it was already used for more than SIGSEGV, so we should output the actual
signal description.

Conflicts:
	bin/varnishd/mgt/mgt_child.c

The previous code allowed the compiler to re-read nxt from
rr->nxt which could have been incremented cocurrently.

Fixes #2378

The file stevedore may return a buffer larger than asked for when
requesting storage. Due to lack of check for this condition, the code
to copy the synthetic error memory buffer from vcl_error would overrun
the buffer.

Patch by @shamger

Fixes: #2429

The goal of `req.ttl` is to allow lower requirements for known
transactions (since this has to be done in VCL) but objects with
an age higher than `req.ttl` would always be considered expired
during lookup even if their actual TTL (obj.ttl) is still positive.

Ignoring `req.ttl` gives a better control over explicit refreshes
made to optimize latency and greatly reduces the risk of running
into #1799 (for a subset of use cases).

Refs #2422

My previous patch did not update the manual and the usage message for
varnishtest concerning the default internal buffer size.

Since SunOS needs a litt bit more workspace_thread, this test case
needs to be updated.

The default buffer size for vtc (configurable with -b) had to be
increased.

Conflicts:
	bin/varnishtest/vtc_main.c

When the do..while loop in HSH_Purge executes on a oh with many
popular variants, there is a potential problem with the "array" of oc
pointers, allocated in the thread workspace. If many of the oc's have
positive refcounts, they will fill up the array and

	EXP_Rearm(oc, now, ttl, grace, keep);
	(void)HSH_DerefObjCore(wrk, &oc, 0);

will be called several on the same oc's. At the same time, the counter
n_obj_purged will be updated with a too low number.

The test case demonstrates how we get a too low value for this counter,
but it is not able to force varnishd to use a siginificant amount of CPU.

Conflicts:
	include/tbl/oc_flags.h
	bin/varnishd/cache/cache_hash.c
	bin/varnishd/cache/cache.h

The use case are cluster requests: Intra-cluster bgfetches should
trigger a synchronous fetch on the peer-varnish in order to avoid
additional short-lived / expired objects being created. Or, in
other words, a bgfetch should actually get a fresh object and not
one in grace from another cache.

Merges #2376

This is a back port of d7f8b531.

Conflicts:
	bin/varnishd/cache/cache_fetch.c
	doc/changes.rst
	include/tbl/bo_flags.h

Fixes #2380.

Closes: #2357

Related to #2337 and #2366.

From Emmanuel Hocdet (manu-at-gandi-dot-net) via #2373.

This fixes a denial of service attack vector where bogusly large chunk
sizes in requests could be used to force restarts of the Varnish
server.

This is Varnish Security Vulnerability VSV00001

For more information visit: https://varnish-cache.org/security/VSV00001

Fixes: #2379

like ban(req.http.non-existing-header)

Probes currently running on a worker thread at the time they are
deleted will delay the release of the refcount they hold on the TCP
pool. Since this call will not be from the CLI thread we need locking
to protect these datastructures.

This is a backport of 98676319 by Dridi Boukelmoune, but this patch
is a bit different from the original.

Now name collisions with transient will be reported in a sane way
instead of producing an assert. Normal name collisions are also more
readable.

The test case is unmodified, thanks to resent back porting efforts in
varnishtest.

Fixes #2321

Conflicts:
	bin/varnishd/storage/mgt_stevedore.c

This enables waiting for the logging thread to idle to make sure all
generated log is caught.

Conflicts:
	bin/varnishtest/vtc_varnish.c

Original test case by Federico G. Schwindt

Fixes: #2219

Conflicts:
	bin/varnishd/proxy/cache_proxy_proto.c

We now process the inclusive globs first, and then the exclusive
ones.  The former are accumulative, while the latter will filter
the output from the first.

Discussed in detail with and final diff from @mbgrydeland.
Tests tweaking by yours truly.

Fixes #2320.

Conflicts:
	bin/varnishstat/varnishstat_options.h
	bin/varnishtest/tests/u00005.vtc
	lib/libvarnishapi/vsc.c

Update the code to accommodate this.  Originally reported by Reinis
Rozitis (r at roze.lv) on varnish-misc.

Fixes #2118.

Backport to 4.1

Fixes #2022

Conflicts:
	bin/varnishstat/varnishstat_options.h

Backport to 4.1

object creation.

Fixes #1764

Conflicts:
	bin/varnishd/cache/cache_fetch.c
	bin/varnishd/storage/stevedore.c
	bin/varnishd/storage/storage.h
	bin/varnishd/storage/storage_lru.c
	bin/varnishd/storage/storage_persistent.c
	bin/varnishd/storage/storage_simple.c

Conflicts:
	bin/varnishd/cache/cache.h
	bin/varnishd/cache/cache_ws.c