summaryrefslogtreecommitdiff
path: root/www/bozohttpd/patches/patch-bozohttpd.c
AgeCommit message (Collapse)AuthorFilesLines
2018-11-23update to bozohttpd 20181123. changes include:mrg1-17/+0
o add url remap support via .bzremap file, from martin@netbsd.org o handle redirections for any protocol, not just http: o fix a denial of service attack against header contents, which is now bounded at 16KiB. reported by JP o reduce default timeouts, and add expand timeouts to handle the initial line, each header, and the total time spent o add -T option to expose new timeout settings o minor RFC fixes related to timeout handling o fix special file (.htpasswd, .bz*) bypass. reported by JP. anyone using .htpasswd files should update ASAP.
2017-02-05Adjust SERVER_SOFTWARE to intended versionleot1-0/+17
Bump PKGREVISION Requested by <mrg>
2016-04-15update bozohttpd to 20160415. changes include:mrg1-19/+0
o add search-word support for CGI o fix a security issue in CGI suffix handler support which would allow remote code execution, from shm@netbsd.org o -C option supports now CGI scripts only o add CGI support for ~user translation (-E switch) o add redirects to ~user translation o fix bugs around ~user translation o add schema detection for absolute redirects o fixed few memory leaks o bunch of minor tweaks o removed -r support o smarter redirects
2015-10-17fix patch to use strlen instead of d_reclen which is the length of the wholerichard1-6/+8
allocated structure including padding. Thanks joerg@.
2015-10-16SunOS doesn't define d_namlen element of dirent structurerichard1-0/+17
but uses d_reclen instead, so define an alias.