Log

Author Commit Date CI Message
Nick Mathewson 3e9aad72 2015-01-05T09:34:32 update changelog
Nick Mathewson 2ff3be6e 2015-01-05T09:34:01 Merge branch '14_cve_2014_6272_v2' into patches-1.4
Nick Mathewson 4228f769 2015-01-05T09:07:15 Increment version for 1.4.15-stable
Nick Mathewson 76f510e3 2015-01-05T08:37:02 Update 1.4 changelog
Nick Mathewson 7b21c4ea 2014-01-05T08:30:46 Fix CVE-2014-6272 in Libevent 1.4 For this fix, we need to make sure that passing too-large inputs to the evbuffer functions can't make us do bad things with the heap.
Nick Mathewson 10d228c9 2014-11-30T21:04:43 Merge remote-tracking branch 'sourceforge/patches-1.4' into patches-1.4
Nick Mathewson 867f3b38 2014-11-30T19:38:54 Note the progress for the 14 changelog
Nick Mathewson 641d0d88 2014-11-30T19:33:03 Changelog for 1.4.15-stable.
Nick Mathewson 2d8cf0b7 2011-04-21T18:16:26 Defensive programming to prevent (hopefully impossible) stack-stomping
Trond Norbye 353b4ac6 2011-01-02T10:17:15 Check for POLLERR, POLLHUP and POLLNVAL for Solaris event ports
Nick Mathewson e50ba5b6 2010-11-19T12:37:49 Fix a bug that could allow dns requests with duplicate tx ids Spotted by Marko Kreen
Nick Mathewson 1d6e30e6 2010-11-19T12:35:47 Avoid truncating huge values for content-length
Nick Mathewson 7cf794b6 2010-09-03T15:21:09 Take generated files out of git; add correct m4 magic for libtool to auto* files
Nick Mathewson 823d9be5 2010-09-03T15:13:57 Prefer autoregen -ivf to manual autogen.sh Suggested by Ralph Castain
VDm 53c47c2e 2010-08-30T11:08:59 Fix compilation on Visual Studio 2010
Nick Mathewson f0ff7659 2010-08-26T15:09:58 Fix an issue with forking and signal socketpairs in select/poll backends Nicholas Marriott identifies an issue where a signal socketpair doesn't get recreated if the event backend doesn't set event_reinit.
Marco 95b71d0c 2010-08-24T12:44:33 Backport doc fix for evhttp_bind_socket.
Nick Mathewson e0e6958a 2010-08-19T14:00:06 Avoid deadlock when activating signals. Fixes bug 3048812. Based on patch by Nicholas Marriott.
Nick Mathewson 1c25b07e 2010-08-19T09:38:44 Fix kquue correctness test on x84_64 Apparently, in our configure.in check for a working kqueue, we were leaving some fields unset that seemed to irritate 64-bit kqueue a lot. Found by Christopher Layne
Nick Mathewson 44f04a2b 2010-08-19T09:36:33 Replace unused case of FD_CLOSEONEXEC with a proper null statement.
Ralf Schmitt 9985231e 2010-08-18T11:51:30 set close-on-exec bit for filedescriptors created by dns subsystem
Nick Mathewson 8a5ebd38 2010-08-13T12:12:52 Backport and tweak the LICENSE file for 1.4
Nick Mathewson b3d03822 2010-07-13T11:06:08 Pass flags to fcntl(F_SETFL) as int, not long Everybody but Linux documents this as taking an int, and Linux is very tolerant of getting an int instead. If it weren't, everybody doing fcntl(fd,F_SETFL,O_NONBLOCK) would break, since the glibc headers define O_NONBLOCK as an int literal.
Nick Mathewson eb8122f2 2010-06-19T11:56:12 Increment the version to 1.4.14b; add a changelog for our VERSION_INFO snafu on 1.4.14
Nick Mathewson fd32d368 2010-06-19T11:51:47 Set the VERSION_INFO correctly for 1.4.14 I've also added a long comment explaining our history of VERSION_INFO as relevant for the 1.4.x series.
