using the statbuf stuff to determine if a cgi is accessible * optionally #define EXIT_FAILURE and EXIT_SUCCESS, and use them   everywhere. * mark a few variables and functions 'static' * use %u instead of %d when printing an unsigned int * mmap returns void * not char * * change access_node->type to an enum * make boa.h #include 'config.h' *first* * use -1 instead of ULONG_MAX (that way, if the datatype ever changes,   we always get it's maximum) * fix bug in multiple non-contiguous range requests for files that   use sendfile(2) * reduce some noise if a request in a keepalive chain is shut down   without having read a single byte. * fix potential memory access bug in hashing * update config.sub and config.guess to the latest available * use CHANGES not ChangeLog * as of 0.94.14rc21: * shift from GNU Autoconf 2.58 to GNU Autoconf 2.59 * increase warning level in GCC_FLAGS another notch * skip superfluous unsigned qualifier for char in get_alias_hash_value * skip check for error in umask(), since it doesn't happen * reorder read_config_files() and create_common_env() * drop incorrect preprocessor usage in TIMEZONE macro * make very sure default_type is set * correct error message in index_dir for .gz files * make mmap_cache 64-bit clean * try to deal with signed file offsets when using sendfile() * clean up signed/unsigned char issues in read_header() * use socklen_t where appropriate in request.c * call range_pool_empty() in response to SIGHUP * add more const qualifiers * eliminate signed/unsigned comparison warnings: change ka_timeout to signed * spelling fixes * miscellaneous whitespace changes * update Copyright dates * drop webindex.pl** Changes from 0.94.12 to 0.94.13 * Change many instances of log_error_mesg + exit to DIE macro * Change all instance of log_error_mesg (without exit) to WARN macro * do a much better job of checking return values from malloc and   especially strdup. * check results of calling umask and getrlimit * server_s is no longer a global int * check results of fork via switch instead of if (fork()) * check for getopt.h and include it if found * remove unused #defines, and add WARN macro, and replace   many calls to log_error_mesg(..) with WARN macro * fix bug in get_commonlog_time where time_offset calculation was   the opposite of what it should be ('-' and '+' were swapped) * fix compatability bug with old and newer versions of flex/yacc * add check for AC_FUNC_MMAP to configure.in * fix really lame thinko in normalize_path, which would prepend the   results of earlier calls to results from later calls * Add MaxConnections, a configuration directive which allows the   user to specify the maximum number of connections that Boa will   accept concurrently. * add SERVER_ADDR and REQUEST_URI to environment of CGI * handle SIGBUS during writes of data that has been memory mapped * minor optimization in select.c that prevents DEAD requests from   being added to the block set * fix bug in CGI environment script_name - closes sf.net bug #576725 * make 'status' variable local to requests.c, not local to every file   by forgetting to declare 'extern' in globals.h :-| * make getsockname non-fatal, and do it every time because we may   need it for the CGI * some minor refactoring optimizations in hash.c * enlarge MMAP hash table to 1024 from 256, and enlarge other   mmap-related hash table #defines appropriately (4x, or (x+1)*4-1)** Changes from 0.94.11 to 0.94.12 * Renamed Changelog ChangeLog, and moved up to top-level directory * Next 3 items due in part or whole thanks to   Liam Widdowson * when printf'ing a pid type, force to int, because it could be   something else on other platforms.  Should probably change it to   a long, and use that. * backported chroot commandline support from 0.95 * backported support for strdup, strstr, alphasort, and scandir   from 0.95 * Fixed src/Makefile.in -- it didn't remove index_dir.o * backport create_temporary_file from 0.95   (instead of using tmpnam) * Allow non-standard date format 31 September 2000 23:59:59 GMT   Patch by Landon Curt Noll * Skip whitespace before HTTP/major.minor   Adapted patch from Landon Curt Noll * open /dev/null first thing (affects chrooting) * properly handle sigalrm -- use sigalrm_flag and sigalrm_run   instead of handling the signal in the signal handler * update manpage slightly * send 400 BAD Request when resource does not start with '/' * add grp.h to boa.h's includes -- remove from boa.c and config.c * removed duplicate header includes from boa.c, config.c, get.c,   ip.c, request.c, response.c * factor out creating the server socket and dropping privs   into create_server_socket and drop_privs * type all functions in boa.c (except main) as static * set umask after opening /dev/null * tie stdin/stdout to /dev/null before commandline parse * removed old, unused chroot code * move builds_needs_escape earlier in the startup * move fork later in the startup * type all c_set_* as static in config.c * don't bother trying to change uid/gid (or error if the   requested uid/gid doesn't exist) if not UID 0 * return more appropriate error code when foo.html gives   access denied, but foo.html.gz gives some other error   (essentially report error associated with foo.html, not foo.html.gz) * send NOT Implemented when an unknown method is attempted * always attempt a 32k read right before close   (stopgap until blackhole can be merged) * allow more than 1 space in logline between method, resource,   and http version * don't use inline functions * update configure.in so that autoconf 2.50 doesn't complain (as much) * properly use VPATH and srcdir according to autoconf docs * change curly-braces to parentheses in Makefilein * use $^ instead of manually listing the dependencies in Makefile.in * remove tests section in Makefile.in * write tags not TAGS in Makefile.in * Add gethostbyname and inet_aton to function