summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)AuthorFilesLines
2025-10-08Update README.md for archivingHEADmasterDave McAllister1-5/+5
Archiving NGINX Unit repository. Signed-off-by: Andrew Clayton <ac@sigsegv.uk>
2025-10-08Update CONTRIBUTING.md for archivingDave McAllister1-93/+2
Signed-off-by: Andrew Clayton <ac@sigsegv.uk>
2025-10-06java: update tomcat distribution to its recent version 9.0.110Sergey A. Osokin3-2/+11
Signed-off-by: Andrew Clayton <ac@sigsegv.uk>
2025-10-06ci: Enable building of the C tests on Fedora Rawhide/Alpine EdgeAndrew Clayton1-4/+4
Signed-off-by: Andrew Clayton <ac@sigsegv.uk>
2025-10-06src/test: Fix compilation with GCC 15Andrew Clayton2-2/+2
Tag some missed character arrays with NXT_NONSTRING. See commit d9c2fd793 ("Tag various character arrays with NXT_NONSTRING") for details. Signed-off-by: Andrew Clayton <ac@sigsegv.uk>
2025-10-06do not exclude unit-openapi.yaml from releasesAndy Postnikov1-0/+1
Signed-off-by: Andrew Clayton <ac@sigsegv.uk>
2025-09-25php: Add a new to 8.5 SAPI callback, pre_request_initAndy Postnikov1-1/+4
Closes: https://github.com/nginx/unit/issues/1660 [ Commit message tweak - Andrew ] Signed-off-by: Andrew Clayton <ac@sigsegv.uk>
2025-09-23Remove SUPPORT.mdAndrew Clayton2-15/+0
This document is now at odds with the project being moved to "unsupported" status which means "The project has reached a stable, usable state but the author(s) have ceased all work on it. A new maintainer may be desired." Cc: Maryna Herasimovich <m.herasimovich@f5.com> Link: <https://www.repostatus.org/#unsupported> Signed-off-by: Andrew Clayton <ac@sigsegv.uk>
2025-09-11Add 1.35.0 CHANGES1.35.0Andrew Clayton1-0/+35
This is autogenerated from docs/changes.xml by $ make -C docs/ changes && mv build/CHANGES . Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-11docs/changes.xml: Add 1.35.0 changelog entriesAndrew Clayton1-2/+89
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-11pkg/docker: Update dockerfiles for 1.35.0Andrew Clayton18-93/+144
Remove Ruby 3.2 and add 3.4 Remove Golang 1.22 and 1.23, and add 1.24 and 1.25 Just use the main 1.35.0 tag as we aren't going to have a packaging one. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03pkg/docker: Enable zlib. zstd and brotli compressionAndrew Clayton1-2/+5
Install the required libraries, it also requires pkgconf. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03pkg/docker: Update rust to 1.89.0Andrew Clayton1-1/+1
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03Docker: specify real names and handles of MaintainersKonstantin Pavlov1-1/+3
Those are used for notifications from Docker Library. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03docs/unit-openapi.yaml: Update version for 1.35.0Andrew Clayton1-1/+1
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03tools/unitctl: Update for version 1.35.0Andrew Clayton6-8/+8
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03pkg/contrib: Bump wasmtime to 35.0.0Andrew Clayton2-2/+2
This is in preparation for the 1.35.0 release of Unit. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03pkg/contrib: Update to njs 0.9.1Andrew Clayton2-2/+2
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03.mailmap: Add entry for Dave McAllisterAndrew Clayton1-0/+1
You can always see the original names/addresses used by passing --no-mailmap to the various git commands. See gitmailmap(5) Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03Fix formatting of README.md and SUPPORT.mdAndrew Clayton2-4/+6
Fixes: c30c2f5e4 ("Add unitctl quickstart to README.md") Fixes: 32c91a67a ("Chnages to README and SUPPORT to reflect project change") Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-09-03php: Fix building with 8.5Andy Postnikov1-0/+6
Closes: https://github.com/nginx/unit/issues/1646 Link: <https://github.com/php/php-src/commit/f4e2e91d4b6d28448104500819b68edf58bd263c> Signed-off-by: Andy Postnikov <apostnikov@gmail.com>