Nick Mathewson b3360c16 2010-05-27T01:30:23 Increment Libevent version to 1.4.14-stable
Nick Mathewson 6224ff87 2010-05-27T01:11:55 Changelog for 1.4.14-stable
Nick Mathewson 6cbea13b 2010-05-10T19:58:17 Define _REENTRANT as needed on Solaris, elsewhere It turns out that _REENTRANT isn't only needed to make certain functions visible; we also need it to make pthreads work properly some places (like Solaris, where forgetting _REENTRANT basically means that all threads are sharing the same errno). Unlike in 2.0, we can't use the PTHREAD_CFLAGS variable to see what flags to use, since we aren't using pthreads in 1.4. Instead, we just check the host type explicitly, like acx_pthreads does.
Nick Mathewson 906d573b 2010-05-10T19:57:13 Fix compile warning in http.c
Pierre Phaneuf 29d7b328 2010-04-27T22:25:59 Do not abort HTTP requests missing a reason string. Some (arguably broken) HTTP servers do not put the reason message in their status line, which causes evhttp to consider the response invalid. http://sourceforge.net/tracker/?func=detail&aid=2875077&group_id=50884&atid=461322
Gilad Benjamini ae6ece02 2010-04-21T01:15:19 Clean up properly when adding a signal handler fails. Previously, when a signation() or signal() call failed, we would free the element we added to sh_old, but not actually clear the pointer. This would leave a dangling pointer in sh_old that could cause a crash later.
Niels Provos cb1a7223 2009-01-27T16:29:48 Fix memory leak when setting up priorities; reported by Alexander Drozdov Backport from Libevent 2.0 commit 1c927b7
Nick Mathewson 24589347 2010-03-26T14:22:47 Fix a free(NULL) in min_heap.h Backport of 6f20492fa27f08
Niels Provos 01ea0c5c 2010-02-03T16:54:18 make evhttp_send() safe against terminated connections, too
Niels Provos 5c8b446e 2010-02-03T14:34:56 do not fail while sending on http connections the client closed. when sending chunked requests via multiple calls to evhttp_send_reply_chunk, the client may close the connection before the server is done sending. this used to cause a crash. we introduce a new function evhttp_request_get_connection() that allows the server to determine if the request is still associated with a connection. If it's not, evhttp_request_free() needs to be called explicitly or the user can call evhttp_send_reply_end() which just frees the request, too.
Nick Mathewson 20d706d0 2010-02-12T00:02:22 Distribute nmake makefile for 1.4
Brodie Thiesfield bce58d61 2010-02-03T23:27:40 Make Libevent 1.4.12 build on win32 with Unicode enabled. This patch fixes calls to the win32 api to explicitly call the char* versions of the functions. This fixes build failures when libevent is built with the UNICODE define.
Nick Mathewson bd03d068 2010-01-14T18:22:00 Re-add event_siglcb; some old code _was_ still using it. :( Such code really needs to migrate to use signal events instead. This reverts commit 072ae5887e8064da500adbd2d24050bb96fbe75d.
Pavel Plesov 4fd2dd9d 2010-01-11T18:52:54 Do not send an HTTP error when we've already closed or responded. Previously, we'd issue an HTTP/1.1 400 Bad Request" response on every connection close, event if sever sent response already. This patch changes the behavior, so we only issue the response on close when the connection state is not DISCONNECTED, and so we set the state to DISCONNECTED when the connection closes. Includes a regression test; fixes sourceforge bug 2909909.
Nick Mathewson 8771d5b6 2010-01-07T02:25:48 Merge branch 'readln-backport' into patches-1.4
Nick Mathewson 35df59e9 2010-01-04T01:01:54 Correct a debug message in evhttp_parse_request_line The old message reported that evhttp_decode_uri had failed; in fact, strdup had failed. Found by Michael Lenaghan.
Jardel Weyrich 5f2e2507 2009-12-29T16:19:24 Adjusted fcntl() retval comparison on evutil_make_socket_nonblocking(). Apparently, a successful return value on F_SETFL is "anything but -1".
