[nginx-ru-announce] nginx-1.26.1

, gunzip, ssi, sub_filter или grpc_pass. *) Исправление: nginx не собирался gcc 14, если использовался параметр --with-atomic. Спасибо Edgar Bonet. *) Исправление: в HTTP/3. -- Sergey Kandaurov ___ nginx-ru-announce mailing list

[nginx-ru-announce] nginx security advisory (CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200)

директивы listen. Проблемам подвержен nginx 1.25.0-1.25.5, 1.26.0. Проблемы исправлены в nginx 1.27.0, 1.26.1. Спасибо Nils Bars из CISPA. -- Sergey Kandaurov ___ nginx-ru-announce mailing list nginx-ru-announce@nginx.org https://mailman.nginx.org

[nginx-ru-announce] nginx-1.27.0

. *) Исправления в HTTP/3. -- Sergey Kandaurov ___ nginx-ru-announce mailing list nginx-ru-announce@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-ru-announce

[nginx-announce] nginx security advisory (CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200)

. The issues affect nginx 1.25.0-1.25.5, 1.26.0. The issues are fixed in nginx 1.27.0, 1.26.1. Thanks to Nils Bars of CISPA. -- Sergey Kandaurov ___ nginx-announce mailing list nginx-announce@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-announce

[nginx-announce] nginx-1.26.1

uot;, or "grpc_pass" directives are used. *) Bugfix: nginx could not be built by gcc 14 if the --with-atomic option was used. Thanks to Edgar Bonet. *) Bugfix: in HTTP/3. -- Sergey Kandaurov ___ nginx-announce mailing list nginx-an

[nginx-announce] nginx-1.27.0

te" directives. *) Bugfix: reduced memory consumption for long-lived requests if "gzip", "gunzip", "ssi", "sub_filter", or "grpc_pass" directives are used. *) Bugfix: nginx could not be built by gcc 14 if the --with-atomic

nginx security advisory (CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200)

директивы listen. Проблемам подвержен nginx 1.25.0-1.25.5, 1.26.0. Проблемы исправлены в nginx 1.27.0, 1.26.1. Спасибо Nils Bars из CISPA. -- Sergey Kandaurov ___ nginx-ru mailing list nginx-ru@nginx.org https://mailman.nginx.org/mailman/listinfo

nginx-1.26.1

, gunzip, ssi, sub_filter или grpc_pass. *) Исправление: nginx не собирался gcc 14, если использовался параметр --with-atomic. Спасибо Edgar Bonet. *) Исправление: в HTTP/3. -- Sergey Kandaurov ___ nginx-ru mailing list nginx-ru

nginx-1.27.0

. *) Исправления в HTTP/3. -- Sergey Kandaurov ___ nginx-ru mailing list nginx-ru@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-ru

nginx security advisory (CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200)

. The issues affect nginx 1.25.0-1.25.5, 1.26.0. The issues are fixed in nginx 1.27.0, 1.26.1. Thanks to Nils Bars of CISPA. -- Sergey Kandaurov ___ nginx mailing list nginx@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx

nginx-1.26.1

uot;, or "grpc_pass" directives are used. *) Bugfix: nginx could not be built by gcc 14 if the --with-atomic option was used. Thanks to Edgar Bonet. *) Bugfix: in HTTP/3. -- Sergey Kandaurov ___ nginx mailing list nginx@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx

nginx-1.27.0

te" directives. *) Bugfix: reduced memory consumption for long-lived requests if "gzip", "gunzip", "ssi", "sub_filter", or "grpc_pass" directives are used. *) Bugfix: nginx could not be built by gcc 14 if the --with-atomic

[nginx] release-1.26.1 tag

details: https://hg.nginx.org/nginx/rev/dd5bc1844be3 branches: stable-1.26 changeset: 9268:dd5bc1844be3 user: Sergey Kandaurov date: Tue May 28 17:28:07 2024 +0400 description: release-1.26.1 tag diffstat: .hgtags | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diffs (8

[nginx] nginx-1.26.1-RELEASE

details: https://hg.nginx.org/nginx/rev/a63c124e34bc branches: stable-1.26 changeset: 9267:a63c124e34bc user: Sergey Kandaurov date: Tue May 28 17:26:54 2024 +0400 description: nginx-1.26.1-RELEASE diffstat: docs/xml/nginx/changes.xml | 56