2025-09-02otel: Bump the tracing-subscriber crate from 0.3.19 to 0.3.20dependabot[bot]1-2/+2
Bumps <https://github.com/tokio-rs/tracing> from 0.3.19 to 0.3.20. Link: Release notes <https://github.com/tokio-rs/tracing/releases> Link: Commits <https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.19...tracing-subscriber-0.3.20> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-25http: compression: brotli: Don't leak memory on errorAndrew Clayton1-3/+8
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-25http: compression: Don't set buf->parentAndrew Clayton1-1/+0
When doing some testing I was noticing when using brotli & zstd compression on application responses we were regularly (but not always) getting segfaults with "corrupted double-linked list" being logged from malloc(3) when we were freeing memory via nxt_mp_destroy() when doing nxt_router_http_request_release(). E.g. #5 0x00007f6eeb4f11f5 in malloc_printerr ( str=str@entry=0x7f6eeb625178 "corrupted double-linked list") at malloc.c:5829 #6 0x00007f6eeb4f1d0c in unlink_chunk (p=<optimized out>, av=0x7f6edc000030) at malloc.c:1619 #7 0x00007f6eeb4f1f78 in _int_free_create_chunk (av=av@entry=0x7f6edc000030, p=p@entry=0x7f6edc008ea0, size=size@entry=4192, nextchunk=<optimized out>, nextsize=75520) at malloc.c:4763 #8 0x00007f6eeb4f352e in _int_free_merge_chunk (av=av@entry=0x7f6edc000030, p=0x7f6edc008ea0, size=4192) at malloc.c:4742 #9 0x00007f6eeb4f36e4 in _int_free_chunk (av=0x7f6edc000030, p=<optimized out>, size=<optimized out>, have_lock=<optimized out>, have_lock@entry=0) at malloc.c:4667 #10 0x00007f6eeb4f6512 in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:4699 #11 __GI___libc_free (mem=<optimized out>) at malloc.c:3476 #12 0x000000000040d66a in nxt_mp_destroy (mp=0x7f6edc003790) at src/nxt_mp.c:342 #13 0x000000000040d5a4 in nxt_mp_release (mp=0x7f6edc003790) at src/nxt_mp.c:303 #14 0x000000000042f9de in nxt_router_http_request_release (task=0x24cb8c10, obj=0x7f6edc003990, data=0x0) at src/nxt_router.c:5799 Interestingly gzip compression never seemed to trigger this... Also when doing brotli compression for example, I could prevent this from happening by simply commenting out BrotliEncoderDestroyInstance(brotli); in src/nxt_brotli.c::nxt_brotli_compress() Running under libasan showed the following ==281177==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7b94031e90f0 at pc 0x000000422b37 bp 0x7b640027c820 sp 0x7b640027c818 READ of size 4 at 0x7b94031e90f0 thread T2 #0 0x000000422b36 in nxt_buf_parent_completion src/nxt_buf.c:229 #1 0x000000422d5e in nxt_buf_ts_completion src/nxt_buf.c:294 #2 0x000000428fa0 in nxt_event_engine_start src/nxt_event_engine.c:542 #3 0x0000004423de in nxt_router_thread_start src/nxt_router.c:3727 #4 0x00000042497b in nxt_thread_trampoline src/nxt_thread.c:126 #5 0x7f6404828ee5 in asan_thread_start(void*) (/lib64/libasan.so.8+0x28ee5) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f) #6 0x7f640446f153 in start_thread (/lib64/libc.so.6+0x71153) (BuildId: 126a08bf502f4950b215dc773e52df8dcf50c393) #7 0x7f64044f1cab in __clone3 (/lib64/libc.so.6+0xf3cab) (BuildId: 126a08bf502f4950b215dc773e52df8dcf50c393) 0x7b94031e90f0 is located 8 bytes after 24-byte region [0x7b94031e90d0,0x7b94031e90e8) allocated by thread T2 here: #0 0x7f64048e6f2b in malloc (/lib64/libasan.so.8+0xe6f2b) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f) #1 0x000000401b10 in nxt_malloc src/nxt_malloc.c:35 #2 0x000000401bd8 in nxt_zalloc src/nxt_malloc.c:54 #3 0x000000410035 in nxt_port_incoming_port_mmap src/nxt_port_memory.c:247 #4 0x0000004162fa in nxt_port_mmap_handler src/nxt_port.c:366 #5 0x000000415000 in nxt_port_handler src/nxt_port.c:184 #6 0x00000040a761 in nxt_port_read_msg_process src/nxt_port_socket.c:1271 #7 0x00000040d596 in