/[hydra]/hydra/ChangeLog
ViewVC logotype

Annotation of /hydra/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.3 - (hide annotations)
Mon Sep 23 19:28:41 2002 UTC (19 years, 2 months ago) by nmav
Branch: MAIN
CVS Tags: BOAS_WITH_RANGES_AND_CGI
Changes since 1.2: +2 -0 lines
Cleaned up the CGI handling. Now gunzip, indexer are treated like real cgis. Several other cleanups.

1 nmav 1.2 ** Changes from 0.94.13 to Boas/SMP
2     * Added support for SSL 3.0 and TLS 1.0 protocols.
3     * Added support for multiple CPU's by making the server
4     run over a pool of threads.
5     * Changed the file caching code. The mmap() calls are cached until
6     the mmap list table is full.
7     * Added support for HTTP/1.1 ranges.
8 nmav 1.3 * Added support for the TCP_CORK tcp option in linux.
9     * Cleaned up the CGI handling (gunzip, indexer are treated as CGIs)
10 nmav 1.2
11 nmav 1.1 ** Changes from 0.94.12 to 0.94.13
12     * Change many instances of log_error_mesg + exit to DIE macro
13     * Change all instance of log_error_mesg (without exit) to WARN macro
14     * do a much better job of checking return values from malloc and
15     especially strdup.
16     * check results of calling umask and getrlimit
17     * server_s is no longer a global int
18     * check results of fork via switch instead of if (fork())
19     * check for getopt.h and include it if found
20     * remove unused #defines, and add WARN macro, and replace
21     many calls to log_error_mesg(..) with WARN macro
22     * fix bug in get_commonlog_time where time_offset calculation was
23     the opposite of what it should be ('-' and '+' were swapped)
24     * fix compatability bug with old and newer versions of flex/yacc
25     * add check for AC_FUNC_MMAP to configure.in
26     * fix really lame thinko in normalize_path, which would prepend the
27     results of earlier calls to results from later calls
28     * Add MaxConnections, a configuration directive which allows the
29     user to specify the maximum number of connections that Boa will
30     accept concurrently.
31     * add SERVER_ADDR and REQUEST_URI to environment of CGI
32     * handle SIGBUS during writes of data that has been memory mapped
33     * minor optimization in select.c that prevents DEAD requests from
34     being added to the block set
35     * fix bug in CGI environment script_name - closes sf.net bug #576725
36     * make 'status' variable local to requests.c, not local to every file
37     by forgetting to declare 'extern' in globals.h :-|
38     * make getsockname non-fatal, and do it every time because we may
39     need it for the CGI
40     * some minor refactoring optimizations in hash.c
41    
42     ** Changes from 0.94.11 to 0.94.12
43     * Renamed Changelog ChangeLog, and moved up to top-level directory
44     * Next 3 items due in part or whole thanks to
45     Liam Widdowson
46     * when printf'ing a pid type, force to int, because it could be
47     something else on other platforms. Should probably change it to
48     a long, and use that.
49     * backported chroot commandline support from 0.95
50     * backported support for strdup, strstr, alphasort, and scandir
51     from 0.95
52     * Fixed src/Makefile.in -- it didn't remove index_dir.o
53     * backport create_temporary_file from 0.95
54     (instead of using tmpnam)
55     * Allow non-standard date format 31 September 2000 23:59:59 GMT
56     Patch by Landon Curt Noll
57     * Skip whitespace before HTTP/major.minor
58     Adapted patch from Landon Curt Noll
59     * open /dev/null first thing (affects chrooting)
60     * properly handle sigalrm -- use sigalrm_flag and sigalrm_run
61     instead of handling the signal in the signal handler
62     * update manpage slightly
63     * send 400 BAD Request when resource does not start with '/'
64     * add grp.h to boa.h's includes -- remove from boa.c and config.c
65     * removed duplicate header includes from boa.c, config.c, get.c,
66     ip.c, request.c, response.c
67     * factor out creating the server socket and dropping privs
68     into create_server_socket and drop_privs
69     * type all functions in boa.c (except main) as static
70     * set umask after opening /dev/null
71     * tie stdin/stdout to /dev/null before commandline parse
72     * removed old, unused chroot code
73     * move builds_needs_escape earlier in the startup
74     * move fork later in the startup
75     * type all c_set_* as static in config.c
76     * don't bother trying to change uid/gid (or error if the
77     requested uid/gid doesn't exist) if not UID 0
78     * return more appropriate error code when foo.html gives
79     access denied, but foo.html.gz gives some other error
80     (essentially report error associated with foo.html, not foo.html.gz)
81     * send NOT Implemented when an unknown method is attempted
82     * always attempt a 32k read right before close
83     (stopgap until blackhole can be merged)
84     * allow more than 1 space in logline between method, resource,
85     and http version
86     * don't use inline functions
87     * update configure.in so that autoconf 2.50 doesn't complain (as much)
88     * properly use VPATH and srcdir according to autoconf docs
89     * change curly-braces to parentheses in Makefilein
90     * use $^ instead of manually listing the dependencies in Makefile.in
91     * remove tests section in Makefile.in
92     * write tags not TAGS in Makefile.in
93     * Add gethostbyname and inet_aton to function checks
94     * Add code from 0.95 which checks for socket in -lsocket,
95     inet_aton in -lresolv, and gethost{by}name in -lnsl
96     * Also remove broken bc-based "how big is an unsigned int" checks:
97     assume minimum of 32 bits and check in escape.c at runtime.