[nginx] HTTP/3: fixed dynamic table overflow.

details: https://hg.nginx.org/nginx/rev/ed593e26c79a branches: stable-1.26 changeset: 9263:ed593e26c79a user: Roman Arutyunyan date: Tue May 28 17:18:50 2024 +0400 description: HTTP/3: fixed dynamic table overflow. While inserting a new entry into the dynamic table, first the entry

[nginx] HTTP/3: fixed handling of zero-length literal field line.

details: https://hg.nginx.org/nginx/rev/5b3f409d55f0 branches: stable-1.26 changeset: 9266:5b3f409d55f0 user: Sergey Kandaurov date: Tue May 28 17:20:45 2024 +0400 description: HTTP/3: fixed handling of zero-length literal field line. Previously, st->value was passed with NULL d

[nginx] QUIC: ignore CRYPTO frames after handshake completion.

details: https://hg.nginx.org/nginx/rev/e4e9d7003b31 branches: stable-1.26 changeset: 9264:e4e9d7003b31 user: Roman Arutyunyan date: Tue May 28 17:19:08 2024 +0400 description: QUIC: ignore CRYPTO frames after handshake completion. Sending handshake-level CRYPTO frames after the

[nginx] QUIC: ngx_quic_buffer_t use-after-free protection.

details: https://hg.nginx.org/nginx/rev/b32b516f36b1 branches: stable-1.26 changeset: 9265:b32b516f36b1 user: Roman Arutyunyan date: Tue May 28 17:19:21 2024 +0400 description: QUIC: ngx_quic_buffer_t use-after-free protection. Previously the last chain field of ngx_quic_buffer_t

[nginx] HTTP/3: decoder stream pre-creation.

details: https://hg.nginx.org/nginx/rev/08f8e9c33a08 branches: stable-1.26 changeset: 9262:08f8e9c33a08 user: Roman Arutyunyan date: Tue May 28 17:18:28 2024 +0400 description: HTTP/3: decoder stream pre-creation. Previously a decoder stream was created on demand for sending Section

[nginx] QUIC: client transport parameter data length checking.

details: https://hg.nginx.org/nginx/rev/04bc350b2919 branches: stable-1.26 changeset: 9261:04bc350b2919 user: Sergey Kandaurov date: Tue May 28 17:17:19 2024 +0400 description: QUIC: client transport parameter data length checking. diffstat: src/event/quic

[nginx] Optimized chain link usage (ticket #2614).

details: https://hg.nginx.org/nginx/rev/b317a71f75ae branches: stable-1.26 changeset: 9260:b317a71f75ae user: Roman Arutyunyan date: Thu May 23 19:15:38 2024 +0400 description: Optimized chain link usage (ticket #2614). Previously chain links could sometimes be dropped instead of

[nginx] Configure: fixed building libatomic test.

details: https://hg.nginx.org/nginx/rev/31fe21f04103 branches: stable-1.26 changeset: 9259:31fe21f04103 user: Edgar Bonet date: Thu May 16 11:15:10 2024 +0200 description: Configure: fixed building libatomic test. Using "long *" instead of "AO_t *" leads either to

[nginx] Version bump.

details: https://hg.nginx.org/nginx/rev/73770db03e73 branches: stable-1.26 changeset: 9258:73770db03e73 user: Sergey Kandaurov date: Tue May 28 17:14:08 2024 +0400 description: Version bump. diffstat: src/core/nginx.h | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions

[nginx] release-1.27.0 tag

details: https://hg.nginx.org/nginx/rev/02e9411009b9 branches: changeset: 9257:02e9411009b9 user: Sergey Kandaurov date: Tue May 28 17:22:30 2024 +0400 description: release-1.27.0 tag diffstat: .hgtags | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diffs (8 lines

[nginx] nginx-1.27.0-RELEASE

details: https://hg.nginx.org/nginx/rev/2166e329fb4e branches: changeset: 9256:2166e329fb4e user: Sergey Kandaurov date: Tue May 28 17:19:38 2024 +0400 description: nginx-1.27.0-RELEASE diffstat: docs/xml/nginx/changes.xml | 68 ++ 1

[nginx] HTTP/3: fixed handling of zero-length literal field line.

details: https://hg.nginx.org/nginx/rev/ebdeca3b392b branches: changeset: 9255:ebdeca3b392b user: Sergey Kandaurov date: Tue May 28 17:20:45 2024 +0400 description: HTTP/3: fixed handling of zero-length literal field line. Previously, st->value was passed with NULL data poin