nxt_port_queue_read_handler src/nxt_port_socket.c:997 #8 0x000000428fa0 in nxt_event_engine_start src/nxt_event_engine.c:542 #9 0x0000004423de in nxt_router_thread_start src/nxt_router.c:3727 #10 0x00000042497b in nxt_thread_trampoline src/nxt_thread.c:126 #11 0x7f6404828ee5 in asan_thread_start(void*) (/lib64/libasan.so.8+0x28ee5) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f) Thread T2 created by T0 here: #0 0x7f64048de492 in pthread_create (/lib64/libasan.so.8+0xde492) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f) #1 0x00000042468b in nxt_thread_create src/nxt_thread.c:85 #2 0x00000044b799 in nxt_router_thread_create src/nxt_router.c:3575 #3 0x00000044b799 in nxt_router_threads_create src/nxt_router.c:3543 #4 0x00000044b799 in nxt_router_conf_apply src/nxt_router.c:1271 #5 0x000000428fa0 in nxt_event_engine_start src/nxt_event_engine.c:542 #6 0x00000040140d in main src/nxt_main.c:35 #7 0x7f6404401574 in __libc_start_call_main (/lib64/libc.so.6+0x3574) (BuildId: 126a08bf502f4950b215dc773e52df8dcf50c393) #8 0x7f6404401627 in __libc_start_main_alias_1 (/lib64/libc.so.6+0x3627) (BuildId: 126a08bf502f4950b215dc773e52df8dcf50c393) #9 0x000000401264 in _start (/opt/unit/sbin/unitd+0x401264) (BuildId: c05bd11884a7315b24ec2abf762c4f283def6fea) SUMMARY: AddressSanitizer: heap-buffer-overflow src/nxt_buf.c:229 in nxt_buf_parent_completion Shadow bytes around the buggy address: 0x7b94031e8e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b94031e8e80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b94031e8f00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b94031e8f80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b94031e9000: fa fa fa fa fa fa fa fa fa fa fa fa fa fa 00 00 =>0x7b94031e9080: 00 fa fa fa 00 00 00 05 fa fa 00 00 00 fa[fa]fa 0x7b94031e9100: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b94031e9180: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b94031e9200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b94031e9280: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b94031e9300: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==281177==ABORTING "SUMMARY: AddressSanitizer: heap-buffer-overflow src/nxt_buf.c:229 in nxt_buf_parent_completion" Gave some clue. It seems that setting buf->parent on the last buffer triggers this. If we don't set it on the last buffer, everything works fine and no heap-overflow detected. Everything seems to also work fine if we simply don't set it all. So lets do that. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-22ci: Bump actions/setup-java from 4 to 5dependabot[bot]2-3/+3
Bumps <https://github.com/actions/setup-java> from 4 to 5. NOTE: This requires a minimum runner version of 2.327.1 which we seem to currently be on. Link: Release notes <https://github.com/actions/setup-java/releases> Link: Commits <https://github.com/actions/setup-java/compare/v4...v5> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-20java: Update classgraph to the latest versionAndrew Clayton2-2/+2
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-20Merge branch 'master' of https://github.com/nginx/unitDave McAllister7-28/+37
2025-08-20Chnages to README and SUPPORT to reflect project changeDave McAllister2-6/+10
Changed README to: Switched repostatus to Unsupported Added callout for new maintainer(s) minor editorial changes Changes to Support: Callout for new maintainer Minor edittorial changes
2025-08-20Don't leak file descriptor in nxt_main_port_access_log_handler()Andrew Clayton1-0/+3
After opening a file and setting file.fd we _may_ call nxt_port_socket_write(). If so then the file is eventually closed via something like nxt_port_socket_write() nxt_port_socket_write2() nxt_port_write_handler() nxt_port_msg_close_fd() nxt_port_close_fds() Alternatively we may just return from the function and never close(2) file.fd. In which case we should call nxt_file_close(). This was reported by coverity. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-20http: compression: Add a missed nxt_http_comp_compress() return checkAndrew Clayton1-0/+6