98     * Added new file: README.chroot.solaris, based on a
99     modified version by Liam Widdowson
100     * Add check_struct_for.m4, which allows us to check a structure
101     for a member (found at http://www.gnu.org/software/ac-archive/
102     authored by Wes Hardaker
103     * Call "aclocal -I ." to rebuild aclocal.m4
104     * Using new check-struct-for-member autoconf macro, check
105     for tm_gmtoff and tm_zone in struct tm -- useful in
106     portability tests for localtime.
107     * Also check sockaddr_in for structure sin_len so we can set
108     it properly.
109     * index_dir.c (which ends up in boa_indexer) can now be compiled
110     with USE_LOCALTIME, and if so, it will report the local time
111     using the timezone name. Otherwise it uses UTC time and UTC
112     timezone designation.
113     * fix buglet in mmap_cache.c which shows up when under
114     heavy load by many different files.
115     Found and squashed by Michal Kara
116     * normalize paths on Aliases, log files, server root, dirmaker
117     This makes sure that paths are 'absolute'
118     * don't generate DOCUMENT_ROOT or SERVER_ROOT,
119     CGIs have no business knowing that information
120     * if CGI, chdir to the cgi's root path
121     Bug found by Matt Callaway
122     * remove ChrootPath and PidFile directives from the parser
123     (they aren't used anyway)
124     * keep track of maximum file descriptor in use to optimize call
125     to select()
126     * apply IPv6 patch from Jari Korva
127     * optimize keep-alive copy data routine
128     * try to use memcpy instead of strcpy/strcat in more places (alias.c)
129     * update .depend file
130     * use fcntl + GET_FL to get a file descriptor's flags, then
131     add or remove only the bits we want to set. This prevents
132     accidentally setting or unsettings bits we don't have anything
133     to do with inadvertantly. (removed, at least temporarily.
134     Show me a system where it is needed -- LRD)
135     * make sure to call FD_ZERO when we handle a restart
136     * in read.c, don't call boa_perror on read failure -- socket is
137     dead or messed up anyway, no reason to try to write to it.
138     * explicit .SUFFIXES in Makefile.in
139     * boa.objdump target added
140     * use @MAKE_SET@ (for when $(MAKE) != "make")
141     * add -Wundef -Wwrite-strings -Wredundant-decls -Winline to GCC_FLAGS
142     * change Paul Phillips' and Larry Doolittle's emails in source
143     * add --disable-debug, --enable-profile, --with-dmalloc, and --with-efence
144     * test for failed-but-return-was-successful setuid:
145     http://www.securityfocus.com/bid/1322
146     * use _exit not exit in CGI child
147     * always place new keepalive request on blocked list, we can't be
148     sure of the state of the active list, and since enqueue places
149     things at the *front* of the list, it doesn't do us much good
150     to place the new request on the active list anyway.
151     * update some Copyright statements for 2002
152     * When comparing the uri to an alias, only compare if
153     the uri length is greater than or equal to the length of the alias
154     * in init_script_alias, make sure to check for document_root before
155     trying to use it
156     * script_name is now just a copy of the request, rather
157     than some complicated variation on the pathname
158     * change the way the CGI environment is handled.
159     Now, it is allocated at request allocation time, and exists
160     throughout the life of the structure.
161     * check memory allocations, etc.. when creating the static
162     CGI environment and when making new CGI environment variables
163     * wait until process_option_end to call unescape_uri, clean_pathname,
164     and translate_uri
165     * remove debian package information
166     * move RedHat packaging information to contrib
167     * remove tests -- they weren't usable anyway
168     * add some new hash routines, and use djb2 (a variant on a
169     hash algorithm popularized by Dan J. Bernstein)
170     * a side-effect of the new hash routines is a bugfix,
171     involving negative return values from hash routines.
