- 10 Oct, 2022 7 commits
-
-
Martin Blix Grydeland authored
-
Martin Blix Grydeland authored
-
Martin Blix Grydeland authored
-
Asad Sajjad Ahmed authored
Check for correct handling of missing pseudo-headers, and invalid characters. Signed-off-by: Asad Sajjad Ahmed <asadsa@varnish-software.com>
-
Asad Sajjad Ahmed authored
We should apply the same restrictions on the list of allowed characters inside H/2 pseudo-headers as we do for H/1. This error is translated into the headers we send to a backend over H/1. Failure to do so could permit various exploits against a backend not handling malformed H/1 requests. Signed-off-by: Asad Sajjad Ahmed <asadsa@varnish-software.com>
-
Martin Blix Grydeland authored
This expands the perfect hash lookup table to be able to match any entry in the list of well-known headers from tbl/http_headers.h. Previously only the headers that had a non-zero filter flag section was kept in the fast match table. Fixes: VSV00010
-
Martin Blix Grydeland authored
Limit the fuzzer runs to PRs on `varnishcache`'s repositories. The build scripts won't work correctly from anywhere else anyways.
-
- 04 Aug, 2022 5 commits
-
-
Martin Blix Grydeland authored
-
Martin Blix Grydeland authored
-
Martin Blix Grydeland authored
The input argument assertions and checks in http_hdr_flags() were misleading and lacking. With this patch it returns (NULL) on either input being NULL, and also when called with an empty string instead of asserting.
-
Martin Blix Grydeland authored
In http_EstimateWS(), all headers are passed to the http_isfiltered() function to calculate how many bytes is needed to serialize the entire struct http. http_isfiltered() will check the headers for whether they are going to be filtered out later and if so skip them. However http_isfiltered() would attempt to treat all elements of struct http as regular headers with an implicit structure. That does not hold for the first three pseudo-header entries, which would lead to asserts in later steps. This patch skips the filter step for pseudo-headers. Fixes: #3830
-
Martin Blix Grydeland authored
-
- 15 Mar, 2022 5 commits
-
-
Martin Blix Grydeland authored
-
Martin Blix Grydeland authored
Enable package building on commits
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
-
- 14 Mar, 2022 11 commits
-
-
Nils Goroll authored
from 7615e559 - sorry
-
Dridi Boukelmoune authored
This reverts commit 8f11c925.
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
And while at it, make it easier to work with distribution names with less if statements and more case matching. Better diff with the --ignore-all-space option.
-
Nils Goroll authored
-
Nils Goroll authored
Removed one paragraph which was really confusing and, I guess, wrong: IIUC, backend references _always_ need to be taken with VRT_Assign_Backend, because the referencing vmod can make _no_ assumptions about the assigned backend. Also I hope to have clarified use of VRT_StaticDirector().
-
Nils Goroll authored
I found the previous wording confusing and hope this is considered an improvement. We should make clear that lack of onerror="continue" implies abort only if the feature flag is set.
-
Nils Goroll authored
-
Nils Goroll authored
-
Nils Goroll authored
-
Dridi Boukelmoune authored
Refs varnishcache/pkg-varnish-cache#154
-
- 13 Mar, 2022 2 commits
-
-
Nils Goroll authored
Thank you do Dridi for his work on the release documentation. I have gone through all commits and reused some wording of his where appropriate. As before, the changelog should roughly match the commit order (from new to old).
-
Nils Goroll authored
-
- 11 Mar, 2022 3 commits
-
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
It was increased in 635f9f20 to avoid sanitizer suppressions to scroll out of screen the lines we expect to find, but on some 32bit ARM system it makes the test even less stable.
-
- 10 Mar, 2022 1 commit
-
-
Dridi Boukelmoune authored
Refs #3788
-
- 09 Mar, 2022 3 commits
-
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
-
- 08 Mar, 2022 3 commits
-
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
-
Dridi Boukelmoune authored
Working on the release notes I realized that there was nothing actionable to prepare for deprecated aliases in future releases.
-