Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libmicrohttpd for openSUSE:Factory checked in at 2026-07-14 13:45:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libmicrohttpd (Old) and /work/SRC/openSUSE:Factory/.libmicrohttpd.new.1991 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libmicrohttpd" Tue Jul 14 13:45:27 2026 rev:52 rq:1365057 version:1.0.6 Changes: -------- --- /work/SRC/openSUSE:Factory/libmicrohttpd/libmicrohttpd.changes 2026-06-30 15:11:12.851533007 +0200 +++ /work/SRC/openSUSE:Factory/.libmicrohttpd.new.1991/libmicrohttpd.changes 2026-07-14 13:45:29.741900761 +0200 @@ -1,0 +2,9 @@ +Thu Jul 9 14:48:06 UTC 2026 - Andreas Stieger <[email protected]> + +- update to 1.0.6: + * Fix various minor issues, like theoretical + * integer overflows for extreme inputs or NULL + * dereferences if the application passes NULL + where it should not + +------------------------------------------------------------------- Old: ---- libmicrohttpd-1.0.5.tar.gz libmicrohttpd-1.0.5.tar.gz.sig New: ---- libmicrohttpd-1.0.6.tar.gz libmicrohttpd-1.0.6.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libmicrohttpd.spec ++++++ --- /var/tmp/diff_new_pack.2L8w3Q/_old 2026-07-14 13:45:30.529927697 +0200 +++ /var/tmp/diff_new_pack.2L8w3Q/_new 2026-07-14 13:45:30.533927833 +0200 @@ -21,7 +21,7 @@ %global sover 12 %global libname %{name}%{sover} Name: libmicrohttpd -Version: 1.0.5 +Version: 1.0.6 Release: 0 Summary: Small Embeddable HTTP Server Library # Some internal tests are licenced as GPL-3.0+ - they are only used in ++++++ libmicrohttpd-1.0.5.tar.gz -> libmicrohttpd-1.0.6.tar.gz ++++++ ++++ 2360 lines of diff (skipped) ++++ retrying with extended exclude list diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/ChangeLog new/libmicrohttpd-1.0.6/ChangeLog --- old/libmicrohttpd-1.0.5/ChangeLog 2026-04-16 10:37:44.000000000 +0200 +++ new/libmicrohttpd-1.0.6/ChangeLog 2026-07-08 12:46:35.000000000 +0200 @@ -1,12 +1,19 @@ +Wed Jul 8 12:32:30 PM CEST 2026 + Fix various minor issues, like theoretical + integer overflows for extreme inputs or NULL + dereferences if the application passes NULL + where it should not. + Releasing GNU libmicrohttpd 1.0.6. -CG + Thu Apr 16 10:36:54 AM CEST 2026 - Also ensuring other HTTP client headers that + Also ensuring other HTTP client headers that should be unique are unique. Releasing GNU libmicrohttpd 1.0.5. -EG/CG Mon Apr 13 11:39:04 AM CEST 2026 Fixed bug where additional "Content-Length" headers were - ignored instead of rejecting the request, fixing a - (minor) header smuggling vulnerability discovered + ignored instead of rejecting the request, fixing a + (minor) header smuggling vulnerability discovered by SySS GmbH. Releasing GNU libmicrohttpd 1.0.4. -CG diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/NEWS new/libmicrohttpd-1.0.6/NEWS --- old/libmicrohttpd-1.0.5/NEWS 2026-04-16 10:36:59.000000000 +0200 +++ new/libmicrohttpd-1.0.6/NEWS 2026-07-08 12:49:06.000000000 +0200 @@ -1,3 +1,11 @@ +Wed Jul 8 12:47:35 PM CEST 2026 +Released GNU libmicrohttpd 1.0.6. + + This is a bugfix release, fixing minor bugs mostly in error handling, + theoretical integer overflows, and rare memory leaks. + + -- Christian Grothoff + Thu Apr 16 10:36:54 AM CEST 2026 Released GNU libmicrohttpd 1.0.5. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/configure.ac new/libmicrohttpd-1.0.6/configure.ac --- old/libmicrohttpd-1.0.5/configure.ac 2026-04-16 10:00:49.000000000 +0200 +++ new/libmicrohttpd-1.0.6/configure.ac 2026-07-08 12:46:35.000000000 +0200 @@ -23,7 +23,7 @@ # AC_PREREQ([2.64]) LT_PREREQ([2.4.0]) -AC_INIT([GNU libmicrohttpd],[1.0.5],[[email protected]]) +AC_INIT([GNU libmicrohttpd],[1.0.6],[[email protected]]) AC_CONFIG_AUX_DIR([build-aux]) MHD_AUX_DIR='build-aux' # Must be set to the same value as in the previous line AC_CONFIG_HEADERS([MHD_config.h]) @@ -31,7 +31,7 @@ m4_pattern_forbid([^_?MHD_[A-Z_]+_CC_])dnl LIB_VERSION_CURRENT=74 -LIB_VERSION_REVISION=3 +LIB_VERSION_REVISION=4 LIB_VERSION_AGE=62 AC_SUBST([LIB_VERSION_CURRENT]) AC_SUBST([LIB_VERSION_REVISION]) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/doc/doxygen/libmicrohttpd.doxy new/libmicrohttpd-1.0.6/doc/doxygen/libmicrohttpd.doxy --- old/libmicrohttpd-1.0.5/doc/doxygen/libmicrohttpd.doxy 2026-04-16 10:01:26.000000000 +0200 +++ new/libmicrohttpd-1.0.6/doc/doxygen/libmicrohttpd.doxy 2026-07-08 12:46:49.000000000 +0200 @@ -38,7 +38,7 @@ # could be handy for archiving the generated documentation or if some version # control system is used. -PROJECT_NUMBER = 1.0.5 +PROJECT_NUMBER = 1.0.6 # Using the PROJECT_BRIEF tag one can provide an optional one line description # for a project that appears at the top of each page and should give viewer a diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/doc/libmicrohttpd.info new/libmicrohttpd-1.0.6/doc/libmicrohttpd.info --- old/libmicrohttpd-1.0.5/doc/libmicrohttpd.info 2026-04-16 10:38:17.000000000 +0200 +++ new/libmicrohttpd-1.0.6/doc/libmicrohttpd.info 2026-07-08 12:49:09.000000000 +0200 @@ -1,7 +1,7 @@ This is libmicrohttpd.info, produced by makeinfo version 7.1.1 from libmicrohttpd.texi. -This manual is for GNU libmicrohttpd (version 1.0.5, 24 September 2024), +This manual is for GNU libmicrohttpd (version 1.0.6, 24 September 2024), a library for embedding an HTTP(S) server into C applications. Copyright © 2007-2019 Christian Grothoff @@ -23,7 +23,7 @@ The GNU libmicrohttpd Library ***************************** -This manual is for GNU libmicrohttpd (version 1.0.5, 24 September 2024), +This manual is for GNU libmicrohttpd (version 1.0.6, 24 September 2024), a library for embedding an HTTP(S) server into C applications. Copyright © 2007-2019 Christian Grothoff diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/doc/stamp-vti new/libmicrohttpd-1.0.6/doc/stamp-vti --- old/libmicrohttpd-1.0.5/doc/stamp-vti 2026-04-16 10:38:16.000000000 +0200 +++ new/libmicrohttpd-1.0.6/doc/stamp-vti 2026-07-08 12:49:08.000000000 +0200 @@ -1,4 +1,4 @@ @set UPDATED 24 September 2024 @set UPDATED-MONTH September 2024 -@set EDITION 1.0.5 -@set VERSION 1.0.5 +@set EDITION 1.0.6 +@set VERSION 1.0.6 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/doc/version.texi new/libmicrohttpd-1.0.6/doc/version.texi --- old/libmicrohttpd-1.0.5/doc/version.texi 2026-04-16 10:38:16.000000000 +0200 +++ new/libmicrohttpd-1.0.6/doc/version.texi 2026-07-08 12:49:08.000000000 +0200 @@ -1,4 +1,4 @@ @set UPDATED 24 September 2024 @set UPDATED-MONTH September 2024 -@set EDITION 1.0.5 -@set VERSION 1.0.5 +@set EDITION 1.0.6 +@set VERSION 1.0.6 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/po/configure.ac new/libmicrohttpd-1.0.6/po/configure.ac --- old/libmicrohttpd-1.0.5/po/configure.ac 2026-04-16 10:36:22.000000000 +0200 +++ new/libmicrohttpd-1.0.6/po/configure.ac 2026-07-08 12:46:49.000000000 +0200 @@ -1,4 +1,4 @@ -AC_INIT([GNU libmicrohttpd],[1.0.5],[[email protected]]) +AC_INIT([GNU libmicrohttpd],[1.0.6],[[email protected]]) CONFIG_STATUS='./po-config.status' AC_CONFIG_AUX_DIR([build-aux]) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/po-configure new/libmicrohttpd-1.0.6/po-configure --- old/libmicrohttpd-1.0.5/po-configure 2026-04-16 10:36:23.000000000 +0200 +++ new/libmicrohttpd-1.0.6/po-configure 2026-07-08 12:46:50.000000000 +0200 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.72 for GNU libmicrohttpd 1.0.5. +# Generated by GNU Autoconf 2.72 for GNU libmicrohttpd 1.0.6. # # Report bugs to <[email protected]>. # @@ -604,8 +604,8 @@ # Identity of this package. PACKAGE_NAME='GNU libmicrohttpd' PACKAGE_TARNAME='libmicrohttpd' -PACKAGE_VERSION='1.0.5' -PACKAGE_STRING='GNU libmicrohttpd 1.0.5' +PACKAGE_VERSION='1.0.6' +PACKAGE_STRING='GNU libmicrohttpd 1.0.6' PACKAGE_BUGREPORT='[email protected]' PACKAGE_URL='https://www.gnu.org/software/libmicrohttpd/' @@ -1264,7 +1264,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -'configure' configures GNU libmicrohttpd 1.0.5 to adapt to many kinds of systems. +'configure' configures GNU libmicrohttpd 1.0.6 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1330,7 +1330,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of GNU libmicrohttpd 1.0.5:";; + short | recursive ) echo "Configuration of GNU libmicrohttpd 1.0.6:";; esac cat <<\_ACEOF @@ -1438,7 +1438,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -GNU libmicrohttpd configure 1.0.5 +GNU libmicrohttpd configure 1.0.6 generated by GNU Autoconf 2.72 Copyright (C) 2023 Free Software Foundation, Inc. @@ -1646,7 +1646,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by GNU libmicrohttpd $as_me 1.0.5, which was +It was created by GNU libmicrohttpd $as_me 1.0.6, which was generated by GNU Autoconf 2.72. Invocation command line was $ $0$ac_configure_args_raw @@ -7308,7 +7308,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by GNU libmicrohttpd $as_me 1.0.5, which was +This file was extended by GNU libmicrohttpd $as_me 1.0.6, which was generated by GNU Autoconf 2.72. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -7369,7 +7369,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config='$ac_cs_config_escaped' ac_cs_version="\\ -GNU libmicrohttpd config.status 1.0.5 +GNU libmicrohttpd config.status 1.0.6 configured by $0, generated by GNU Autoconf 2.72, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/include/microhttpd.h new/libmicrohttpd-1.0.6/src/include/microhttpd.h --- old/libmicrohttpd-1.0.5/src/include/microhttpd.h 2026-04-16 10:01:15.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/include/microhttpd.h 2026-07-08 12:46:35.000000000 +0200 @@ -101,7 +101,7 @@ * they are parsed as decimal numbers. * Example: 0x01093001 = 1.9.30-1. */ -#define MHD_VERSION 0x01000500 +#define MHD_VERSION 0x01000600 /* If generic headers don't work on your platform, include headers which define 'va_list', 'size_t', 'ssize_t', 'intptr_t', 'off_t', diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/connection.c new/libmicrohttpd-1.0.6/src/microhttpd/connection.c --- old/libmicrohttpd-1.0.5/src/microhttpd/connection.c 2026-04-16 10:00:25.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/connection.c 2026-07-08 12:32:01.000000000 +0200 @@ -972,7 +972,7 @@ struct MHD_HTTP_Req_Header *pos; pos = MHD_connection_alloc_memory_ (connection, - sizeof (struct MHD_HTTP_Res_Header)); + sizeof (struct MHD_HTTP_Req_Header)); if (NULL == pos) return MHD_NO; pos->header = key; @@ -981,6 +981,7 @@ pos->value_size = value_size; pos->kind = kind; pos->next = NULL; + pos->prev = NULL; /* append 'pos' to the linked list of headers */ if (NULL == connection->rq.headers_received_tail) { @@ -1593,7 +1594,7 @@ ssize_t ret; struct MHD_Response *response; static const size_t max_chunk = 0xFFFFFF; - char chunk_hdr[6]; /* 6: max strlen of "FFFFFF" */ + char chunk_hdr[7]; /* 6: max strlen of "FFFFFF" */ /* "FFFFFF" + "\r\n" */ static const size_t max_chunk_hdr_len = sizeof(chunk_hdr) + 2; /* "FFFFFF" + "\r\n" + "\r\n" (chunk termination) */ @@ -1730,7 +1731,8 @@ "more data than requested).")); return MHD_NO; } - chunk_hdr_len = MHD_uint32_to_strx ((uint32_t) ret, chunk_hdr, + chunk_hdr_len = MHD_uint32_to_strx ((uint32_t) ret, + chunk_hdr, sizeof(chunk_hdr)); mhd_assert (chunk_hdr_len != 0); mhd_assert (chunk_hdr_len < sizeof(chunk_hdr)); @@ -2495,9 +2497,13 @@ } /* Add user header */ - el_size = hdr->header_size + 2 + hdr->value_size + 2; - if (buf_size < *ppos + el_size) + /* Check available space using subtractions to avoid integer overflow. + '4' is two colons/space plus the final CRLF. */ + if ( (buf_size - *ppos < 4) || + (buf_size - *ppos - 4 < hdr->header_size) || + (buf_size - *ppos - 4 - hdr->header_size < hdr->value_size) ) return false; + el_size = hdr->header_size + 2 + hdr->value_size + 2; memcpy (buf + *ppos, hdr->header, hdr->header_size); (*ppos) += hdr->header_size; buf[(*ppos)++] = ':'; @@ -2814,9 +2820,12 @@ { size_t new_used_size; /* resulting size with this header */ /* '4' is colon, space, linefeeds */ - new_used_size = used_size + pos->header_size + pos->value_size + 4; - if (new_used_size > buf_size) + /* Check available space using subtractions to avoid integer overflow. */ + if ( (buf_size - used_size < 4) || + (buf_size - used_size - 4 < pos->header_size) || + (buf_size - used_size - 4 - pos->header_size < pos->value_size) ) return MHD_NO; + new_used_size = used_size + pos->header_size + pos->value_size + 4; memcpy (buf + used_size, pos->header, pos->header_size); used_size += pos->header_size; buf[used_size++] = ':'; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/daemon.c new/libmicrohttpd-1.0.6/src/microhttpd/daemon.c --- old/libmicrohttpd-1.0.5/src/microhttpd/daemon.c 2026-04-02 00:24:48.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/daemon.c 2026-07-08 12:32:01.000000000 +0200 @@ -959,9 +959,9 @@ if (0 != (p[1].revents & POLLOUT)) urh->mhd.celi |= MHD_EPOLL_STATE_WRITE_READY; if (0 != (p[1].revents & POLLHUP)) - urh->mhd.celi |= MHD_EPOLL_STATE_ERROR; - if (0 != (p[1].revents & MHD_POLL_REVENTS_ERRROR)) urh->mhd.celi |= MHD_EPOLL_STATE_READ_READY | MHD_EPOLL_STATE_WRITE_READY; + if (0 != (p[1].revents & MHD_POLL_REVENTS_ERRROR)) + urh->mhd.celi |= MHD_EPOLL_STATE_ERROR; } @@ -1145,7 +1145,7 @@ _ ("Maximum socket in select set: %d\n"), *max_fd); #endif -#endif /* HTTPS_SUPPORT && UPGRADE_SUPPORT */ +#endif return result; } @@ -2470,21 +2470,21 @@ &app_psk, &app_psk_size)) return -1; - if (NULL == (key->data = gnutls_malloc (app_psk_size))) + if (UINT_MAX < app_psk_size) { #ifdef HAVE_MESSAGES MHD_DLOG (daemon, - _ ("PSK authentication failed: gnutls_malloc failed to " \ - "allocate memory.\n")); + _ ("PSK authentication failed: PSK too long.\n")); #endif free (app_psk); return -1; } - if (UINT_MAX < app_psk_size) + if (NULL == (key->data = gnutls_malloc (app_psk_size))) { #ifdef HAVE_MESSAGES MHD_DLOG (daemon, - _ ("PSK authentication failed: PSK too long.\n")); + _ ("PSK authentication failed: gnutls_malloc failed to " \ + "allocate memory.\n")); #endif free (app_psk); return -1; @@ -4278,13 +4278,15 @@ earliest_deadline = pos->last_activity + pos->connection_timeout_ms; } - for (pos = daemon->manual_timeout_tail; NULL != pos; pos = pos->prevX) + for (pos = daemon->manual_timeout_tail; + NULL != pos; + pos = pos->prevX) { if (0 != pos->connection_timeout_ms) { if ( (NULL == earliest_tmot_conn) || - (earliest_deadline - pos->last_activity > - pos->connection_timeout_ms) ) + (earliest_deadline > + pos->last_activity + pos->connection_timeout_ms) ) { earliest_tmot_conn = pos; earliest_deadline = pos->last_activity + pos->connection_timeout_ms; @@ -8914,7 +8916,6 @@ #endif /* Free memory for this worker; cleanup below handles * all previously-created workers. */ - MHD_mutex_destroy_chk_ (&d->cleanup_connection_mutex); if (MHD_ITC_IS_VALID_ (d->itc)) MHD_itc_destroy_chk_ (d->itc); MHD_mutex_destroy_chk_ (&d->new_connections_mutex); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/digestauth.c new/libmicrohttpd-1.0.6/src/microhttpd/digestauth.c --- old/libmicrohttpd-1.0.5/src/microhttpd/digestauth.c 