172     This has been fixed.
173     * add a routine, show_hash_stats, which is called with other
174     statistical output via sigalarm
175     * remove some duplicate prototypes from config.c
176     * make simple_itoa take an unsigned int
177     * try to make NOBLOCK handling in compat.h compatible with Solaris
178     * make sure to update current_time before calling signal handlers
179     * alter primary loop to make sure that select gets called even
180     when there are requests that are not blocking, and call fdset_update
181     and process_requests (when appropriate) after signal handlers but
182     before select to make sure that blocked requests are still handled
183     by select after a sighup. (Thanks to Karl Olsen)
184     * pull select loop into select.c
185     * poll server socket once per active connection
186     * add send_r_service_unavailable and use it when appropriate
187     * state uptime in seconds at normal program termination
188     * include sys/fcntl.h if it is found by configure
189     * fix POST bug where a content-length < 0 would cause Boa to
190     consume its full share of CPU until killed
191     Bug report by Landon Curt Noll
192     * add CGIPath configuration variable
193     based upon a patch by Landon Curt Noll
194     * add function boa_atoi, which wraps atoi, but does not
195     accept negative values. Additionally, it checks to make sure
196     the converted value and the original value are the same, avoiding
197     issues like "124.3" -> "123" and "123abc" -=> "123".
198     Either a value is an int or it isn't - no middle ground.
199     * use boa_atoi to convert content-length from client.
200     * add new #define - SINGLE_POST_LIMIT_DEFAULT, which defines
201     (in bytes) the *default* single_post_limit.
202     * single_post_limit is now in bytes.
203     * when adding aliases, only "normalize" paths that start
204     with "./" - this is a departure from previous behavior
205     * add "?" to the list of characters that it is safe to leave unescaped
206     * clean up Makefile.in of no-longer-pertinent comments
207     * add send_r_bad_gateway and use it
208     * tie stderr to either cgi_log_fd or devnullfd - either way
209     make sure stderr is a valid filehandle before cgi execution
210     * cgi_env is no longer allocated, it's part of the struct now
211     * fix bug in CgiPath logic
212     * when unable to allocate memory for an environment variable, log it
213     * add clear_common_env, which de-allocates the cgi_common_env stuff
214     [NEVER USE THIS outside of a terminal signal handler!]
215     * don't be so wasteful of memory in normalize_path
216     * adapted fix for alias expansion from Brieuc Jeunhomme
217    
218     ** Changes from 0.94.10.1 to 0.94.11
219     * use LIBS in Makefile.in (which propagates from autoconf)
220     * properly free memory allocated by scandir in index_dir.c
221     * rearrange some header files and includes
222     * on reads and writes, don't check for -1, check for < 0
223     * include fix by William Meadows
224     for escape.c which fixes segfaults due to improper allocation
225     * above fix by William Meadows no longer needed;
226     escape.c and escape.h rewritten by Larry Doolittle -- requires
227     at least 32 bit words, but is correct (jdn's 1st attempt was faulty)
228    
229     ** Changes from 0.94.10 to 0.94.10.1
230     * Actually update the SERVER_VERSION in src/defines.h
231    
232     ** Changes from 0.94.9 to 0.94.10
233     * Fixes escaping rules
234     * Fixes segfault when directory_index is undefined and
235     directory needs to be generated
236     * adds dummy signal handlers for SIGUSR1 and SIGUSR2 (Closes SF #425921)
237     * Update documentation regarding mime.types (Closes Debian #69991)
238     * Make sure documentation builds (Closes Debian #110818)
239    
240     ** Changes from 0.94.8.3 to 0.94.9
241     * src/Makefile.in updated to take CFLAGS, LIBS, and LDFLAGS
242     from autoconf
243     * Update escaping rules with latest RFC
244     * unescape_uri skips fragments and also stop parsing at '?'
245     * Don't accept fd over FD_SETSIZE in request.c:get_request
246     * use backported documentation from 0.95
247     * make sure POST fd gets closed even on client cancel
248     * use backported index_dir.c from 0.95
249     * support subdirectories in ScriptAlias directories
250     * add SinglePostLimit (int, in Kilobytes) to config system
251     * check for ENOSPC on body write
252     * use environment variable TMP (or "/tmp" if not available),
253     and chdir there when boa exits.