[nginx] QUIC: ngx_quic_buffer_t use-after-free protection.

details: https://hg.nginx.org/nginx/rev/55a6a45b7fa9 branches: changeset: 9254:55a6a45b7fa9 user: Roman Arutyunyan date: Tue May 28 17:19:21 2024 +0400 description: QUIC: ngx_quic_buffer_t use-after-free protection. Previously the last chain field of ngx_quic_buffer_t could still

[nginx] QUIC: ignore CRYPTO frames after handshake completion.

details: https://hg.nginx.org/nginx/rev/cf66916bc6a3 branches: changeset: 9253:cf66916bc6a3 user: Roman Arutyunyan date: Tue May 28 17:19:08 2024 +0400 description: QUIC: ignore CRYPTO frames after handshake completion. Sending handshake-level CRYPTO frames after the client's

[nginx] HTTP/3: fixed dynamic table overflow.

details: https://hg.nginx.org/nginx/rev/a0cbbdeebccd branches: changeset: 9252:a0cbbdeebccd user: Roman Arutyunyan date: Tue May 28 17:18:50 2024 +0400 description: HTTP/3: fixed dynamic table overflow. While inserting a new entry into the dynamic table, first the entry is added,

[nginx] HTTP/3: decoder stream pre-creation.

details: https://hg.nginx.org/nginx/rev/387470a87c8a branches: changeset: 9251:387470a87c8a user: Roman Arutyunyan date: Tue May 28 17:18:28 2024 +0400 description: HTTP/3: decoder stream pre-creation. Previously a decoder stream was created on demand for sending Section

[nginx] QUIC: client transport parameter data length checking.

details: https://hg.nginx.org/nginx/rev/371b6a7d0673 branches: changeset: 9250:371b6a7d0673 user: Sergey Kandaurov date: Tue May 28 17:17:19 2024 +0400 description: QUIC: client transport parameter data length checking. diffstat: src/event/quic/ngx_event_quic_transport.c | 8

[nginx] Upstream: variables support in proxy_limit_rate and friends.

details: https://hg.nginx.org/nginx/rev/2e9588d65dd9 branches: changeset: 9249:2e9588d65dd9 user: J Carter date: Sat Nov 25 21:57:09 2023 + description: Upstream: variables support in proxy_limit_rate and friends. diffstat: src/http/modules/ngx_http_fastcgi_module.c | 8

Re: I think I found a fix for the memory leak issue on gRPC module

On Mon, May 27, 2024 at 02:06:58PM +0400, Roman Arutyunyan wrote: > Hi, > # HG changeset patch > # User Roman Arutyunyan > # Date 1716477338 -14400 > # Thu May 23 19:15:38 2024 +0400 > # Node ID f7d53c7f70140b1cd1eaf51ce4346a873692f879 > # Parent f58b6f6362387eeace46043a6fc0bceb56a6786a >

[PATCH 2 of 2] Stream: do not reallocate a parsed SNI host

# HG changeset patch # User Sergey Kandaurov # Date 1716805288 -14400 # Mon May 27 14:21:28 2024 +0400 # Node ID 88fa18a0f05f7dead38a127bb24e5cf861f3d66d # Parent e82a7318ed48fdbc1273771bc96357e9dc232975 Stream: do not reallocate a parsed SNI host. Unlike in http SNI callback, it doesn't

[PATCH 1 of 2] Rewritten host header validation to follow generic parsing rules

# HG changeset patch # User Sergey Kandaurov # Date 1716805272 -14400 # Mon May 27 14:21:12 2024 +0400 # Node ID e82a7318ed48fdbc1273771bc96357e9dc232975 # Parent f58b6f6362387eeace46043a6fc0bceb56a6786a Rewritten host header validation to follow generic parsing rules. It now uses

Re: I think I found a fix for the memory leak issue on gRPC module

On Wed, May 22, 2024 at 06:14:26PM +0400, Roman Arutyunyan wrote: > Hi, > > Indeed there's a problem there. We have similar problems in other places as > well. Attached is a patch that fixes all I could find. > > I did some testing for the sub_filter with the following config. Small >

