Log

Author Commit Date CI Message
icy17 6f9f2f3a 2024-04-10T17:25:54 test/test-changelist.c: fix potential NULL pointer dereference
Azat Khuzhin 66428fb9 2024-07-08T10:15:29 test-closed: fix -Werror=maybe-uninitialized Follow-up for: https://github.com/libevent/libevent/pull/1680
Cœur 272bd7dd 2024-07-08T10:13:08 Fix potential Null pointer dereference in test-closed.c (#1680) * Fix potential Null pointer dereference in test-closed.c * add err path * code review: goto err after evutil_socketpair failure * code review: goto err for event_config_new failure --------- Co-authored-by: icy17 <1061499390@qq.com>
Cœur 49d6b4b0 2024-07-08T10:10:42 samples: use evutil_socket_t instead and handle 64 bit Windows (#1682) * Use evutil_socket_t instead in http server sample and handle 64 bit Windows * Update http-server.c * consistently using EV_SOCK_FMT for Windows compatibility * code review: fix missing symbol strsignal * Add evutil_strsignal() helper instead of strsignal() macro --------- Co-authored-by: Hernan Martinez <hernan.c.martinez@gmail.com> Co-authored-by: Azat Khuzhin <azat@libevent.org>
Cœur 2bc831c8 2024-07-08T10:08:58 Fix potential Null pointer dereference in test-time.c (#1681) * Fix potential Null pointer dereference in test-time.c * add err path * code review: free events before base --------- Co-authored-by: icy17 <1061499390@qq.com>
Azat Khuzhin 0bbaee61 2024-07-06T09:13:41 Disable persist-credentials for actions/checkout to improve security
Azat Khuzhin 7331c66b 2024-07-06T08:59:19 ci: limit artifacts Refs: https://github.com/libevent/libevent/security/advisories/GHSA-f4cg-pcr2-495m
dependabot[bot] 7c20c219 2024-07-01T14:07:35 Bump github/codeql-action in the github-actions group Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 3.25.10 to 3.25.11 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/23acc5c183826b7a8a97bce3cecc52db901f8251...b611370bb5703a7efb587f9d136a52ea24c5c38c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
Andy Pan 96c259f1 2024-06-26T12:10:00 tcpkeepalive: distinguish OS versions and use proper time units (#1669) DragonFly BSD changed the time unit for TCP keep-alive from milliseconds to seconds since v5.8 and Solaris 11.4 added `TCP_KEEPIDLE`, `TCP_KEEPINTVL`, and `TCP_KEEPCNT` with time units in second while Solaris <11.4 still use `TCP_KEEPALIVE_THRESHOLD` and `TCP_KEEPALIVE_ABORT_THRESHOLD` with time units in millisecond. Currently, we don't differentiate among DragonFly BSD versions but set the keepalive options with seconds, which will result in unexpected behaviors on DragonFlyBSD <5.8. This PR intends to fix the wrong usage of time units of TCP keepalive options on DragonFly BSD <5.8 and consolidate the logic of time units conversion for TCP keepalive across platforms. In addition, this PR introduces a new custom macro for determining Solaris 11.4. This macro is expected to help us implement some new features for `libuv` using some abilities that only exist on Solaris 11.4 and other mainstream platforms in the future, considering that Oracle developed and released Solaris 11.4 to replenish plenty of features on Solaris that have already been implemented on other UNIX-like OSs but missing from Solaris <11.4, also bring a good deal of new features. ### References - [Change tcp keepalive options from ms to seconds (DISRUPTIVE)](https://lists.dragonflybsd.org/pipermail/commits/2019-July/719125.html) - [DragonFly BSD 5.8 release notes](https://www.dragonflybsd.org/release58/) - [DragonFly TCP](https://man.dragonflybsd.org/?command=tcp&section=4) - [Solaris 11.3 TCP](https://docs.oracle.com/cd/E86824_01/html/E54777/tcp-7p.html) - [Solaris 11.4 TCP](https://docs.oracle.com/cd/E88353_01/html/E37851/tcp-4p.html) - [Solaris 11.4 release notes](https://docs.oracle.com/cd/E37838_01/html/E60973/) Signed-off-by: Andy Pan <i@andypan.me>