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/digestauth.c 2026-07-08 12:46:35.000000000 +0200 @@ -1291,6 +1291,8 @@ unif_buf_size += params->realm.value.len + 1; /* Add one for zero-termination */ info = (struct MHD_DigestAuthInfo *) MHD_calloc_ (1, (sizeof(struct MHD_DigestAuthInfo)) + unif_buf_size); + if (NULL == info) + return NULL; unif_buf_ptr = (uint8_t *) (info + 1); unif_buf_used = 0; @@ -1376,6 +1378,8 @@ uname_info = (struct MHD_DigestAuthUsernameInfo *) MHD_calloc_ (1, (sizeof(struct MHD_DigestAuthUsernameInfo)) + unif_buf_size); + if (NULL == uname_info) + return NULL; unif_buf_ptr = (uint8_t *) (uname_info + 1); unif_buf_used = get_rq_uname (params, uname_type, uname_info, unif_buf_ptr, unif_buf_size); @@ -2486,11 +2490,14 @@ mhd_assert (NULL != param->value.str); mhd_assert (0 != param->value.len); if (param->quoted) - return MHD_str_equal_quoted_bin_n (param->value.str, param->value.len, - str, str_len); + return MHD_str_equal_caseless_quoted_bin_n (param->value.str, + param->value.len, + str, + str_len); return (str_len == param->value.len) && - (0 == memcmp (str, param->value.str, str_len)); - + (MHD_str_equal_caseless_bin_n_ (str, + param->value.str, + str_len)); } @@ -2991,8 +2998,12 @@ digest_update_with_colon (da); } /* Update digest with H(A2) */ - MHD_bin_to_hex (hash2_bin, digest_size, tmp1); - digest_update (da, (const uint8_t *) tmp1, digest_size * 2); + MHD_bin_to_hex (hash2_bin, + digest_size, + tmp1); + digest_update (da, + (const uint8_t *) tmp1, + digest_size * 2); /* H(A2) is not needed anymore, reuse the buffer. * Use hash2_bin for the calculated response in binary form */ @@ -3002,7 +3013,9 @@ return MHD_DAUTH_ERROR; #endif /* MHD_DIGEST_HAS_EXT_ERROR */ - if (0 != memcmp (hash1_bin, hash2_bin, digest_size)) + if (0 != memcmp (hash1_bin, + hash2_bin, + digest_size)) return MHD_DAUTH_RESPONSE_WRONG; if (MHD_DAUTH_BIND_NONCE_NONE != daemon->dauth_bind_type) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/md5.h new/libmicrohttpd-1.0.6/src/microhttpd/md5.h --- old/libmicrohttpd-1.0.5/src/microhttpd/md5.h 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/md5.h 2026-07-08 12:32:01.000000000 +0200 @@ -49,7 +49,7 @@ #define MD5_HASH_SIZE_WORDS 4 /** - * Size of MD5 resulting digest in bytes. + * Size of MD5 resulting digest in words. * This is the final digest size, not intermediate hash. */ #define MD5_DIGEST_SIZE_WORDS MD5_HASH_SIZE_WORDS diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/memorypool.c new/libmicrohttpd-1.0.6/src/microhttpd/memorypool.c --- old/libmicrohttpd-1.0.5/src/microhttpd/memorypool.c 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/memorypool.c 2026-07-08 12:32:01.000000000 +0200 @@ -734,6 +734,7 @@ mhd_assert (pool->end >= pool->pos); mhd_assert (pool->size >= pool->end - pool->pos); mhd_assert (copy_bytes <= new_size); + mhd_assert (new_size <= pool->size); mhd_assert (copy_bytes <= pool->size); mhd_assert (keep != NULL || copy_bytes == 0); mhd_assert (keep == NULL || mp_ptr_le_ (pool->memory, keep)); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/mhd_md5_wrap.h new/libmicrohttpd-1.0.6/src/microhttpd/mhd_md5_wrap.h --- old/libmicrohttpd-1.0.5/src/microhttpd/mhd_md5_wrap.h 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/mhd_md5_wrap.h 2026-07-08 12:32:01.000000000 +0200 @@ -92,7 +92,7 @@ /* Sanity checks */ #if ! defined(MHD_MD5_HAS_FINISH_RESET) && ! defined(MHD_MD5_HAS_FINISH) -#error Required at least one of MHD_MD5_finish_reset(), MHD_MD5_finish_reset() +#error Required at least one of MHD_MD5_finish_reset(), MHD_MD5_finish() #endif /* ! MHD_MD5_HAS_FINISH_RESET && ! MHD_MD5_HAS_FINISH */ #endif /* MHD_MD5_WRAP_H */ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/mhd_mono_clock.c