Jardel Weyrich 81c26ba4 2009-12-28T16:00:05 Make evutil_make_socket_nonblocking() leave any other flags alone. Fixes bug 2922121
Nick Mathewson ac0d213c 2009-12-18T23:50:42 Correct all versions in 1.4 branch
Evan Jones 891765cd 2009-12-08T17:02:24 Update sample/signal-test.c to use newer APIs and not leak.
Nick Mathewson 01f3775b 2009-11-21T01:11:49 Fix memory-leak of signal handler array with kqueue. [backport] It turns out that kqueue_dealloc wasn't calling evsig_dealloc() (because it doesn't use the main signal handler logic) so the sh_old array was leaking. This patch also introduces a fix in evsig_dealloc() where we set the sh_old array to NULL when we free it, so that main/fork can pass.
Yasuoka Masahiko 5b10d008 2009-12-04T10:44:46 Fix a crash when reading badly formatted resolve.conf Based on patch from Yasuoka Masahiko, backported to 1.4.
William Ahern 5713d5dd 2009-11-29T10:20:46 Valgrind fix: Clear struct kevent before checking for OSX bug. William's original commit message: Valgrind complains on startup because kq_init passes to kevent only a partially initialized structure. The code doesn't expect kevent to look at .fflags, .udata, or .data, I suppose, because it merely tickles the kernel looking for an error response. But perhaps that's unwarranted chuminess (notwithstanding that it's checking for an OS X bug), and needless noise nonetheless.
Nick Mathewson c5454854 2009-11-23T13:22:15 Make the evbuffer_readln backport follow the current API
Nicholas Marriott b04cc60f 2009-11-23T12:55:50 Backport evbuffer_readln(). This is necessary because it is not actually possible to use evbuffer_readline() safely: it will treat "A\r\n" as 'A' EOL if it reads it all at once, and as 'A' EOL EOL if there is a delay between reading the \r and the \n. Nicholas Marriott's comments on this patch: Gilles is too busy so I've had a go at this, please see the diff below. Rather than try to backport directly from 2.0 where the evbuffer code is quite different, I've backported the _readln function from when it was initially added in buffer.c r550. I can't see any relevant bug fixes after this point so the function is pretty much just copied in directly from that revision.
Nick Mathewson d014edb2 2009-11-20T12:20:49 Add a .gitignore file for the 1.4 branch.
Niels Provos 06d26fc8 2009-11-18T04:11:22 call it 1.4.13-stable svn:r1544
Nick Mathewson f76b599d 2009-11-16T19:21:25 Fix 1.4 compilation on msvc, and add a couple of minimal (not-quite-right) nmakefiles. svn:r1534
Nick Mathewson 25da0672 2009-11-16T18:46:10 Partial backport of event_rpcgen portability fixes. svn:r1533
Nick Mathewson 3487906f 2009-11-16T18:04:13 Add a missing include to make win32 compile. svn:r1532
Nick Mathewson eb1fa9f7 2009-11-15T18:59:55 When running set[ug]id, don't check the environment. Idea from OpenBSD, but made a bit more generic to handle uncivilized lands that do not define issetugid. svn:r1529
Nick Mathewson b4183c73 2009-11-09T19:55:40 Stop too many bytes for activequeues. We were saying calloc(N,N*sizeof(struct event_list*)) when we should have been saying calloc(N,sizeof(struct event_list*)). This wasted N*(N-1) words of memory, where N was the number of priorities. This wouldn't be a big deal for any sane number of priorities, but it's a bug nonetheless. svn:r1526
Nick Mathewson e32d055b 2009-11-06T21:23:52 Backport GNU/kfreebsd kqueue fix svn:r1515
Nick Mathewson 6ce14fd0 2009-11-03T19:15:27 Rename compat/sys/_time.h to compat/sys/_libevent_time.h On some systems (notably HPUX), there is already a /usr/include/sys/_time.h, which our sys/_time.h shadows. Found and diagnosed by Kathryn Hogg. This is a quick fix for 1.4 only; for 2.0, I want to eliminate compat/sys/_time.h entirely, and have util-internal subsume it. svn:r1493