dependabot[bot] 90b9520f 2024-06-23T19:20:02 Bump the github-actions group across 1 directory with 3 updates Bumps the github-actions group with 3 updates in the / directory: [coverallsapp/github-action](https://github.com/coverallsapp/github-action), [ossf/scorecard-action](https://github.com/ossf/scorecard-action) and [github/codeql-action](https://github.com/github/codeql-action). Updates `coverallsapp/github-action` from 2.2.3 to 2.3.0 - [Release notes](https://github.com/coverallsapp/github-action/releases) - [Commits](https://github.com/coverallsapp/github-action/compare/3dfc5567390f6fa9267c0ee9c251e4c8c3f18949...643bc377ffa44ace6394b2b5d0d3950076de9f63) Updates `ossf/scorecard-action` from 2.3.1 to 2.3.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/0864cf19026789058feabb7e87baa5f140aac736...dc50aa9510b46c811795eb24b2f1ba02a914e534) Updates `github/codeql-action` from 3.25.3 to 3.25.10 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/d39d31e687223d841ef683f52467bd88e9b21c14...23acc5c183826b7a8a97bce3cecc52db901f8251) --- updated-dependencies: - dependency-name: coverallsapp/github-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
Cœur 78d29804 2024-06-24T15:58:46 gitignore cleanup (#1672)
Azat Khuzhin e0d53cbc 2024-06-23T21:21:22 ci: ignore lukka/run-vcpkg for updates by dependabot Follow-up for: https://github.com/libevent/libevent/pull/1657
Cœur e5181b15 2024-06-24T03:37:49 Cleanup EVENT_HAVE_ macros (#1645)
Cœur 8dd92069 2024-06-24T03:15:23 Fix potential Null pointer dereference in bench_httpclient.c (#1676) Co-authored-by: icy17 <1061499390@qq.com>
Cœur 5d830362 2024-06-24T03:12:39 Fix potential Null pointer dereference in regress_dns.c (#1675) Co-authored-by: icy17 <1061499390@qq.com>
Cœur dabf4e13 2024-06-24T03:10:56 Fix potential Null pointer dereference in ws-chat-server.c (#1674) Co-authored-by: icy17 <1061499390@qq.com>
Cœur 6d8c38af 2024-06-02T10:31:11 Reducing the number of mingw warnings
Cœur a0fc31bf 2024-06-01T18:52:39 Sort symbols to check in cmake/autotools lexicographically
Azat Khuzhin 13678f37 2024-06-02T00:53:58 gcc: fix some compiler errors from the new GCC (#1658) gcc: fix some compiler errors from the new GCC
Azat Khuzhin 3d853625 2024-06-01T18:13:52 ci: secure github.event.repository.owner.name Even though this should not be a problem, let's do this anyway. Reported-by: Francesco Garofalo
fanquake f5b61043 2024-05-20T11:53:24 test: use evutil_timerclear over timerclear
Cœur b202a72b 2024-05-24T05:31:27 temp size assert for #1632
Cœur 5fbc00a3 2024-05-23T14:53:13 event_warn mmap format
Andy Pan fef2a867 2024-05-21T11:05:23 Fix -Wcast-function-type errors --------- Signed-off-by: Andy Pan <i@andypan.me>
Andy Pan e58f1fa6 2024-05-20T09:27:52 Fix the -Wint-conversion --------- Signed-off-by: Andy Pan <i@andypan.me>
Andy Pan ee4fa05d 2024-05-19T16:10:02 Fix the compiler errors in sample/http-server.c --------- Signed-off-by: Andy Pan <i@andypan.me>
Andy Pan ceb6551f 2024-05-19T00:18:48 gcc: fix the -Wincompatible-pointer-types errors --------- Signed-off-by: Andy Pan <i@andypan.me>
Cœur 9e89a407 2024-05-24T05:33:13 Fix Windows format warning in newer Visual Studio
Hennadii Stepanov 525f5d0a 2024-05-10T20:00:37 ci: Switch `lukka/run-vcpkg` back to v7 Newer versions expect a vcpkg manifest.