new/libmicrohttpd-1.0.6/src/microhttpd/mhd_mono_clock.c --- old/libmicrohttpd-1.0.5/src/microhttpd/mhd_mono_clock.c 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/mhd_mono_clock.c 2026-07-08 12:32:01.000000000 +0200 @@ -470,11 +470,15 @@ { LARGE_INTEGER perf_counter; uint64_t num_ticks; + uint64_t p1k; QueryPerformanceCounter (&perf_counter); /* never fail on XP and later */ num_ticks = (uint64_t) (perf_counter.QuadPart - perf_start); + p1k = perf_freq / 1000; + if (0 == p1k) + p1k = 1; /* guard against DivBy0 if perf_freq < 1k */ return ((num_ticks / perf_freq) * 1000) - + ((num_ticks % perf_freq) / (perf_freq / 1000)); + + ((num_ticks % perf_freq) / p1k); } #endif /* _WIN32_WINNT < 0x0600 */ #endif /* _WIN32 */ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/mhd_sha256_wrap.h new/libmicrohttpd-1.0.6/src/microhttpd/mhd_sha256_wrap.h --- old/libmicrohttpd-1.0.5/src/microhttpd/mhd_sha256_wrap.h 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/mhd_sha256_wrap.h 2026-07-08 12:32:01.000000000 +0200 @@ -28,7 +28,6 @@ #define MHD_SHA256_WRAP_H 1 #include "mhd_options.h" -#include "mhd_options.h" #ifndef MHD_SHA256_SUPPORT #error This file must be used only when SHA-256 is enabled #endif @@ -48,7 +47,7 @@ #ifndef SHA256_DIGEST_STRING_SIZE /** - * Size of MD5 digest string in chars including termination NUL. + * Size of SHA256 digest string in chars including termination NUL. */ #define SHA256_DIGEST_STRING_SIZE ((SHA256_DIGEST_SIZE) * 2 + 1) #endif /* ! SHA256_DIGEST_STRING_SIZE */ @@ -78,7 +77,7 @@ */ #define MHD_SHA256_reset(ctx) MHD_SHA256_init(ctx) /** - * Finalise MD5 calculation, return digest, reset hash calculation. + * Finalise SHA256 calculation, return digest, reset hash calculation. */ #define MHD_SHA256_finish_reset(ctx,digest) MHD_SHA256_finish(ctx,digest), \ MHD_SHA256_reset(ctx) @@ -94,7 +93,7 @@ /* Sanity checks */ #if ! defined(MHD_SHA256_HAS_FINISH_RESET) && ! defined(MHD_SHA256_HAS_FINISH) -#error Required MHD_SHA256_finish_reset() or MHD_SHA256_finish_reset() +#error Required MHD_SHA256_finish_reset() or MHD_SHA256_finish() #endif /* ! MHD_SHA256_HAS_FINISH_RESET && ! MHD_SHA256_HAS_FINISH */ #endif /* MHD_SHA256_WRAP_H */ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/mhd_str.c new/libmicrohttpd-1.0.6/src/microhttpd/mhd_str.c --- old/libmicrohttpd-1.0.5/src/microhttpd/mhd_str.c 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/mhd_str.c 2026-07-08 12:32:01.000000000 +0200 @@ -872,7 +872,7 @@ mhd_assert (NULL == memchr (token, ',', token_len)); mhd_assert (0 <= *buf_size); - if (SSIZE_MAX <= ((str_len / 2) * 3 + 3)) + if ((str_len / 2) >= (((size_t) SSIZE_MAX - 1) / 3)) { /* The return value may overflow, refuse */ *buf_size = (ssize_t) -1; @@ -1773,9 +1773,8 @@ const char chr = pct_encoded[r]; if ('%' == chr) { - if (2 > pct_encoded_len - r) + if (3 > pct_encoded_len - r) return 0; - else { const char c1 = pct_encoded[++r]; const char c2 = pct_encoded[++r]; @@ -1805,9 +1804,8 @@ return 0; if ('%' == chr) { - if (2 > pct_encoded_len - r) + if (3 > pct_encoded_len - r) return 0; - else { const char c1 = pct_encoded[++r]; const char c2 = pct_encoded[++r]; @@ -1853,7 +1851,7 @@ const char chr = pct_encoded[r]; if ('%' == chr) { - if (2 > pct_encoded_len - r) + if (3 > pct_encoded_len - r) { if (NULL != broken_encoding) *broken_encoding = true; @@ -1897,7 +1895,7 @@ return 0; if ('%' == chr) { - if (2 > pct_encoded_len - r) + if (3 > pct_encoded_len - r) { if (NULL != broken_encoding) *broken_encoding = true; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/postprocessor.c new/libmicrohttpd-1.0.6/src/microhttpd/postprocessor.c --- old/libmicrohttpd-1.0.5/src/microhttpd/postprocessor.c 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/postprocessor.c 