Nick Mathewson 756c4cd3 2009-10-12T21:09:14 Declare struct timezone in evutil.h so that borken mingw versions do not complain svn:r1442
Niels Provos c5a0f56c 2009-09-24T22:21:09 from trunk: Do not drop data from evbuffer when out of memory; reported by Jacek Masiulaniec svn:r1437
Nick Mathewson 03a9da17 2009-09-23T23:50:43 Fix compilation on Android: define fd_mask when it's missing. svn:r1434
Nick Mathewson 072ae588 2009-09-23T22:19:00 Remove unused event_gotsig code from 1.4 to appease some automated code checkers svn:r1433
Nick Mathewson 1bf18e5a 2009-09-11T18:55:12 Backport epoll memory fix for bug 2839240 svn:r1430
Nick Mathewson 81765181 2009-09-11T18:55:06 Backport: do not believe negative result from FIONREAD. svn:r1429
Niels Provos 8c6282ec 2009-07-25T02:21:05 call it 1.4.12-stable svn:r1376
Nick Mathewson 9e652610 2009-07-23T00:24:28 A more hackish (but more backported) fix for the intptr vs uintptr fix from trunk. svn:r1374
Nick Mathewson 8155ed0c 2009-07-21T19:01:07 #ifdef out some callbacks in regress.c that windows doesn't use. svn:r1371
Nick Mathewson 4c364111 2009-07-21T18:57:38 Fix compilation of 1.4 branch on win32 svn:r1370
Nick Mathewson 267472dc 2009-07-21T17:57:31 Do a quick-and-dirty hack to fix a gcc warning on 1.4 with a 64-bit arch svn:r1368
Nick Mathewson 9af9aba6 2009-07-21T17:57:25 Add -fno-strict-aliasing to let 1.4 build happily on GCC 4.4 svn:r1367
Nick Mathewson f5408f1d 2009-07-17T20:27:54 Checking for MS_WINDOWS rather than WIN32 is a Tor-ism. Fix that! {Backport} svn:r1359
Nick Mathewson 0ae18517 2009-07-17T19:00:22 Backport: Update event_tv when time jumps backwards, so that we only note each jump once. Not strictly needed in 1.4, but good for correctness. svn:r1354
Nick Mathewson 2bdf3077 2009-07-14T19:31:11 [Backport] Do not define _FORTIFY_SOURCE if the platform GCC already defined it for us. svn:r1345
Nick Mathewson a763e741 2009-06-30T14:20:44 The truncated bit is in the 3rd byte of a dns reply, not the 4th. svn:r1331
Nick Mathewson 76339194 2009-06-24T22:39:12 Let evdns keep working when our IP changes. Fix by Christopher Davis; backported by nickm. svn:r1328
Nick Mathewson b99254ac 2009-06-24T22:39:03 Activate fd events in a pseudorandom order on older backends. New backends like poll and kqueue and so on add fds to the queue in the order that they are triggered. But the select backend currently activates low-numbered fds first, whereas the poll and win32 backends currently favor whatever fds have been on for the longest. This is no good for fairness. svn:r1327
Nick Mathewson b0d88e68 2009-06-04T05:29:04 Fix epoll fencepost error. Patch most recently from Adam Langley, though I think I have seen others post this before. svn:r1323
Nick Mathewson 0ec290be 2009-05-25T18:15:44 When __GNUC__ is not defined, use __VA_ARGS__. svn:r1312
Nick Mathewson 9d0f6eb4 2009-05-22T18:32:09 Fix a potentially very annoying evdns bug that we found in Tor. Generally speaking, it way better to event_assign() an event when you allocate it than to assign it before every time you event_add it: if it is already event_add()ed, the assign will mess it up so that it doesn't _look_ added, and event_add() will insert a second copy. Later, event_del() will only delete the second copy. Eventually, the event_base will have a dangling pointer to freed memory. Ouch! svn:r1308
Nick Mathewson 6bd85f9d 2009-05-22T16:51:10 Fix compilation warning on win32 with verbose GCC warnings. svn:r1305