Azat Khuzhin ab338ab1 2024-05-20T09:19:28 ci: fix typo in matrix
Andy Pan 7a9458c0 2024-05-20T17:17:45 Don't try to set SO_REUSEADDR and SO_REUSEPORT on Unix sockets (#1625)
Cœur 66ee086b 2024-05-06T23:32:00 Fix conversion loses precision ssize_t to int in evthread_notify_base_default()
Cœur 7afbdcf2 2024-05-06T23:31:27 Ensure that event had been removed in event_process_active_single_queue() It should not be possible, since only EVLIST_ACTIVE should be triggered from event_process_active_single_queue, but adding assert will not hurt.
Andy Pan 8976100a 2024-05-17T17:06:49 unix: fail the operation when SO_REUSEPORT has no load balancing --------- Signed-off-by: Andy Pan <i@andypan.me>
Andy Pan 832f5269 2024-05-17T16:54:22 aix: enable SO_REUSEPORT on AIX AIX 7.2.5 added the feature that would add the capability to distribute incoming connections across all listening ports. https://www.ibm.com/support/pages/how-get-better-listening-performance-multiple-listening-sockets-using-same-port-number-soreuseport --------- Signed-off-by: Andy Pan <i@andypan.me>
Andy Pan a41453ab 2024-05-09T17:34:15 Eliminate the redundant ev_uint64_t for eventfd --------- Signed-off-by: Andy Pan <i@andypan.me>
Azat Khuzhin fc9bfd21 2024-05-07T22:15:40 Merge pull request #1649 from azat/be/BSD-connect-failures Fix tests failures due to incorrect handling of ECONNREFUSED on BSD
Cœur 6d125f54 2024-05-06T15:28:48 Fix evbuffer_file_segment_new 64-bit support on Win32 (#1637) This fixes the problematic #define fstat _fstat which would only support files up to 2 GB. Also refactored it as evutil_fd_filesize to avoid exposing stat when not necessary.
Cœur af31823f 2024-05-05T16:43:23 Fix potential Null pointer dereference in bufferevent_openssl.c
Azat Khuzhin 85a0ec9b 2024-05-06T08:50:36 be: make the code in bufferevent_socket_connect() more reliable There is one icky in case for windows: if (sa) { #ifdef _WIN32 if (bufferevent_async_can_connect_(bev)) { bufferevent_setfd(bev, fd); r = bufferevent_async_connect_(bev, fd, sa, socklen); if (r < 0) goto freesock; bufev_p->connecting = 1; result = 0; goto done; - } else + } else { #endif r = evutil_socket_connect_(&fd, sa, socklen); if (r < 0) // Previosly this line was executed // regardless of bufferevent_async_can_connect_(), but the case under // bufferevent_async_can_connect_() always does goto, so it is 100% the // same code, but just to make it more cleaner goto freesock; +#ifdef _WIN32 + } +#endif }
Azat Khuzhin 3201009b 2024-05-06T08:38:53 Revert "Remove dead code from bufferevent_socket_connect" That wasn't the dead code, since the `r` could be `2` in case of `ECONNREFUSED`, and it should trigger errorcb not the writecb. This is actually questionable should be call errorcb at all in case of connect() returns an error immediately, but I guess the reason was to make it compatible with others, ECONNREFUSED can be returned only for specific cases and only on BSD (AFAIK). While for instance EHOSTUNREACH is not. And after this change now all tests are passed on FreeBSD. Well, sometimes few tests fails due to timing issues, but in general looks good. Since even all tests in parallel passed: $ rm -f /tmp/libevent*log; bin/regress --list-tests | awk '/^ / { print $1 }' | xargs -I{} -P100 bash -c 'n={}; bin/regress --no-fork --verbose $n |& tee /tmp/libevent-test-${n//\//_}.log' |& grep -F ' [FAILED' |& tee /tmp/libevent-tests.log And having green CI is crucial for libevent, not only because it is a rule of thumb for all projects, but also because in case of failures it will retry on and on, which will cause CI stuck. Fixes: bufferevent/bufferevent_connect_fail Fixes: bufferevent/bufferevent_connect_fail_eventcb Fixes: bufferevent/bufferevent_connect_fail_eventcb_defer This reverts commit 56e121310954cbee2310c5eb2a3000115186563d. Refs: https://github.com/libevent/libevent/pull/1100
