/[hydra]/hydra/ChangeLog
ViewVC logotype

Contents of /hydra/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.37 - (show annotations)
Wed Oct 16 08:50:49 2002 UTC (21 years, 5 months ago) by nmav
Branch: MAIN
Changes since 1.36: +1 -0 lines
*** empty log message ***

1 ** Changes from 0.0.7 to 0.0.8
2 * Better pthread detection.
3 * Some changes to compile in gcc 2.95
4
5 ** Changes from 0.0.6 to 0.0.7 - 10/10/2002
6 * Added support for large files in 32 bit systems.
7 * Added support for SSL_* variables in CGIs.
8 * Added options in configuration file, to request and verify
9 a client certificate.
10 * The headers of HIC-CGIs are now parsed by the server.
11 * Corrected behavour in SIGHUP signal handling, to reread
12 the SSL related variables.
13 * Children and HIC threads are now killed using a signal, to avoid
14 unexpected errors, and memory leaks.
15
16 ** Changes from 0.0.5 to 0.0.6 - 03/10/2002
17 * Compatibility functions are now automatically included in hydra, if
18 they are not found by the configure script.
19 * Replaced the included scandir function, with the one in libc.
20 * Fixed code, which compiled fine with gcc 3.2, but didn't compile at
21 all, with any other compiler!
22 * Improved the MaxConnections directive semantics.
23 * Added a very primitive mime.types file in examples/ directory.
24
25 ** Changes from 0.0.4 to 0.0.5 - 02/10/2002
26 * If a requested CGI is not accesible then send 404 not found, instead
27 of trying to execute it.
28 * Corrected several stuff in HIC CGI handler. This allows Cookies,
29 POST data and Queries to work properly.
30
31 ** Changes from 0.0.3 to 0.0.4 - 30/09/2002
32 * Added support for If-Range, If-Match, If-None-Match HTTP/1.1 header
33 fields. The server also generates ETag headers for static content using
34 the last modified field of the file, and the file size. This makes
35 Hydra cache friendly.
36 * Added support for multiple HIC threads. This gives a boost to script generation
37 since they are no longer generated sequentially.
38
39 ** Changes from 0.0.2 to 0.0.3 - 28/09/2002
40 * Added support for dynamic modules that handle CGIs
41 internally (HIC). That way Hydra can run PHP.
42 * Fixes in CGI execution. CGIs that are not passed from aliasing
43 functions now properly set PATH_INFO and PATH_TRANSLATED.
44 (Needs further cleanup).
45 * Cleaned up SSL support. Now hydra can be compiled even if gnutls
46 is not available.
47
48 ** Changes from Boa/0.94.13 to Hydra/0.0.2 - 26/09/2002
49 * Added support for SSL 3.0 and TLS 1.0 protocols.
50 * Added support for multiple CPU's by making the server
51 run over a pool of threads.
52 * Changed the file caching code. The mmap() calls are cached until
53 the mmap list table is full.
54 * Added support for HTTP/1.1 ranges.
55 * Added support for hostname based virtual hosting.
56 Also changed the semantics of Alias, ScriptAlias and Redirect, to
57 take advantage of the host based virtual hosting.
58 * Added support for the TCP_CORK tcp option in linux.
59 * Cleaned up the CGI handling (gunzip, indexer are treated as CGIs)
60 * Enhanced grammar to handle 3 and 4 argument options.
61 * Added support for multiple directory indexes.
62 * Dropped support for gunzip.
63 * Use automake to create the distribution.
64
65 ** Changes from 0.94.12 to 0.94.13
66 * Change many instances of log_error_mesg + exit to DIE macro
67 * Change all instance of log_error_mesg (without exit) to WARN macro
68 * do a much better job of checking return values from malloc and
69 especially strdup.
70 * check results of calling umask and getrlimit
71 * server_s is no longer a global int
72 * check results of fork via switch instead of if (fork())
73 * check for getopt.h and include it if found
74 * remove unused #defines, and add WARN macro, and replace
75 many calls to log_error_mesg(..) with WARN macro
76 * fix bug in get_commonlog_time where time_offset calculation was
77 the opposite of what it should be ('-' and '+' were swapped)
78 * fix compatability bug with old and newer versions of flex/yacc
79 * add check for AC_FUNC_MMAP to configure.in
80 * fix really lame thinko in normalize_path, which would prepend the
81 results of earlier calls to results from later calls
82 * Add MaxConnections, a configuration directive which allows the
83 user to specify the maximum number of connections that Boa will
84 accept concurrently.
