduced in r3700
2011-05-11geoip_orgIgor Sysoev1-0/+118
patch by Alexander Uskov
2011-05-11fix typoIgor Sysoev1-2/+2
2011-05-11bump versionIgor Sysoev2-3/+3
2011-05-10gdImageCopyRotated() may images of even height or widthIgor Sysoev1-3/+17
patch by Adam Bocim
2011-05-10use POSIX semaphores in shmtx instead of sched_yield()Igor Sysoev8-80/+249
number of spinlock spins are increased twice
2011-05-04bump versionIgor Sysoev2-3/+3
2011-05-03test zero value in an "if" directive consistently with predicates fixed in r3894Igor Sysoev1-1/+1
thanks to Maxim Dounin
2011-04-23revert r3864, it may cause kernel panic on some kernels while working with IPv6Igor Sysoev1-1/+1
2011-04-23fix building by gcc 4.6 without --with-debugIgor Sysoev2-14/+7
2011-04-23style fix: remove trailing spacesIgor Sysoev1-29/+29
2011-04-22Use more precise stat.st_blocks to account cache size on UnixIgor Sysoev6-18/+21
instead of file length rounded to a file system block size. There is no similar way on Windows, so rounding to a cache->bsize is kept.
generated by cgit (git 2.34.1) at 2025-12-06 22:09:37 +0000