Re: [PATCH] Tests: ssl_engine_keys.t improved

. ">>$d/openssl.out 2>&1"; > + > + note("SOFTHSM2_CONF=$d/softhsm2.conf OPENSSL_CONF=$d/openssl.conf > $cmd"); > + > + my $openssl_call_result = system($cmd); > + > + plan(skip_all => "Can'

[nginx] Configure: fixed building libatomic test.

details: https://hg.nginx.org/nginx/rev/f58b6f636238 branches: changeset: 9247:f58b6f636238 user: Edgar Bonet date: Thu May 16 11:15:10 2024 +0200 description: Configure: fixed building libatomic test. Using "long *" instead of "AO_t *" leads either to -Wincompatible-pointer-types

Re: [PATCH] Fix compile error in configure script

On Sat, May 18, 2024 at 02:43:52PM +0200, Edgar Bonet wrote: > Hello! > > Yesterday, I wrote: > > My understanding is that the compiler considers 'int' and 'long' to be > > incompatible types [... On ILP32,] 'size_t' being an 'unsigned int', > > it is incompatible with 'long'. > > > > On LP64

Re: [PATCH] Fix compile error in configure script

quot; > -ngx_feature_test="long n = 0; > +ngx_feature_test="AO_t n = 0; > if (!AO_compare_and_swap(, 0, 1)) > return 1; > if (AO_fetch_and_add(, 1) != 1) > ____

Re: [PATCH] Stream pass: disabled passing from or to udp

> On 3 May 2024, at 20:30, Roman Arutyunyan wrote: > > Hi, > > On Fri, May 03, 2024 at 08:24:16PM +0400, Sergey Kandaurov wrote: >> >>> On 26 Apr 2024, at 15:15, Roman Arutyunyan wrote: >>> >>> # HG changeset patch >>> # User Roman Ar

[nginx] SSL: fixed possible configuration overwrite loading "engine:" keys.

details: https://hg.nginx.org/nginx/rev/c4792b0f1976 branches: changeset: 9245:c4792b0f1976 user: Sergey Kandaurov date: Fri May 03 20:29:01 2024 +0400 description: SSL: fixed possible configuration overwrite loading "engine:" keys. When loading certificat

[nginx] HTTP/3: fixed handling of malformed request body length.

details: https://hg.nginx.org/nginx/rev/690f46d3bc1f branches: changeset: 9244:690f46d3bc1f user: Sergey Kandaurov date: Fri May 03 20:28:32 2024 +0400 description: HTTP/3: fixed handling of malformed request body length. Previously, a request body larger than declared in Content

[nginx] Version bump.

details: https://hg.nginx.org/nginx/rev/ff0312de0112 branches: changeset: 9243:ff0312de0112 user: Sergey Kandaurov date: Fri May 03 20:28:22 2024 +0400 description: Version bump. diffstat: src/core/nginx.h | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diffs (14

Re: [PATCH] Stream pass: disabled passing from or to udp

gt; +return NGX_DECLINED; > +} > + > if (!ls->wildcard) { > return ngx_cmp_sockaddr(ls->sockaddr, ls->socklen, > addr->sockaddr, addr->socklen, 1); The change is good. -- Sergey Kandaurov ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

[PATCH] SSL: fixed possible configuration overwrite loading "engine:" keys

# HG changeset patch # User Sergey Kandaurov # Date 1714670294 -14400 # Thu May 02 21:18:14 2024 +0400 # Node ID e00aeabf2b29b891891fd150a01c82b0763c57c0 # Parent 49dce50fad40bf09db81ca2a35983ecd7b740e43 SSL: fixed possible configuration overwrite loading "engine:" keys. Wh

Re: [PATCH] HTTP/3: fixed handling of malformed request body length

> On 22 Apr 2024, at 19:00, Sergey Kandaurov wrote: > > # HG changeset patch > # User Sergey Kandaurov > # Date 1713798017 -14400 > # Mon Apr 22 19:00:17 2024 +0400 > # Node ID 754e32eaca24ad751e2a94790e1afd55202c1aba > # Parent 9f84f2e49c624e82e054a2dcd4872311

[PATCH] HTTP/3: fixed handling of malformed request body length

# HG changeset patch # User Sergey Kandaurov # Date 1713798017 -14400 # Mon Apr 22 19:00:17 2024 +0400 # Node ID 754e32eaca24ad751e2a94790e1afd55202c1aba # Parent 9f84f2e49c624e82e054a2dcd48723119c44029c HTTP/3: fixed handling of malformed request body length. Previously, a request body