254     * add 1-time-only hack to make a 32kB read at the end of a request
255     on POST or PUT
256     * close unused file descriptors (/dev/null in boa.c, and the
257     unused part of the pipes call in cgi.c)
258     * made Makefile.in VPATH happy
259    
260     ** Changes from 0.94.8.2 to 0.94.8.3
261     * Move unescape_uri *before* clean_pathname to prevent
262     encoding of / and .. in pathname
263     * wrap execution of GUNZIP in cgi.c with #ifdef GUNZIP
264     * stop parsing when fragment found in URL ('#')
265    
266     ** Changes from 0.94.8.1 to 0.94.8.2
267     * close pipes[1] in child and generate HTTP_REFERER environment
268     variable in cgi.c
269     * Minor changes to the Debian package
270    
271     ** Changes from 0.94.8 to 0.94.8.1
272     * Change umask call from (umask(0600)) to (umask(~0600))
273    
274     ** Changes from 0.94.7 to 0.94.8
275     * Fix major thinko in temp file permissions
276     * unlink temporary file immediately following creation
277     * implement maximum # of active connections at 10 less than RLIMIT_NOFILE
278     to avoid or eliminate crashes resulting from running out of
279     file descriptors
280     * Fix thinko in POST
281    
282     ** Changes from 0.94.6 to 0.94.7
283     * STDIN and STDOUT are now tied to /dev/null
284     * sets PATH_MAX to 2048 if not defined (for Hurd)
285     * core dumps (should never happen) would be located in /tmp
286     * alter behavior when select gets a EBADF
287     * add translation for the \" char -> &quot;
288     * remove use of sys_errlist. Use perror.
289     * better makedist.sh (still a stupid program though)
290    
291     ** Changes from 0.94.5 to 0.94.6
292     * Removed doc++ commenting
293     * Removed erroneous debugging statments
294     * Move some stuff out of config.c (read_config_file) to boa.c
295     * Altered some of fixup_server_root()
296     * Bug fix in get.c re: automatic gunzip
297     * Added some stubs for chroot code (*not* ready yet)
298    
299     ** Changes from 0.94.4 to 0.94.5
300     * Alteration of most of the comments and such for doc++ use
301     * Fixed buffer overflow in alias.c
302     * Fixed buffer underflow in util.c
303    
304     ** Changes from 0.94.3 to 0.94.4
305     * Better escaping of data to user, both for HTTP headers and HTML body
306     * Proper escaping of output in CGI example perl scripts
307    
308     ** Changes from 0.94.0 to 0.94.2
309     * Fixed obnoxious pipeline bug
310     * Fixed (sorta) a compilation/core bug for *BSD systems
311     Original code by Thomas Neumann
312     * Moved to GPLv2
313     * Changed manpage to section 8
314     * boa.sgml now references a .png file instead of evil .gif
315    
316     ** Changes from 0.93.19.2 to 0.94.0
317     * Added UseGMT to the configuration parser
318     * util.c commonlog now logs in Apache-style commonlog time format
319     * Remove SO_SNDBUF on-start message
320    
321     ** Changes from 0.93.19 to 0.93.19.2
322     * Changed to combined log (from NCSA access_log format) ala Drew Streib
323     * Altered POST cgi code to handle bug in Netscape
324     * SO_SNDBUF changes by Larry
325    
326     ** Changes from 0.93.17.2 to 0.93.19 (all 0.93.18.x changes inclusive)
327     * Update of some copyright statements for 99
328     * Replacement of sprintf with strlen/memcpy or strcpy/strcat
329     wherever possible
330     * Significant rearrangement in alias.c, minor functional differences
331     (some CGI environment variables handled differently)
332     * Removal of die function. Replace with log_err_mesg and exit.
333     * initial IPv6 stubs and support
334     * Move #include "config.h" to top of boa.h where it will do some good
335     * Stubs and functions for strstr and strdup
336     * Seperation of buffer code into it's own file
337     * Significant changes to cgi.c et al (cgi_header.c, etc...)
338     * Speed patches by removal of "extra" calls to time(): Use global variable!
339     * pipelining changes... it works now.
340     * require content-length from clients (ala rfc1945)
341     * alter body_read and body_write to work more efficiently with known content-length
342     * move read(2) part to *after* parsing...
343     * added support for additional header message in send_redirect_temp
344     * change use of NO_ZERO_FILL_LENGTH to offsetof() use
345     * Remove SO_REUSEADDR setting on each client socket, Paul Saab
346     * Avoid SO_SNDBUF setting if possible
347     * Large quantities of otherwise not-insignificant changes
348    
349     ** Changes from 0.93.17.2 to 0.93.17.3
350     * Put on-the-fly directories back in, stripped down from the 0.92 version
351     * Fixed DocumentRoot, ServerAdmin and ServerName null-value handling in
352     CGI environment generation
353     * Fixed argument order in Script* directives (bug introduced in 0.93.17.2)
354     * Got rid of MAX_CGI_VARS because it was not being used consistently, or
355     for that matter, at all, really.