85 * add SERVER_ADDR and REQUEST_URI to environment of CGI
86 * handle SIGBUS during writes of data that has been memory mapped
87 * minor optimization in select.c that prevents DEAD requests from
88 being added to the block set
89 * fix bug in CGI environment script_name - closes sf.net bug #576725
90 * make 'status' variable local to requests.c, not local to every file
91 by forgetting to declare 'extern' in globals.h :-|
92 * make getsockname non-fatal, and do it every time because we may
93 need it for the CGI
94 * some minor refactoring optimizations in hash.c
95
96 ** Changes from 0.94.11 to 0.94.12
97 * Renamed Changelog ChangeLog, and moved up to top-level directory
98 * Next 3 items due in part or whole thanks to
99 Liam Widdowson
100 * when printf'ing a pid type, force to int, because it could be
101 something else on other platforms. Should probably change it to
102 a long, and use that.
103 * backported chroot commandline support from 0.95
104 * backported support for strdup, strstr, alphasort, and scandir
105 from 0.95
106 * Fixed src/Makefile.in -- it didn't remove index_dir.o
107 * backport create_temporary_file from 0.95
108 (instead of using tmpnam)
109 * Allow non-standard date format 31 September 2000 23:59:59 GMT
110 Patch by Landon Curt Noll
111 * Skip whitespace before HTTP/major.minor
112 Adapted patch from Landon Curt Noll
113 * open /dev/null first thing (affects chrooting)
114 * properly handle sigalrm -- use sigalrm_flag and sigalrm_run
115 instead of handling the signal in the signal handler
116 * update manpage slightly
117 * send 400 BAD Request when resource does not start with '/'
118 * add grp.h to boa.h's includes -- remove from boa.c and config.c
119 * removed duplicate header includes from boa.c, config.c, get.c,
120 ip.c, request.c, response.c
121 * factor out creating the server socket and dropping privs
122 into create_server_socket and drop_privs
123 * type all functions in boa.c (except main) as static
124 * set umask after opening /dev/null
125 * tie stdin/stdout to /dev/null before commandline parse
126 * removed old, unused chroot code
127 * move builds_needs_escape earlier in the startup
128 * move fork later in the startup
129 * type all c_set_* as static in config.c
130 * don't bother trying to change uid/gid (or error if the
131 requested uid/gid doesn't exist) if not UID 0
132 * return more appropriate error code when foo.html gives
133 access denied, but foo.html.gz gives some other error
134 (essentially report error associated with foo.html, not foo.html.gz)
135 * send NOT Implemented when an unknown method is attempted
136 * always attempt a 32k read right before close
137 (stopgap until blackhole can be merged)
138 * allow more than 1 space in logline between method, resource,
139 and http version
140 * don't use inline functions
141 * update configure.in so that autoconf 2.50 doesn't complain (as much)
142 * properly use VPATH and srcdir according to autoconf docs
143 * change curly-braces to parentheses in Makefilein
144 * use $^ instead of manually listing the dependencies in Makefile.in
145 * remove tests section in Makefile.in
146 * write tags not TAGS in Makefile.in
147 * Add gethostbyname and inet_aton to function checks
148 * Add code from 0.95 which checks for socket in -lsocket,
149 inet_aton in -lresolv, and gethost{by}name in -lnsl
150 * Also remove broken bc-based "how big is an unsigned int" checks:
151 assume minimum of 32 bits and check in escape.c at runtime.
152 * Added new file: README.chroot.solaris, based on a
153 modified version by Liam Widdowson
154 * Add check_struct_for.m4, which allows us to check a structure
155 for a member (found at http://www.gnu.org/software/ac-archive/
156 authored by Wes Hardaker
157 * Call "aclocal -I ." to rebuild aclocal.m4
158 * Using new check-struct-for-member autoconf macro, check
159 for tm_gmtoff and tm_zone in struct tm -- useful in
160 portability tests for localtime.