Azat Khuzhin 3f7c1cba 2024-05-05T21:03:21 be: add a comment for handling ECONNREFUSED in bufferevent_readcb() Fixes: 3189eb000b6d8751223061930a019f85c284f985 ("be_sock: handle readv() returns ECONNREFUSED (freebsd 9.2)")
Azat Khuzhin c6a74ee0 2024-05-06T09:13:15 Merge branch 'test/fixes' -- more small fixes * test/fixes: test: mark http/timeout_read_server as retriable test: reset some static vars to avoid affecting other tests test: fix printing number of retries for FAILED message test: add debugging for bufferevent/bufferevent_connect_fail_eventcb* test: suppress logging for buffer/add_file_leak1
Azat Khuzhin 0f51ba66 2024-05-06T09:10:15 test: mark http/timeout_read_server as retriable
Azat Khuzhin ba97d947 2024-05-05T21:35:46 test: reset some static vars to avoid affecting other tests
Azat Khuzhin 479b5ed6 2024-05-05T21:30:01 test: fix printing number of retries for FAILED message
Azat Khuzhin d538f41f 2024-05-05T21:12:14 test: add debugging for bufferevent/bufferevent_connect_fail_eventcb*
Azat Khuzhin 2d4d1747 2024-05-05T22:15:56 test: suppress logging for buffer/add_file_leak1 Warnings from this test should be ignored: [warn] evbuffer_file_segment_materialize: mmap(5, 0, 0) failed: Invalid argument
Azat Khuzhin 6bb41ed0 2024-05-05T20:22:43 Merge branch 'test/fix-reports' * test/fix-reports: test: add proper message in case of test failure test: fix RETRYING message (add missing group prefix)
Azat Khuzhin 93a76aa2 2024-05-05T20:20:27 test: add proper message in case of test failure Right now it is impossible to understand what had been failed, but after: $ regress thread/conditions_simple thread/conditions_simple: [forking] FAIL /src/le/libevent/test/regress_thread.c:385: assert(n_signal == 0): 1 vs 0 [RETRYING thread/conditions_simple (attempts left 2, delay 1 sec)] thread/conditions_simple: [forking] FAIL /src/le/libevent/test/regress_thread.c:385: assert(n_signal == 0): 1 vs 0 [RETRYING thread/conditions_simple (attempts left 1, delay 1 sec)] thread/conditions_simple: [forking] FAIL /src/le/libevent/test/regress_thread.c:385: assert(n_signal == 0): 1 vs 0 [RETRYING thread/conditions_simple (attempts left 0, delay 1 sec)] thread/conditions_simple: [forking] FAIL /src/le/libevent/test/regress_thread.c:385: assert(n_signal == 0): 1 vs 0 [conditions_simple FAILED] [FAILED thread/conditions_simple (attempts made -1)] 1/1 TESTS FAILED. (0 skipped)
Azat Khuzhin d5745413 2024-05-05T20:15:22 test: fix RETRYING message (add missing group prefix) Before: $ regress thread/conditions_simple thread/conditions_simple: [forking] FAIL /src/le/libevent/test/regress_thread.c:385: assert(n_signal == 0): 1 vs 0 [RETRYING conditions_simple (attempts left 2, delay 1 sec)] After: $ regress thread/conditions_simple thread/conditions_simple: [forking] FAIL /src/le/libevent/test/regress_thread.c:385: assert(n_signal == 0): 1 vs 0 [RETRYING thread/conditions_simple (attempts left 2, delay 1 sec)]
Cœur 5d45f4d9 2024-05-04T18:25:17 Simplifying apple-cmake-job
Azat Khuzhin ccf4c74d 2024-05-04T12:40:36 Add ChangeLog-2.1/ChangeLog (aka 2.2) into dist package
Cœur d241fcab 2024-05-04T20:33:18 Add Privacy Manifest for App Store submissions Doc: https://developer.apple.com/documentation/bundleresources/privacy_manifest_files/describing_use_of_required_reason_api From the API list, the libevent library only uses: - mach_absolute_time, but that one is avoided with HAVE_POSIX_MONOTONIC (default) instead of HAVE_MACH_MONOTONIC - fstat and stat in evbuffer_file_segment_new, which is covered by third-party SDK usage (0A2A.1) - fstat and stat in evutil_read_file_, which is used to read the "/etc/resolv.conf" and "/etc/hosts" files, for which there are no available supporting reasons