In nxt_http_comp_compress_static_response() we should check the return value of the call to nxt_http_comp_compress() in case of error. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-20http: compression: Set the temporary file name in n_h_c_c_s_r()Andrew Clayton3-13/+13
When creating a new nxt_file_t structure in nxt_http_comp_compress_static_response() for the temporary compressed file be sure to set the *name* member. We don't generally need it, but I failed to notice that when calling nxt_file_close() if the close(2) fails then we log an error message containing the file name, which at best would have just printed junk. So set the file name for this particular error case... This issue was reported by coverity. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-19java: update third-party components to their recent versionsSergey A. Osokin3-15/+15
Co-authored-by: Andrew Clayton <a.clayton@nginx.com> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-18Packaging: Ensure sbindir is properly set on newer Fedora (42+)Remi Collet1-0/+4
2025-08-15rust, wasm-wc, otel: Bump the slab crate from 0.4.10 to 0.4.11dependabot[bot]2-4/+4
Bumps <https://github.com/tokio-rs/slab> from 0.4.10 to 0.4.11. Fix Slab::get_disjoint_mut out of bounds. (This combines two dependabots into one) Link: Release notes <https://github.com/tokio-rs/slab/releases> Link: Changelog <https://github.com/tokio-rs/slab/blob/master/CHANGELOG.md> Link: Commits <https://github.com/tokio-rs/slab/compare/v0.4.10...v0.4.11> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-14tools/unitctl: Bump the slab crate from 0.4.10 to 0.4.11dependabot[bot]1-2/+2
Bumps <https://github.com/tokio-rs/slab> from 0.4.10 to 0.4.11. Fix Slab::get_disjoint_mut out of bounds. Link: Release notes <https://github.com/tokio-rs/slab/releases> Link: Changelog <>https://github.com/tokio-rs/slab/blob/master/CHANGELOG.md> Link: Commits <https://github.com/tokio-rs/slab/compare/v0.4.10...v0.4.11> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-14ci: Bump actions/checkout from 4 to 5dependabot[bot]5-8/+8
Bumps <https://github.com/actions/checkout> from 4 to 5. NOTE: This requires a minimum runner version of 2.327.1 which we seem to currently be on. Link: Release notes <https://github.com/actions/checkout/releases> link: Changelog <https://github.com/actions/checkout/blob/main/CHANGELOG.md> Link: Commits <https://github.com/actions/checkout/compare/v4...v5> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-14ci: unitctl: Bump actions/download-artifact from 4 to 5dependabot[bot]1-1/+1
Bumps <https://github.com/actions/download-artifact> from 4 to 5. Link: Release notes <https://github.com/actions/download-artifact/releases> Link: Commits <https://github.com/actions/download-artifact/compare/v4...v5> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-08-01docs: Update unit-openapi.yaml for HTTP compressionAndrew Clayton1-0/+893
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-07-25wasm-wc: Update to wasmtime 35.0.0Andrew Clayton3-305/+287
This is mainly just to be on the latest version for the next release of Unit. This required some changes to the language module as described here <https://github.com/bytecodealliance/wasmtime/pull/10016>. We also add unnecessary_transmutes to the list of allowed linters to quell warnings like warning: unnecessary transmute --> /home/andrew/src/unit/src/wasm-wasi-component/target/debug/build/wasm-wasi-component-9ae3c2c94201e6be/out/bindings.rs:440:13 | 440 | ... ::std::mem::transmute(self._bitfield_1.get(0usize, 24u8) as u32) | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: replace this with: `u32::cast_signed(self._bitfield_1.get(0usize, 24u8) as u32)` | = note: `#[warn(unnecessary_transmutes)]` on by default Also, because this is new in rustc 1.88, to avoid warnings on older compilers the simplest thing is to just add unknown_lints to the list. Link: <https://lists.gnu.org/archive/html/qemu-rust/2025-07/msg00006.html> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-07-25wasm-wc: Update cratesAndrew Clayton1-259/+336