356     * Added some more FASCIST_LOGGING to cgi.c
357     * Minor mmap patch by LRD for request.c
358    
359     ** Changes from 0.93.17.1 to 0.93.17.2
360     * Added "Listen" directive for server bind address, as most recently
361     suggested by David N. Welton
362     * Put virtualhost feature in, was experimental in 0.92q
363    
364     ** Changes from 0.93.16.2 to 0.93.17.1
365     * New config file parser (supposed to be more maintainable) (LRD)
366     * Support for "|command" and ":host:port" syntax for logfiles (untested) (LRD)
367    
368     ** Changes for the 0.93 version **
369     * Huge quantities of changes
370     * keepalive Bugfix in 0.93.16.2 by Jon Nelson
371     report by Craig Silverstein of Google fame.
372     * patch for config.h by Craig Silverstein
373     * fixed "Parent Directory" problem in boa_indexer for title "/"
374     (Debian bug #36165)
375     * More Craig Silverstein
376     modifications, namely:
377     ErrorLog (if omitted, print to stderr)
378     DocumentRoot (if omitted, can only server user-dir files)
379     DirectoryIndex (if omitted, always use DirectoryMaker)
380     MimeTypes (if omitted, don't load -- users can use AddType instead)
381    
382    
383     ** Changes from v0.92o to v0.92p **
384    
385     * Documented misbehavior of CGI, SIGHUP, short aliases, stale dircache.
386     * Documented how to patch signals.c for use on SunOS.
387     * Closed file descriptor leak when redirecting a bare directory URL to
388     one with an appended "/".
389     * Closed potential file descriptor leak if errors encountered generating
390     on-the-fly index.
391     * Cleaned up include file handling to be simultaneously compatible with
392     Linux, SunOS, HP-UX, and AIX.
393     * Supress message body for codes 302, 400, 403, 404, 500, and 501 if
394     incoming request is "HEAD".
395    
396     ** Changes from v0.91 to v0.92o **
397     (0.92o released 27 December, 1996)
398    
399     * Maintenance handover from Paul Phillips to Larry Doolittle
400     * Changed (char)NULL to '\0'
401     * Cleaned up signal handler prototypes in signals.c
402     * Modified handling of CGI environment variable PATH_TRANSLATED,
403     should now work the same as NCSA.
404     * More conservative buffer size in add_cgi_env()
405     * Build argv list for a CGI script according to spec
406     * Speedup process_header_line, eliminate potential memory leak
407     * Occasional spelling fixes and lint removal
408     * Added REMOTE_PORT env var for CGI scripts, to allow easy ident lookups
409     * Changed rfc822 time format
410     * Log timeouts and broken connections
411     * Fix mime suffix handling for filenames with multiple "."s
412     * Initialize conn->time_last, fixes bug with rapid-fire connections
413     * Performance tweak to req_write()
414     * Changed http_version from float to char[8]
415     * Rewrote on-the-fly directory generation; it works now
416     * Added user configurable dircache directory in boa.conf
417     * Fixed "simple" response bugs, including incorrect CGI handling
418     * Keepalive (HTTP/1.1 draft) support, mostly by Jon Nelson
419     * Close data_fd in 304 Not Modified flow of control
420     * Switch socket flags to non-blocking before cgi handoff
421     * Try to handle errno properly in the face of multiple errors
422     * Close fd's of all other transactions before cgi handoff
423     * Move real work for sighup and sigchld out of signal handler
424     * Fix free(req->cgi_env) in request.c
425     * Response message cleanup - better match to HTML-2.0 DTD
426     * Experimental Virtual Host code from Russ Nelson
427     * Expand buffer for escaped URI in init_get()
428     * SIGTERM triggers lame duck mode until all pending transactions complete
429     * Close and unlink temp file for POST in parent process
430    
431     ** Changes from v0.90 to v0.91 **
432    
433     * Cleaned up main while loop
434     * Optimized request line parsing
435     * Added state machine for header reads -- necessary to deal wtih
436     possibility of obtaining header data in multiple reads. This
437     also allows interactive use of server.
438     * Added 500/501 return codes for various conditions
439    
440     ** v0.90 **
441    
442     * Initial release
443    

webmaster@linux.gr
ViewVC Help
Powered by ViewVC 1.1.26