Cœur 7ede5af6 2024-05-04T18:04:14 Updating deprecated GitHub actions (#1629) * Updating deprecated GitHub actions * code review: use commit hash for actions
dependabot[bot] ac96656c 2024-05-01T14:33:53 Bump github/codeql-action in the github-actions group Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 3.24.10 to 3.25.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/4355270be187e1b672a7a1c7c7bae5afdc1ab94a...d39d31e687223d841ef683f52467bd88e9b21c14) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
Azat Khuzhin 534da76d 2024-05-04T12:48:57 Merge pull request #1641 from Coeur/coeur/apple-cmake-job Adding apple-cmake-job for an iOS/tvOS/visionOS/watchOS build
Cœur f516e399 2024-05-04T17:42:26 Fix brew path on Apple Silicon (#1633) * Fix brew path on Apple Silicon * code review: `brew --prefix openssl` * code review: correct mbedtls path * code review: cmake does support autodetection of OPENSSL_ROOT_DIR
Cœur 3c744cee 2024-05-01T14:55:29 fix linux retrying cmake
hunterx008 0428771a 2024-05-01T23:17:54 Remove redundant condition in function:event_base_once
Cœur 71108830 2024-05-02T13:16:04 using xcode-version: latest-stable for xros support
Cœur b7fb04e8 2024-05-02T12:57:55 Adding apple-cmake-job for an iOS/tvOS/watchOS build
Cœur eec47a67 2024-04-30T15:59:58 Fix typos (#1634)
icy17 64decd48 2024-04-29T13:51:22 Fix potential Null pointer dereference in dns-example.c (#1601)
icy17 a584efaa 2024-04-22T14:47:34 Fix potential Null pointer dereference in time-test.c
Andy Pan aef201a9 2024-04-29T13:35:33 Change ident for EVFILT_USER to 0 and add a test (#1582) Conventionally, ident for EVFILT_USER is set to 0 to avoid collision of file descriptors, which is what other renowned networking frameworks like netty(java), mio(rust), gnet(go), swift-nio(swift), etc. do currently. Co-authored-by: Azat Khuzhin <azat@libevent.org>
Andy Pan cbbf209c 2024-04-29T13:31:34 Support SO_REUSEPORT on FreeBSD, DragonFly and Solaris (#1624) ## References - [The SO_REUSEPORT socket option on Linux](https://lwn.net/Articles/542629/) - [DragonFly Release 3.6](https://www.dragonflybsd.org/release36/) - [FreeBSD 12.0-RELEASE Release Notes](https://www.freebsd.org/releases/12.0R/relnotes/) - [SO_REUSEPORT on Solaris 11.4](https://docs.oracle.com/cd/E88353_01/html/E37843/setsockopt-3c.html) Co-authored-by: Azat Khuzhin <azat@libevent.org>
Cœur a9426941 2024-04-28T13:16:54 Fix CMake Deprecation Warning
Cœur 73c0349e 2024-04-29T13:16:58 Fix evutil_parse_sockaddr_port documentation (#1628) In some IDE like Xcode, the list is interpreted as markdown instead of plain text
Hennadii Stepanov 71d41cdf 2024-04-22T06:39:35 build: Add `Iphlpapi` to `Libs.private` in `*.pc` files on Windows It has been required since https://github.com/libevent/libevent/pull/923 at least for the `if_nametoindex` call.
Emil Engler 1e6c0e72 2024-04-12T21:36:38 Do not set TCP keepalive on Unix sockets This commit disables the property of TCP keepalive on Unix domain sockets, because they essentially serve no purpose here, except for causing problems on Windows and macOS systems. Fixes #1615
dockercui 147298a2 2024-04-24T11:14:47 Fix some comments Signed-off-by: dockercui <dockercui@aliyun.com>
Andy Pan 6074d558 2024-04-17T10:36:47 Avoid calling read(2) on eventfd on each event-loop wakeup Register the eventfd with EPOLLET to enable edge-triggered notification where we don't need to read the data from the eventfd for every wakeup event. When the eventfd counter reaches the maximum value of the unsigned 64-bit, we rewind the counter and retry again. This optimization saves one system call on each event-loop wakeup, which eliminates the extra latency for epoll as the EVFILT_USER filter does for the kqueue.