Run 'cargo update' to get the latest version of the required crates in preparation for the 1.35.0 release. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-07-25tools/unitctl: Update cratesAndrew Clayton1-256/+395
Run 'cargo update' to get the latest version of the required crates in preparation for the 1.35.0 release. This resolves a dependabot notification regarding 'crossbeam-channel'. Link: <https://github.com/nginx/unit/security/dependabot/26> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-07-25otel: Update cratesAndrew Clayton1-285/+297
Run 'cargo update' to get the latest version of the required crates in preparation for the 1.35.0 release. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-07-25Set SERVER_PORT appropriatelyAndrew Clayton6-35/+16
The Perl, PHP, Python, Ruby & Java language modules all hard code SERVER_PORT to "80". Adjust them to bring them in line with the wasm language module which uses r->local_port (I.e. the port unit accepted the connection on). Closes: https://github.com/nginx/unit/issues/761 Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-05-28tests: nodejs: Added test for responses with duplicate headersskokalin2-0/+16
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-05-28node.js: Fixed issue with duplicate headers in responseskokalin1-3/+3
It fixes losing context in response in cases when there are 2 or more headers with the same name. The prev implementation used to use foreach function which uses local lexical environment and did not find this.headers_len locally, which causes crash of the http server module. It was replaced with a for loop in order to make access for this.headers_len variable and improve performance of calculation. Closes: https://github.com/nginx/unit/issues/1621 Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-05-28Use NULL instead of 0 as null pointer constantAndrew Clayton7-19/+19
GCC 15 enabled "-Wzero-as-null-pointer-constant" for C, which checks for places where '0' has been used as a null pointer constant. This showed a few places in Unit where we were using '0' instead of the more correct NULL macro. E.g. $ make -j4 EXTRA_CFLAGS=-Wzero-as-null-pointer-constant ... src/nxt_buf.c: In function ‘nxt_buf_mmap_alloc’: src/nxt_buf.h:192:21: error: zero as null pointer constant [-Werror=zero-as-null-pointer-constant] 192 | (bm)->start = 0; \ | ^ src/nxt_buf.c:135:9: note: in expansion of macro ‘nxt_buf_mem_set_size’ 135 | nxt_buf_mem_set_size(&b->mem, size); | ^~~~~~~~~~~~~~~~~~~~ Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-05-21ci: clang-ast: Update to openjdk-21-jdkAndrew Clayton1-1/+1
Seems OpenJDK 17 is no longer available in Debian testing. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-05-08njs: Update for version 0.9.0 API changesAndrew Clayton4-25/+34
This bumps the minimum required version of njs to 0.9.0 Cc: Sergey A. Osokin <sergey.osokin@nginx.com> Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-05-07ci: Build Unit with --zlib --zstd --brotliAndrew Clayton2-4/+12
This just does a build test of building Unit with support for zlib (deflate & gzip), zstd and brotli HTTP compression. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
2025-05-07auto/compression: Error out if requested library not foundAndrew Clayton1-0/+15
You asked for a specific compression library, be clear when it isn't found. Signed-off-by: Andrew Clayton <a.clayton@nginx.com>
generated by cgit (git 2.34.1) at 2025-12-06 04:24:18 +0000