161 * Also check sockaddr_in for structure sin_len so we can set
162 it properly.
163 * index_dir.c (which ends up in boa_indexer) can now be compiled
164 with USE_LOCALTIME, and if so, it will report the local time
165 using the timezone name. Otherwise it uses UTC time and UTC
166 timezone designation.
167 * fix buglet in mmap_cache.c which shows up when under
168 heavy load by many different files.
169 Found and squashed by Michal Kara
170 * normalize paths on Aliases, log files, server root, dirmaker
171 This makes sure that paths are 'absolute'
172 * don't generate DOCUMENT_ROOT or SERVER_ROOT,
173 CGIs have no business knowing that information
174 * if CGI, chdir to the cgi's root path
175 Bug found by Matt Callaway
176 * remove ChrootPath and PidFile directives from the parser
177 (they aren't used anyway)
178 * keep track of maximum file descriptor in use to optimize call
179 to select()
180 * apply IPv6 patch from Jari Korva
181 * optimize keep-alive copy data routine
182 * try to use memcpy instead of strcpy/strcat in more places (alias.c)
183 * update .depend file
184 * use fcntl + GET_FL to get a file descriptor's flags, then
185 add or remove only the bits we want to set. This prevents
186 accidentally setting or unsettings bits we don't have anything
187 to do with inadvertantly. (removed, at least temporarily.
188 Show me a system where it is needed -- LRD)
189 * make sure to call FD_ZERO when we handle a restart
190 * in read.c, don't call boa_perror on read failure -- socket is
191 dead or messed up anyway, no reason to try to write to it.
192 * explicit .SUFFIXES in Makefile.in
193 * boa.objdump target added
194 * use @MAKE_SET@ (for when $(MAKE) != "make")
195 * add -Wundef -Wwrite-strings -Wredundant-decls -Winline to GCC_FLAGS
196 * change Paul Phillips' and Larry Doolittle's emails in source
197 * add --disable-debug, --enable-profile, --with-dmalloc, and --with-efence
198 * test for failed-but-return-was-successful setuid:
199 http://www.securityfocus.com/bid/1322
200 * use _exit not exit in CGI child
201 * always place new keepalive request on blocked list, we can't be
202 sure of the state of the active list, and since enqueue places
203 things at the *front* of the list, it doesn't do us much good
204 to place the new request on the active list anyway.
205 * update some Copyright statements for 2002
206 * When comparing the uri to an alias, only compare if
207 the uri length is greater than or equal to the length of the alias
208 * in init_script_alias, make sure to check for document_root before
209 trying to use it
210 * script_name is now just a copy of the request, rather
211 than some complicated variation on the pathname
212 * change the way the CGI environment is handled.
213 Now, it is allocated at request allocation time, and exists
214 throughout the life of the structure.
215 * check memory allocations, etc.. when creating the static
216 CGI environment and when making new CGI environment variables
217 * wait until process_option_end to call unescape_uri, clean_pathname,
218 and translate_uri
219 * remove debian package information
220 * move RedHat packaging information to contrib
221 * remove tests -- they weren't usable anyway
222 * add some new hash routines, and use djb2 (a variant on a
223 hash algorithm popularized by Dan J. Bernstein)
224 * a side-effect of the new hash routines is a bugfix,
225 involving negative return values from hash routines.
226 This has been fixed.
227 * add a routine, show_hash_stats, which is called with other
228 statistical output via sigalarm
229 * remove some duplicate prototypes from config.c
230 * make simple_itoa take an unsigned int
231 * try to make NOBLOCK handling in compat.h compatible with Solaris
232 * make sure to update current_time before calling signal handlers
233 * alter primary loop to make sure that select gets called even
234 when there are requests that are not blocking, and call fdset_update
235 and process_requests (when appropriate) after signal handlers but
236 before select to make sure that blocked requests are still handled
237 by select after a sighup. (Thanks to Karl Olsen)
238 * pull select loop into select.c
239 * poll server socket once per active connection
240 * add send_r_service_unavailable and use it when appropriate
241 * state uptime in seconds at normal program termination
242 * include sys/fcntl.h if it is found by configure
243 * fix POST bug where a content-length < 0 would cause Boa to
244 consume its full share of CPU until killed
245 Bug report by Landon Curt Noll
246 * add CGIPath configuration variable
247 based upon a patch by Landon Curt Noll
248 * add function boa_atoi, which wraps atoi, but does not
249 accept negative values. Additionally, it checks to make sure
250 the converted value and the original value are the same, avoiding
251 issues like "124.3" -> "123" and "123abc" -=> "123".