dependabot[bot] e0a4574b 2024-04-15T07:41:48 Bump the github-actions group with 5 updates Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/cache](https://github.com/actions/cache) | `3` | `4` | | [nick-fields/retry](https://github.com/nick-fields/retry) | `2` | `3` | | [coverallsapp/github-action](https://github.com/coverallsapp/github-action) | `1.2.5` | `2.2.3` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.1.2` | `2.3.1` | | [github/codeql-action](https://github.com/github/codeql-action) | `2.2.4` | `3.24.10` | Updates `actions/cache` from 3 to 4 - [Release notes](https://github.com/actions/cache/releases) - [Commits](https://github.com/actions/cache/compare/v3...v4) Updates `nick-fields/retry` from 2 to 3 - [Release notes](https://github.com/nick-fields/retry/releases) - [Changelog](https://github.com/nick-fields/retry/blob/master/.releaserc.js) - [Commits](https://github.com/nick-fields/retry/compare/v2...v3) Updates `coverallsapp/github-action` from 1.2.5 to 2.2.3 - [Release notes](https://github.com/coverallsapp/github-action/releases) - [Upgrade guide](https://github.com/coverallsapp/github-action/blob/main/UPGRADE.md) - [Commits](https://github.com/coverallsapp/github-action/compare/09b709cf6a16e30b0808ba050c7a6e8a5ef13f8d...3dfc5567390f6fa9267c0ee9c251e4c8c3f18949) Updates `ossf/scorecard-action` from 2.1.2 to 2.3.1 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/e38b1902ae4f44df626f11ba0734b14fb91f8f86...0864cf19026789058feabb7e87baa5f140aac736) Updates `github/codeql-action` from 2.2.4 to 3.24.10 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/17573ee1cc1b9d061760f3a006fc4aac4f944fd5...4355270be187e1b672a7a1c7c7bae5afdc1ab94a) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: nick-fields/retry dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: coverallsapp/github-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
Diogo Teles Sant'Anna 80e25c02 2024-04-09T11:57:42 Enable dependabot for github actions
Diogo Teles Sant'Anna a4ec4cbe 2024-04-09T11:55:37 Hashpin workflows that use sensitive permisisons
williammuji 9de85b58 2024-04-05T20:42:37 fix WSOptions enum value and extended payload length bug
icy17 6e390911 2024-04-10T17:42:01 Fix potential Null pointer dereference in regress_buffer.c
icy17 74217832 2024-04-10T15:47:57 Fix potential Null pointer dereference in regress.c
icy17 d6e88352 2024-04-10T17:45:03 Fix potential Null pointer dereference in regress_et.c
icy17 d45dca43 2024-04-10T17:39:36 Fix potential Null pointer dereference in regress_thread.c
icy17 2bdf1737 2024-04-10T16:18:27 Fix potential Null pointer dereference in regress_finalize.c
icy17 17796a2d 2024-04-10T15:32:54 Fix potential Null pointer dereference in regress_http.c
icy17 f9526e13 2024-04-10T15:16:21 Fix potential NULL pointer dereference in regress_bufferevent.c
icy17 fc48803d 2024-04-15T15:02:27 Fix potential Null pointer dereference in regress_zlib.c (#1597) Co-authored-by: Azat Khuzhin <a3at.mail@gmail.com>
emma-coronado c6e8f175 2024-04-07T19:37:55 Edit logo path to match new website directory
Liu Dongmiao 39073df8 2024-03-30T21:44:50 evutil: don't call memset before memcpy In `evutil_parse_sockaddr_port`, it would `memset` the `out` to zero, however, the `memset` is unnecessary before `memcpy`, and may cause undefined behavior if the `outlen` is invalid. This should close #1573.
neil 4fd07f0e 2024-03-12T21:56:35 Upgrade vmactions to use linux runners (#1570) Co-authored-by: neil <neilgit@neilpang.com>
Azat Khuzhin 539f73e3 2024-02-20T09:30:22 Fix leak in evbuffer_add_file() on empty files Found by oss-fuzz, after coverage had been improved in google/oss-fuzz#11257 v2: adjust test v3: fix for windows (_get_osfhandle() crashes when called on closed fd) v4: fix for EVENT__DISABLE_MM_REPLACEMENT
Azat Khuzhin b9e1fe74 2024-03-11T21:00:18 ci: disable netbsd and freebsd due to lack of runners For example for openbsd-cmake-job (7.2, NONE) This request was automatically failed because there were no enabled runners online to process the request for more than 1 days. And maybe this will fix the macos builds.