Nick Mathewson 499d0039 2009-05-22T15:09:43 Try to contain the failure when we are running without socketpair(). Some win32 systems (mostly those using Kaspersky, it would seem) prevent us from faking socketpair(). This makes our signal notification code just not work. Our response since 1.4 has been to assert. For users who would rather work without signals than not work at all, this has been a regression from 1.3e. This patch makes adding signal events fail in this case; there's no reason to kill the whole process. svn:r1304
Niels Provos 0f62db5e 2009-05-15T06:22:54 call it 1.4.11-stable svn:r1290
Nick Mathewson 9b45a4e7 2009-05-15T01:36:31 We were distributing the wrong event-config.h with our source distributions. Fix that. svn:r1288
Nick Mathewson 5d639d6c 2009-05-15T01:14:08 Fix win32 compilation warnings in 1.4. svn:r1287
Nick Mathewson 5e0563ba 2009-05-12T18:27:45 Fix dangling pointer in epoll after epoll_recalc(). This is based on patch 2790759 from Kevin Springborn. His comments on sourceforge: Problem: The failure case is as follows: Event is added using epoll_add (a direct pointer is stored in the user_data section), epoll_recalc is called and the fds array is moved (invalidating the user_data pointer stored in epoll). epoll_dispatch is called for the added event and accesses evepoll based on the invalid pointer (set before the fds array was relocated). Solution: Dispatch has access to the epollop structure, so given the fd we can find the corresponding evepoll struct. Use data.fd instead of data.ptr and store the fd corresponding to the event. This way when epoll_recalc moves the fds array (and updates the fds array pointer in epollop), the evepoll calculation in dispatch still finds the valid evepoll struct. svn:r1282
Nick Mathewson a276fa51 2009-05-12T18:27:34 Fix warnings in compilation of regress.c. svn:r1281
Niels Provos 23967f73 2009-04-24T16:08:30 Remove the limit on size of HTTP headers by removing static buffers svn:r1240
Nick Mathewson 749f4ce3 2009-04-23T00:02:19 [backport] Fix min_heap_erase when we remove an element from the middle of the heap. Previously, we could lose the heap property when we removed an item whose parent was greater than the last element in the heap. We would replace the removed item with the last element, and consider shifting it down, but we wouldn't consider shifting it up. Patch from Marko Kreen. svn:r1227
Niels Provos 4d4a7d55 2009-04-17T00:37:21 call it 1.4.10 svn:r1178
Niels Provos 1a518873 2009-04-12T23:00:52 from trunk: improve evhttp_parse_query documentation svn:r1161
Niels Provos c1bd9385 2009-04-11T04:12:46 Fix parsing of queries where the encoded queries contained \r, \n or + svn:r1155
Niels Provos 64b3a571 2009-03-30T17:36:59 correct evbuffer_drain documentation from John Khvatov svn:r1128
Niels Provos 59513ee2 2009-03-12T17:45:13 from trunk: include Doxyfile in tar ball; from Jeff Garzik svn:r1126
Niels Provos f06b29b9 2009-03-12T17:03:21 off-by-one error in epoll_recalc; reported by Victor Goya svn:r1124
Nick Mathewson 4cf8138b 2009-02-02T19:20:49 Make evdns_resolve_reverse args const. svn:r1094
Niels Provos 62d60546 2009-01-23T17:21:17 we dont use an m4 directory for 1.4 - remove it svn:r1045
Niels Provos 092baefa 2009-01-22T06:26:32 from trunk: fix signal processing for non-kqueue backends; when a signal callback delivers a signal; from Alexander Drozdov svn:r1036
Niels Provos 636e74a7 2009-01-22T02:49:57 from trunk: rename sys/signal.h to signal.h; configure m4 macro dir; this assist with compilation on Haiku svn:r1034
Niels Provos 7682ff80 2009-01-19T23:54:27 from trunk: rename the backend from "event ports" to "evport" - this will allow environment based disabling to work svn:r1029