252 Either a value is an int or it isn't - no middle ground.
253 * use boa_atoi to convert content-length from client.
254 * add new #define - SINGLE_POST_LIMIT_DEFAULT, which defines
255 (in bytes) the *default* single_post_limit.
256 * single_post_limit is now in bytes.
257 * when adding aliases, only "normalize" paths that start
258 with "./" - this is a departure from previous behavior
259 * add "?" to the list of characters that it is safe to leave unescaped
260 * clean up Makefile.in of no-longer-pertinent comments
261 * add send_r_bad_gateway and use it
262 * tie stderr to either cgi_log_fd or devnullfd - either way
263 make sure stderr is a valid filehandle before cgi execution
264 * cgi_env is no longer allocated, it's part of the struct now
265 * fix bug in CgiPath logic
266 * when unable to allocate memory for an environment variable, log it
267 * add clear_common_env, which de-allocates the cgi_common_env stuff
268 [NEVER USE THIS outside of a terminal signal handler!]
269 * don't be so wasteful of memory in normalize_path
270 * adapted fix for alias expansion from Brieuc Jeunhomme
271
272 ** Changes from 0.94.10.1 to 0.94.11
273 * use LIBS in Makefile.in (which propagates from autoconf)
274 * properly free memory allocated by scandir in index_dir.c
275 * rearrange some header files and includes
276 * on reads and writes, don't check for -1, check for < 0
277 * include fix by William Meadows
278 for escape.c which fixes segfaults due to improper allocation
279 * above fix by William Meadows no longer needed;
280 escape.c and escape.h rewritten by Larry Doolittle -- requires
281 at least 32 bit words, but is correct (jdn's 1st attempt was faulty)
282
283 ** Changes from 0.94.10 to 0.94.10.1
284 * Actually update the SERVER_VERSION in src/defines.h
285
286 ** Changes from 0.94.9 to 0.94.10
287 * Fixes escaping rules
288 * Fixes segfault when directory_index is undefined and
289 directory needs to be generated
290 * adds dummy signal handlers for SIGUSR1 and SIGUSR2 (Closes SF #425921)
291 * Update documentation regarding mime.types (Closes Debian #69991)
292 * Make sure documentation builds (Closes Debian #110818)
293
294 ** Changes from 0.94.8.3 to 0.94.9
295 * src/Makefile.in updated to take CFLAGS, LIBS, and LDFLAGS
296 from autoconf
297 * Update escaping rules with latest RFC
298 * unescape_uri skips fragments and also stop parsing at '?'
299 * Don't accept fd over FD_SETSIZE in request.c:get_request
300 * use backported documentation from 0.95
301 * make sure POST fd gets closed even on client cancel
302 * use backported index_dir.c from 0.95
303 * support subdirectories in ScriptAlias directories
304 * add SinglePostLimit (int, in Kilobytes) to config system
305 * check for ENOSPC on body write
306 * use environment variable TMP (or "/tmp" if not available),
307 and chdir there when boa exits.
308 * add 1-time-only hack to make a 32kB read at the end of a request
309 on POST or PUT
310 * close unused file descriptors (/dev/null in boa.c, and the
311 unused part of the pipes call in cgi.c)
312 * made Makefile.in VPATH happy
313
314 ** Changes from 0.94.8.2 to 0.94.8.3
315 * Move unescape_uri *before* clean_pathname to prevent
316 encoding of / and .. in pathname
317 * wrap execution of GUNZIP in cgi.c with #ifdef GUNZIP
318 * stop parsing when fragment found in URL ('#')
319
320 ** Changes from 0.94.8.1 to 0.94.8.2
321 * close pipes[1] in child and generate HTTP_REFERER environment
322 variable in cgi.c
323 * Minor changes to the Debian package
324
325 ** Changes from 0.94.8 to 0.94.8.1
326 * Change umask call from (umask(0600)) to (umask(~0600))
327
328 ** Changes from 0.94.7 to 0.94.8
329 * Fix major thinko in temp file permissions
330 * unlink temporary file immediately following creation
331 * implement maximum # of active connections at 10 less than RLIMIT_NOFILE
332 to avoid or eliminate crashes resulting from running out of
333 file descriptors
334 * Fix thinko in POST
335
336 ** Changes from 0.94.6 to 0.94.7
337 * STDIN and STDOUT are now tied to /dev/null
338 * sets PATH_MAX to 2048 if not defined (for Hurd)
339 * core dumps (should never happen) would be located in /tmp
340 * alter behavior when select gets a EBADF
341 * add translation for the \" char -> &quot;
342 * remove use of sys_errlist. Use perror.