Andy Pan 0054b9aa 2024-03-11T17:12:14 Enable the full TCP KeepAlive mechanism on Windows (#1568) #1532 implemented the full support of TCP Keep-Alives on UNIX-like OS's while leaving a `TODO` for Windows. This PR intends to resolve that `TODO`. ## References - [SIO_KEEPALIVE_VALS Control Code](https://learn.microsoft.com/en-us/windows/win32/winsock/sio-keepalive-vals) - [IPPROTO_TCP socket options](https://learn.microsoft.com/en-us/windows/win32/winsock/ipproto-tcp-socket-options) - [TCP_KEEPINVTL and TCP_KEEPIDLE - Socket Keep Alives not working](https://cygwin.com/pipermail/cygwin/2020-June/245436.html) - [Cygwin: tcp: Support TCP_KEEPIDLE, TCP_KEEPCNT, TCP_KEEPINTVL](https://sourceware.org/pipermail/cygwin-cvs/2020q3/014473.html) - [Add cross-platform support for keep-alive socket options](https://github.com/dotnet/corefx/pull/29963/files)
tgolang 9c8860ec 2024-03-11T15:50:43 chore: remove repetitive words Signed-off-by: tgolang <seekseat@aliyun.com>
Andy Pan e66df92c 2024-03-07T16:19:11 Accept SOCK_NONBLOCK/SOCK_CLOEXEC in type argument of socketpair (#1567) Setting `SOCK_NONBLOCK` and `SOCK_CLOEXEC` in the `type` argument of `socketpair()` is widely supported across UNIX-like OS: Linux, *BSD, Solaris, etc., as is the `socket()`. This will conserve several extra system calls, we should use it where available. ### References - [socketpair(2) on Linux](https://man7.org/linux/man-pages/man2/socketpair.2.html#HISTORY) - [socketpair(2) on FreeBSD](https://man.freebsd.org/cgi/man.cgi?query=socketpair&sektion=2#DESCRIPTION) - [socketpair(2) on DragonFly](https://man.dragonflybsd.org/?command=socketpair&section=2) - [socketpair(2) on NetBSD](https://man.netbsd.org/socketpair.2#DESCRIPTION) - [socketpair(2) on OpenBSD](https://man.openbsd.org/socketpair.2) - [socketpair(3C) on Solaris](https://docs.oracle.com/cd/E88353_01/html/E37843/socketpair-3c.html) Changelog: - Set SOCK_NONBLOCK and SOCK_CLOEXEC in the type argument of socketpair - Avoid EPROTOTYPE on macOS and OpenBSD - Eliminate the warnings about unused variables - Add some comments
Azat Khuzhin f2b3ce6b 2024-03-03T23:10:48 Merge pull request #1558 from azat/ratelimit-fixes Fix few issues found by oss-fuzz in bufferevent ratelimits
Azat Khuzhin e4b87327 2024-02-20T08:58:04 Fix integer-overflow in ev_token_bucket_cfg_new Found by oss-fuzz, after coverage had been improved in https://github.com/google/oss-fuzz/pull/11257 v2: better check (found by CI for windows)
Azat Khuzhin 15e643d0 2024-03-03T14:49:34 Fix pread detection for cmake builds Otherwise it will use lseek()+read() - suboptimal
Andy Pan 92109747 2024-03-02T10:45:49 Simplify TCP_KEEPALIVE_ABORT_THRESHOLD settings on Solaris
Azat Khuzhin c4fb0f76 2024-02-20T08:58:04 Fix divide-by-zero in ev_token_bucket_get_tick_ Found by oss-fuzz, after coverage had been improved in https://github.com/google/oss-fuzz/pull/11257
Azat Khuzhin ec8d7a5a 2024-02-20T08:54:14 ci: fix ABI check (#1510)
Pierce Lopez 7eddd526 2024-02-20T07:56:24 Patch abi-compliance-checker to avoid endless loop