[PATCH] Detecting duplicate addresses in listen among different modules

# HG changeset patch # User Sergey Kandaurov # Date 1712349104 -14400 # Sat Apr 06 00:31:44 2024 +0400 # Node ID 5fe21225ab3105aeea5e381a5d39ec1d3cfc04e6 # Parent 47df39ea9e21c4359e0ca96dcc452f2bc8a82c44 Detecting duplicate addresses in listen among different modules. This is used

Re: [PATCH] Configure: fix "make install" when cross-compiling to Windows

1cccece9ec9e003b > # Parent dd95daa55cf6131a7e845edd6ad3b429bcef6f98 > Configure: fix "make install" when cross-compiling to Windows. > > Signed-off-by: Piotr Sikora Both patches for crossbuilding on win32 pushed, thanks. -- Sergey Kandaurov ___ ngi

Re: [PATCH] Configure: add support for Homebrew on Apple Silicon

> On 11 Mar 2024, at 19:14, Sergey Kandaurov wrote: > > >> On 8 Mar 2024, at 19:31, Piotr Sikora via nginx-devel >> wrote: >> >> Hi Sergey, >> >>> An obvious question is why do you need this change. Homebrew seems >>> to be qu

Re: [PATCH] Configure: set cache line sizes for more architectures

e > +NGX_MACH_CACHE_LINE=128 > +;; > + > +riscv64) > +have=NGX_ALIGNMENT value=16 . auto/define > +NGX_MACH_CACHE_LINE=64 > +;; > + > +s390x) > +have=NGX_ALIGNMENT value=16 . auto/define > + NG

Re: [PATCH] macOS: detect cache line size at runtime

with me. > >> style: this breaks a perfect indentation of two spaces after type; >> further, it appears to be unsorted by type; I'd put it after u_long > > Good catch, thanks! > >> This makes the following slight update to the patch. >> If you're okey with it, I wi

Re: [PATCH] Configure: link libcrypt when a feature using it is detected

was successfully linked >> : because libcrypt was added in a separate test for crypt(). > > That's fine with me. > > Best regards, > Piotr Sikora Pushed with the updated description, thanks. -- Sergey Kandaurov ___ nginx-devel ma

Re: [PATCH] Win32: fix unique file index calculations

_uniq(fi) (*(ngx_file_uniq_t *) &(fi)->nFileIndexHigh) > +#define ngx_file_uniq(fi) > \ > +(((ngx_file_uniq_t) (fi)->nFileIndexHigh << 32) | (fi)->nFileIndexLow) > > > /* 1164447360 is commented in src/os/win32

Re: [PATCH] Rewrite: fix "return" directive without response text

20:00:28 2024 > + > @@ -489,6 +489,7 @@ > } > > if (cf->args->nelts == 2) { > + ngx_str_set(>text.value, ""); > return NGX_CONF_OK; > } > Pushed, thanks. -- Sergey Kandaurov ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

Re: [PATCH] Core: fix conversion of IPv4-mapped IPv6 addresses

inaddr += p[13] << 16; >> inaddr += p[14] << 8; >> inaddr += p[15]; > > While this minimizes the diff and silences the error at hand, > I find my version more readable. > > But you're obviously welcome to commit eithe

Re: [PATCH] Geo: fix uninitialized memory access

send. > >> Also, I think we need more details about the >> uninitialized memory access. See updated patch. > > LGTM, thanks! > Pushed, thanks. -- Sergey Kandaurov ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

[nginx] Configure: allow cross-compiling to Windows using Clang.

details: https://hg.nginx.org/nginx/rev/99e7050ac886 branches: changeset: 9235:99e7050ac886 user: Piotr Sikora date: Mon Feb 26 20:00:48 2024 + description: Configure: allow cross-compiling to Windows using Clang. Signed-off-by: Piotr Sikora diffstat: auto/os/win32 | 2 +-

[nginx] Configure: fixed "make install" when cross-compiling to Windows.

details: https://hg.nginx.org/nginx/rev/c2e753d214b0 branches: changeset: 9234:c2e753d214b0 user: Piotr Sikora date: Mon Feb 26 20:00:46 2024 + description: Configure: fixed "make install" when cross-compiling to Windows. Signed-off-by: Piotr Sikora diffstat: auto/install |

