Update www/lighttpd to 1.4.18. Changes from 1.4.16 include:

  * fixed forwarding a SIGINT and SIGHUP when using max-workers (#902)
--> fixed FastCGI header overrun in mod_fastcgi
  * fixed hanging redirects with keep-alive due to missing
    "Content-Length: 0" headers
  * fixed crashing when using undefined environment variables in the config
  * added dir-listing.set-footer in mod_dirlisting (#1277)
  * added sending UID and PID for SIGTERM and SIGINT to the logs
  * fixed compression of files < 128 bytes by disabling compression (#1241)
  * fixed mysql server reconnects (#518)
  * fixed disabled keep-alive for dynamic content with HTTP/1.0 (#1166)
  * fixed crash on mixed EOL sequences in mod_cgi
  * fixed key compare (#1287)
  * fixed invalid char in header values (#1286)
  * fixed invalid "304 Not Modified" on broken timestamps
--> fixed endless loop on shrinked files with sendfile() on BSD (#1289)
--> fixed counter overrun in ?auto in mod_status (#909)
  * fixed too aggresive caching of nested conditionals (#41)
--> fixed possible overflow in unix-socket path checks on BSD (#713)
  * fixed extra Content-Length header on 1xx, 204 and 304 (#1002)
  * fixed handling of duplicate If-Modified-Since to return 304
  * fixed extracting status code from NPH scripts (#1125)
  * removed config-check if passwd files exist (#1188)
  * fixed crash when etags are disabled but the client sends one (#1322)
  * fixed crash when freeing the config in mod_alias
  * fixed server.error-handler-404 breakage from 1.4.16 (#1270)
  * fixed entering 404-handler from dynamic content (#948)
  * added more debug infos for FAM based stat-cache

The highlighted changes are security vulnerabilities that are fixed in
this release.

3 files changed, 48 insertions, 0 deletions

diff --git a/www/lighttpd/patches/patch-aa b/www/lighttpd/patches/patch-aa
new file mode 100644
index 00000000000..d65abea1613
--- /dev/null
+++ b/www/lighttpd/patches/patch-aa
@@ -0,0 +1,15 @@
+$NetBSD: patch-aa,v 1.7 2007/09/10 13:59:50 jlam Exp $
+
+--- configure.orig	Sun Sep  9 19:55:31 2007
++++ configure
+@@ -28161,10 +28161,6 @@ fi
+ 
+ 
+ 
+-if test "${GCC}" = "yes"; then
+-       CFLAGS="${CFLAGS} -Wall -W -Wshadow -pedantic -std=gnu99"
+-fi
+-
+ LIGHTTPD_VERSION_ID=`echo $PACKAGE_VERSION | $AWK -F '.' '{print "(" $1 " << 16 | " $2 " << 8 | " $3 ")"}'`
+ 
+ cat >>confdefs.h <<_ACEOF
diff --git a/www/lighttpd/patches/patch-ab b/www/lighttpd/patches/patch-ab
new file mode 100644
index 00000000000..19e7c0f8874
--- /dev/null
+++ b/www/lighttpd/patches/patch-ab
@@ -0,0 +1,12 @@
+$NetBSD: patch-ab,v 1.4 2007/09/10 13:59:51 jlam Exp $
+
+--- src/mod_extforward.c.orig	Sat Aug 18 09:43:35 2007
++++ src/mod_extforward.c
+@@ -6,6 +6,7 @@
+ #include <stdlib.h>
+ #include <string.h>
+ #include <stdio.h>
++#include <sys/types.h>
+ #include <netinet/in.h>
+ 
+ #include "base.h"
diff --git a/www/lighttpd/patches/patch-ac b/www/lighttpd/patches/patch-ac
new file mode 100644
index 00000000000..61154bd437b
--- /dev/null
+++ b/www/lighttpd/patches/patch-ac
@@ -0,0 +1,21 @@
+$NetBSD: patch-ac,v 1.3 2007/09/10 13:59:51 jlam Exp $
+
+--- src/etag.c.orig	Mon Aug 27 21:54:45 2007
++++ src/etag.c
+@@ -1,5 +1,15 @@
++#ifdef HAVE_CONFIG_H
++# include "config.h"
++#endif
++
+ #include <string.h>
+-#include <stdint.h>
++
++#ifdef HAVE_STDINT_H
++# include <stdint.h>
++#endif
++#ifdef HAVE_INTTYPES_H
++# include <inttypes.h>
++#endif
+ 
+ #include "buffer.h"
+ #include "etag.h"