checks * Add code from 0.95 which checks for socket in -lsocket,   inet_aton in -lresolv, and gethost{by}name in -lnsl * Also remove broken bc-based "how big is an unsigned int" checks:   assume minimum of 32 bits and check in escape.c at runtime. * Added new file: README.chroot.solaris, based on a   modified version by Liam Widdowson * Add check_struct_for.m4, which allows us to check a structure   for a member (found at http://www.gnu.org/software/ac-archive/    authored by Wes Hardaker * Call "aclocal -I ." to rebuild aclocal.m4 * Using new check-struct-for-member autoconf macro, check   for tm_gmtoff and tm_zone in struct tm -- useful in   portability tests for localtime. * Also check sockaddr_in for structure sin_len so we can set   it properly. * index_dir.c (which ends up in boa_indexer) can now be compiled   with USE_LOCALTIME, and if so, it will report the local time   using the timezone name. Otherwise it uses UTC time and UTC   timezone designation. * fix buglet in mmap_cache.c which shows up when under   heavy load by many different files.   Found and squashed by Michal Kara * normalize paths on Aliases, log files, server root, dirmaker   This makes sure that paths are 'absolute' * don't generate DOCUMENT_ROOT or SERVER_ROOT,   CGIs have no business knowing that information * if CGI, chdir to the cgi's root path   Bug found by Matt Callaway * remove ChrootPath and PidFile directives from the parser   (they aren't used anyway) * keep track of maximum file descriptor in use to optimize call   to select() * apply IPv6 patch from Jari Korva * optimize keep-alive copy data routine * try to use memcpy instead of strcpy/strcat in more places (alias.c) * update .depend file * use fcntl + GET_FL to get a file descriptor's flags, then   add or remove only the bits we want to set. This prevents   accidentally setting or unsettings bits we don't have anything   to do with inadvertantly. (removed, at least temporarily.   Show me a system where it is needed -- LRD) * make sure to call FD_ZERO when we handle a restart * in read.c, don't call boa_perror on read failure -- socket is   dead or messed up anyway, no reason to try to write to it. * explicit .SUFFIXES in Makefile.in * boa.objdump target added * use @MAKE_SET@ (for when $(MAKE) != "make") * add  -Wundef -Wwrite-strings -Wredundant-decls -Winline to GCC_FLAGS * change Paul Phillips' and Larry Doolittle's emails in source * add --disable-debug, --enable-profile, --with-dmalloc, and --with-efence * test for failed-but-return-was-successful setuid:   http://www.securityfocus.com/bid/1322 * use _exit not exit in CGI child * always place new keepalive request on blocked list, we can't be   sure of the state of the active list, and since enqueue places   things at the *front* of the list, it doesn't do us much good   to place the new request on the active list anyway. * update some Copyright statements for 2002 * When comparing the uri to an alias, only compare if   the uri length is greater than or equal to the length of the alias * in init_script_alias, make sure to check for document_root before   trying to use it * script_name is now just a copy of the request, rather   than some complicated variation on the pathname * change the way the CGI environment is handled.   Now, it is allocated at request allocation time, and exists   throughout the life of the structure. * check memory allocations, etc.. when creating the static   CGI environment and when making new CGI environment variables * wait until process_option_end to call unescape_uri, clean_pathname,   and translate_uri * remove debian package information * move RedHat packaging information to contrib * remove tests -- they weren't usable anyway * add some new hash routines, and use djb2 (a variant on a   hash algorithm popularized by Dan J. Bernstein) * a side-effect of the new hash routines is a bugfix,   involving negative return values from hash routines.   This has been fixed. * add a routine, show_hash_stats, which is called with other   statistical output via sigalarm * remove some duplicate prototypes from config.c * make simple_itoa take an unsigned int * try to make NOBLOCK handling in compat.h compatible with Solaris * make sure to update current_time before calling signal handlers * alter primary loop to make sure that select gets called even   when there are requests that are not blocking, and call fdset_update   and process_requests (when appropriate) after signal handlers but   before select to make sure that blocked requests are still handled   by select after a sighup. (Thanks to Karl Olsen) * pull select loop into select.c * poll server socket once per active connection * add send_r_service_unavailable and use it when appropriate * state uptime in seconds at normal program termination * include sys/fcntl.h if it is found by configure * fix POST bug where a content-length < 0 would cause Boa to   consume its full share of CPU until killed   Bug report by Landon Curt Noll * add CGIPath configuration variable   based upon a patch by Landon Curt Noll * add function boa_atoi, which wraps atoi, but does not   accept negative values. Additionally, it checks to make sure   the converted value and the original value are the same, avoiding   issues like "124.3" -> "123" and "123abc" -=> "123".   Either a value is an int or it isn't - no middle ground. * use boa_atoi to convert content-length from client. * add new #define - SINGLE_POST_LIMIT_DEFAULT, which defines   (in bytes) the *default* single_post_limit. * single_post_limit is now in bytes. * when adding aliases, only "normalize" paths that start   with "./" - this is a departure from previous behavior * add "?" to the list of characters that it is safe to leave unescaped * clean up Makefile.in of no-longer-pertinent comments * add send_r_bad_gateway and use it * tie stderr to either cgi_log_fd or devnullfd - either way