343 * better makedist.sh (still a stupid program though)
344
345 ** Changes from 0.94.5 to 0.94.6
346 * Removed doc++ commenting
347 * Removed erroneous debugging statments
348 * Move some stuff out of config.c (read_config_file) to boa.c
349 * Altered some of fixup_server_root()
350 * Bug fix in get.c re: automatic gunzip
351 * Added some stubs for chroot code (*not* ready yet)
352
353 ** Changes from 0.94.4 to 0.94.5
354 * Alteration of most of the comments and such for doc++ use
355 * Fixed buffer overflow in alias.c
356 * Fixed buffer underflow in util.c
357
358 ** Changes from 0.94.3 to 0.94.4
359 * Better escaping of data to user, both for HTTP headers and HTML body
360 * Proper escaping of output in CGI example perl scripts
361
362 ** Changes from 0.94.0 to 0.94.2
363 * Fixed obnoxious pipeline bug
364 * Fixed (sorta) a compilation/core bug for *BSD systems
365 Original code by Thomas Neumann
366 * Moved to GPLv2
367 * Changed manpage to section 8
368 * boa.sgml now references a .png file instead of evil .gif
369
370 ** Changes from 0.93.19.2 to 0.94.0
371 * Added UseGMT to the configuration parser
372 * util.c commonlog now logs in Apache-style commonlog time format
373 * Remove SO_SNDBUF on-start message
374
375 ** Changes from 0.93.19 to 0.93.19.2
376 * Changed to combined log (from NCSA access_log format) ala Drew Streib
377 * Altered POST cgi code to handle bug in Netscape
378 * SO_SNDBUF changes by Larry
379
380 ** Changes from 0.93.17.2 to 0.93.19 (all 0.93.18.x changes inclusive)
381 * Update of some copyright statements for 99
382 * Replacement of sprintf with strlen/memcpy or strcpy/strcat
383 wherever possible
384 * Significant rearrangement in alias.c, minor functional differences
385 (some CGI environment variables handled differently)
386 * Removal of die function. Replace with log_err_mesg and exit.
387 * initial IPv6 stubs and support
388 * Move #include "config.h" to top of boa.h where it will do some good
389 * Stubs and functions for strstr and strdup
390 * Seperation of buffer code into it's own file
391 * Significant changes to cgi.c et al (cgi_header.c, etc...)
392 * Speed patches by removal of "extra" calls to time(): Use global variable!
393 * pipelining changes... it works now.
394 * require content-length from clients (ala rfc1945)
395 * alter body_read and body_write to work more efficiently with known content-length
396 * move read(2) part to *after* parsing...
397 * added support for additional header message in send_redirect_temp
398 * change use of NO_ZERO_FILL_LENGTH to offsetof() use
399 * Remove SO_REUSEADDR setting on each client socket, Paul Saab
400 * Avoid SO_SNDBUF setting if possible
401 * Large quantities of otherwise not-insignificant changes
402
403 ** Changes from 0.93.17.2 to 0.93.17.3
404 * Put on-the-fly directories back in, stripped down from the 0.92 version
405 * Fixed DocumentRoot, ServerAdmin and ServerName null-value handling in
406 CGI environment generation
407 * Fixed argument order in Script* directives (bug introduced in 0.93.17.2)
408 * Got rid of MAX_CGI_VARS because it was not being used consistently, or
409 for that matter, at all, really.