2026-07-08 12:32:01.000000000 +0200 @@ -532,7 +532,8 @@ mhd_assert (end_key >= start_key); key_len = (size_t) (end_key - start_key); mhd_assert (0 != key_len); /* it must be always non-zero here */ - if (pp->buffer_pos + key_len >= pp->buffer_size) + if ( (pp->buffer_pos + key_len >= pp->buffer_size) || + (pp->buffer_pos + key_len < pp->buffer_pos) ) { pp->state = PP_Error; return MHD_NO; @@ -594,16 +595,12 @@ { if (NULL != *suffix) return MHD_NO; - while (0 != *line) + if (MHD_str_equal_caseless_n_ (prefix, + line, + prefix_len)) { - if (MHD_str_equal_caseless_n_ (prefix, - line, - prefix_len)) - { - *suffix = strdup (&line[prefix_len]); - return MHD_YES; - } - ++line; + *suffix = strdup (&line[prefix_len]); + return MHD_YES; } return MHD_NO; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/response.c new/libmicrohttpd-1.0.6/src/microhttpd/response.c --- old/libmicrohttpd-1.0.5/src/microhttpd/response.c 2025-03-02 00:25:48.000000000 +0100 +++ new/libmicrohttpd-1.0.6/src/microhttpd/response.c 2026-07-08 12:32:01.000000000 +0200 @@ -304,7 +304,8 @@ if (NULL == content) return MHD_NO; - + if (NULL == header) + return MHD_NO; header_len = strlen (header); content_len = strlen (content); return add_response_entry_n (response, kind, header, @@ -352,8 +353,8 @@ key, key_len); already_has_close = (0 != (response->flags_auto & MHD_RAF_HAS_CONNECTION_CLOSE)); - mhd_assert (already_has_close == (0 == memcmp (hdr->value, "close", 5))); mhd_assert (NULL != hdr); + mhd_assert (already_has_close == (0 == memcmp (hdr->value, "close", 5))); } else { @@ -526,7 +527,9 @@ if (NULL == hdr) return MHD_NO; - if (! MHD_str_remove_tokens_caseless_ (hdr->value, &hdr->value_size, value, + if (! MHD_str_remove_tokens_caseless_ (hdr->value, + &hdr->value_size, + value, strlen (value))) return MHD_NO; if (0 == hdr->value_size) @@ -543,11 +546,13 @@ { hdr->value[hdr->value_size] = 0; /* Null-terminate the result */ if (0 != (response->flags_auto - & ~((enum MHD_ResponseAutoFlags) MHD_RAF_HAS_CONNECTION_CLOSE))) + & ((enum MHD_ResponseAutoFlags) MHD_RAF_HAS_CONNECTION_CLOSE))) { if (MHD_STATICSTR_LEN_ ("close") == hdr->value_size) { - if (0 != memcmp (hdr->value, "close", MHD_STATICSTR_LEN_ ("close"))) + if (0 != memcmp (hdr->value, + "close", + MHD_STATICSTR_LEN_ ("close"))) response->flags_auto &= ~((enum MHD_ResponseAutoFlags) MHD_RAF_HAS_CONNECTION_CLOSE); } @@ -1188,7 +1193,7 @@ buf, (MHD_SCKT_SEND_SIZE_) max); #else /* _WIN32 */ - if (UINT_MAX < max) + if (INT_MAX < max) max = INT_MAX; n = read (response->fd, buf, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/sha1.h new/libmicrohttpd-1.0.6/src/microhttpd/sha1.h --- old/libmicrohttpd-1.0.5/src/microhttpd/sha1.h 2025-03-02 00:25:51.000000000 +0100 +++ new/libmicrohttpd-1.0.6/src/microhttpd/sha1.h 2026-07-08 12:32:01.000000000 +0200 @@ -71,7 +71,7 @@ struct sha1_ctx { uint32_t H[_SHA1_DIGEST_LENGTH]; /**< Intermediate hash value / digest at end of calculation */ - uint8_t buffer[SHA1_BLOCK_SIZE]; /**< SHA256 input data buffer */ + uint8_t buffer[SHA1_BLOCK_SIZE]; /**< SHA1 input data buffer */ uint64_t count; /**< number of bytes, mod 2^64 */ }; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/sha256.c new/libmicrohttpd-1.0.6/src/microhttpd/sha256.c --- old/libmicrohttpd-1.0.5/src/microhttpd/sha256.c 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/sha256.c 2026-07-08 12:32:01.000000000 +0200 @@ -327,7 +327,7 @@ unsigned int t; /* K constants array. See FIPS PUB 180-4 paragraph 4.2.2 for K values. */ - static const uint32_t K[80] = + static const uint32_t K[64] = { UINT32_C (0x428a2f98), UINT32_C (0x71374491), UINT32_C (0xb5c0fbcf), UINT32_C (0xe9b5dba5), UINT32_C (0x3956c25b), UINT32_C (0x59f111f1), UINT32_C (0x923f82a4), UINT32_C (0xab1c5ed5), UINT32_C (0xd807aa98), @@ -466,7 +466,7 @@ /** * Finalise SHA256 calculation, return digest. * - * @param ctx_ must be a `struct Sha256Ctx *` + * @param ctx must be a `struct Sha256Ctx *` * @param[out] digest set to the hash, must be #SHA256_DIGEST_SIZE bytes */ void diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/sha256_ext.c new/libmicrohttpd-1.0.6/src/microhttpd/sha256_ext.c --- old/libmicrohttpd-1.0.5/src/microhttpd/sha256_ext.c 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/sha256_ext.c 2026-07-08 12:32:01.000000000 +0200 @@ -18,7 +18,7 @@ */ /** - * @file microhttpd/sha256_ext.h + * @file microhttpd/sha256_ext.c * @brief Wrapper for SHA-256 calculation performed by TLS library * @author Karlson2k (Evgeny Grin) */ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/microhttpd/sha512_256.h new/libmicrohttpd-1.0.6/src/microhttpd/sha512_256.h --- old/libmicrohttpd-1.0.5/src/microhttpd/sha512_256.h 2025-07-14 16:48:33.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/microhttpd/sha512_256.h 2026-07-08 12:32:01.000000000 +0200 @@ -50,7 +50,7 @@ #define SHA512_256_HASH_SIZE_WORDS 8 /** - * Size of SHA-512/256 resulting digest in bytes. + * Size of SHA-512/256 resulting digest in words. * This is the final digest size, not intermediate hash. */ #define SHA512_256_DIGEST_SIZE_WORDS (SHA512_256_HASH_SIZE_WORDS / 2) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/src/tools/perf_replies.c new/libmicrohttpd-1.0.6/src/tools/perf_replies.c --- old/libmicrohttpd-1.0.5/src/tools/perf_replies.c 2025-07-14 16:48:36.000000000 +0200 +++ new/libmicrohttpd-1.0.6/src/tools/perf_replies.c 2026-07-08 12:46:35.000000000 +0200 @@ -361,7 +361,6 @@ struct PerfRepl_parameters { - unsigned int port; int all_cpus; unsigned int threads; int thread_per_conn; @@ -384,29 +383,7 @@ int version; }; -static struct PerfRepl_parameters tool_params = { - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0, - 0 -}; +static struct PerfRepl_parameters tool_params; static enum PerfRepl_param_result @@ -1208,10 +1185,10 @@ static void check_param_port (void) { - if (0 != tool_params.port) + if (0 != mhd_port) return; if (MHD_NO == MHD_is_feature_supported (MHD_FEATURE_AUTODETECT_BIND_PORT)) - tool_params.port = PERF_REPL_PORT_FALLBACK; + mhd_port = PERF_REPL_PORT_FALLBACK; } @@ -1978,11 +1955,13 @@ } if (1) { - struct MHD_OptionItem option = - { MHD_OPTION_END, 0, NULL }; - opt_arr[opt_count] = option; + struct MHD_OptionItem option = { + MHD_OPTION_END, 0, NULL + }; + if (opt_count >= (sizeof(opt_arr) / sizeof(opt_arr[0]))) abort (); + opt_arr[opt_count] = option; } d = MHD_start_daemon (flags, mhd_port, NULL, NULL, reply_func, NULL, MHD_OPTION_ARRAY, opt_arr, MHD_OPTION_END); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/libmicrohttpd-1.0.5/w32/common/microhttpd_dll_res_vc.rc new/libmicrohttpd-1.0.6/w32/common/microhttpd_dll_res_vc.rc --- old/libmicrohttpd-1.0.5/w32/common/microhttpd_dll_res_vc.rc 2026-04-16 10:01:26.000000000 +0200 +++ new/libmicrohttpd-1.0.6/w32/common/microhttpd_dll_res_vc.rc 2026-07-08 12:46:49.000000000 +0200 @@ -4,8 +4,8 @@ LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_US VS_VERSION_INFO VERSIONINFO - FILEVERSION 1,0,5,0 - PRODUCTVERSION 1,0,5,0 + FILEVERSION 1,0,6,0 + PRODUCTVERSION 1,0,6,0 FILEFLAGSMASK VS_FFI_FILEFLAGSMASK #if defined(_DEBUG) FILEFLAGS VS_FF_DEBUG @@ -21,8 +21,8 @@ BLOCK "04090000" /* Lang = US English, Charset = ASCII */ BEGIN VALUE "ProductName", "GNU libmicrohttpd\0" - VALUE "ProductVersion", "1.0.5\0" - VALUE "FileVersion", "1.0.5\0" + VALUE "ProductVersion", "1.0.6\0" + VALUE "FileVersion", "1.0.6\0" VALUE "FileDescription", "GNU libmicrohttpd DLL for Windows (VC build)\0" VALUE "InternalName", "libmicrohttpd\0" #if defined(_DEBUG)