410 * Added some more FASCIST_LOGGING to cgi.c
411 * Minor mmap patch by LRD for request.c
412
413 ** Changes from 0.93.17.1 to 0.93.17.2
414 * Added "Listen" directive for server bind address, as most recently
415 suggested by David N. Welton
416 * Put virtualhost feature in, was experimental in 0.92q
417
418 ** Changes from 0.93.16.2 to 0.93.17.1
419 * New config file parser (supposed to be more maintainable) (LRD)
420 * Support for "|command" and ":host:port" syntax for logfiles (untested) (LRD)
421
422 ** Changes for the 0.93 version **
423 * Huge quantities of changes
424 * keepalive Bugfix in 0.93.16.2 by Jon Nelson
425 report by Craig Silverstein of Google fame.
426 * patch for config.h by Craig Silverstein
427 * fixed "Parent Directory" problem in boa_indexer for title "/"
428 (Debian bug #36165)
429 * More Craig Silverstein
430 modifications, namely:
431 ErrorLog (if omitted, print to stderr)
432 DocumentRoot (if omitted, can only server user-dir files)
433 DirectoryIndex (if omitted, always use DirectoryMaker)
434 MimeTypes (if omitted, don't load -- users can use AddType instead)
435
436
437 ** Changes from v0.92o to v0.92p **
438
439 * Documented misbehavior of CGI, SIGHUP, short aliases, stale dircache.
440 * Documented how to patch signals.c for use on SunOS.
441 * Closed file descriptor leak when redirecting a bare directory URL to
442 one with an appended "/".
443 * Closed potential file descriptor leak if errors encountered generating
444 on-the-fly index.
445 * Cleaned up include file handling to be simultaneously compatible with
446 Linux, SunOS, HP-UX, and AIX.
447 * Supress message body for codes 302, 400, 403, 404, 500, and 501 if
448 incoming request is "HEAD".
449
450 ** Changes from v0.91 to v0.92o **
451 (0.92o released 27 December, 1996)
452
453 * Maintenance handover from Paul Phillips to Larry Doolittle
454 * Changed (char)NULL to '\0'
455 * Cleaned up signal handler prototypes in signals.c
456 * Modified handling of CGI environment variable PATH_TRANSLATED,
457 should now work the same as NCSA.
458 * More conservative buffer size in add_cgi_env()
459 * Build argv list for a CGI script according to spec
460 * Speedup process_header_line, eliminate potential memory leak
461 * Occasional spelling fixes and lint removal
462 * Added REMOTE_PORT env var for CGI scripts, to allow easy ident lookups
463 * Changed rfc822 time format
464 * Log timeouts and broken connections
465 * Fix mime suffix handling for filenames with multiple "."s
466 * Initialize conn->time_last, fixes bug with rapid-fire connections
467 * Performance tweak to req_write()
468 * Changed http_version from float to char[8]
469 * Rewrote on-the-fly directory generation; it works now
470 * Added user configurable dircache directory in boa.conf
471 * Fixed "simple" response bugs, including incorrect CGI handling
472 * Keepalive (HTTP/1.1 draft) support, mostly by Jon Nelson
473 * Close data_fd in 304 Not Modified flow of control
474 * Switch socket flags to non-blocking before cgi handoff
475 * Try to handle errno properly in the face of multiple errors
476 * Close fd's of all other transactions before cgi handoff
477 * Move real work for sighup and sigchld out of signal handler
478 * Fix free(req->cgi_env) in request.c
479 * Response message cleanup - better match to HTML-2.0 DTD
480 * Experimental Virtual Host code from Russ Nelson
481 * Expand buffer for escaped URI in init_get()
482 * SIGTERM triggers lame duck mode until all pending transactions complete
483 * Close and unlink temp file for POST in parent process
484
485 ** Changes from v0.90 to v0.91 **
486
487 * Cleaned up main while loop
488 * Optimized request line parsing
489 * Added state machine for header reads -- necessary to deal wtih
490 possibility of obtaining header data in multiple reads. This
491 also allows interactive use of server.
492 * Added 500/501 return codes for various conditions
493
494 ** v0.90 **
495
496 * Initial release
497

webmaster@linux.gr
ViewVC Help
Powered by ViewVC 1.1.26