[nginx] Configure: added support for Homebrew on Apple Silicon.

details: https://hg.nginx.org/nginx/rev/398495d816f0 branches: changeset: 9233:398495d816f0 user: Piotr Sikora date: Mon Feb 26 20:00:43 2024 + description: Configure: added support for Homebrew on Apple Silicon. Signed-off-by: Piotr Sikora diffstat: auto/lib/geoip/conf

[nginx] Configure: set cache line size for more architectures.

details: https://hg.nginx.org/nginx/rev/427aa785edf8 branches: changeset: 9232:427aa785edf8 user: Sergey Kandaurov date: Wed Mar 27 19:36:51 2024 +0400 description: Configure: set cache line size for more architectures. Based on a patch by Piotr Sikora. diffstat: auto/os/conf

[nginx] Detect cache line size at runtime on macOS.

details: https://hg.nginx.org/nginx/rev/61cd12c25878 branches: changeset: 9231:61cd12c25878 user: Piotr Sikora date: Mon Feb 26 20:00:40 2024 + description: Detect cache line size at runtime on macOS. Notably, Apple Silicon CPUs have 128 byte cache line size, which is twice the

[nginx] Configure: fixed Linux crypt_r() test to add libcrypt.

details: https://hg.nginx.org/nginx/rev/fb989e24c60a branches: changeset: 9230:fb989e24c60a user: Sergey Kandaurov date: Mon Feb 26 20:00:38 2024 + description: Configure: fixed Linux crypt_r() test to add libcrypt. Previously, the resulting binary was successfully linked

[nginx] Win32: fixed unique file index calculations.

details: https://hg.nginx.org/nginx/rev/000e2ded0a51 branches: changeset: 9229:000e2ded0a51 user: Piotr Sikora date: Mon Feb 26 20:00:35 2024 + description: Win32: fixed unique file index calculations. The old code was breaking strict aliasing rules. Signed-off-by: Piotr

[nginx] Rewrite: fixed "return" directive without response text.

details: https://hg.nginx.org/nginx/rev/dd4a570ff4ac branches: changeset: 9228:dd4a570ff4ac user: Piotr Sikora date: Mon Feb 26 20:00:28 2024 + description: Rewrite: fixed "return" directive without response text. Previously, the response text wasn't initialized and the rewrite

[nginx] Fixed undefined behaviour with IPv4-mapped IPv6 addresses.

details: https://hg.nginx.org/nginx/rev/f208413f307f branches: changeset: 9227:f208413f307f user: Sergey Kandaurov date: Mon Mar 18 17:14:30 2024 +0400 description: Fixed undefined behaviour with IPv4-mapped IPv6 addresses. Previously, it could result when left-shifting signed

[nginx] Geo: fixed uninitialized memory access.

details: https://hg.nginx.org/nginx/rev/687c8306746f branches: changeset: 9226:687c8306746f user: Piotr Sikora date: Thu Mar 14 18:37:20 2024 +0400 description: Geo: fixed uninitialized memory access. While copying ngx_http_variable_value_t structures to geo binary base in

Re: [PATCH] Documented accept_filter, deferred, setfib in stream listen

CCEPT сокета) на Linux (1.25.4). > + > + > + > bind > > > @@ -214,11 +249,12 @@ > bind только на *:порт. > Необходимо заметить, что в этом случае для определения адреса, на которой > пришло соединение, делается системный вызов getsockname. > -Если же используются

Re: [PATCH 2 of 2] SSL: add $ssl_curve when using AWS-LC

On Wed, Feb 28, 2024 at 01:22:15AM +, Piotr Sikora via nginx-devel wrote: > # HG changeset patch > # User Piotr Sikora > # Date 1708977632 0 > # Mon Feb 26 20:00:32 2024 + > # Branch patch009 > # Node ID dfffc67d286b788204f60701ef4179566d933a1b > # Parent

[nginx] Stream: $server_name.

details: https://hg.nginx.org/nginx/rev/96ff3f8b7e50 branches: changeset: 9225:96ff3f8b7e50 user: Sergey Kandaurov date: Fri Mar 22 18:39:50 2024 +0400 description: Stream: $server_name. diffstat: src/stream/ngx_stream_variables.c | 23 +++ 1 files changed

[PATCH] Stream: $server_name

# HG changeset patch # User Sergey Kandaurov # Date 178390 -14400 # Fri Mar 22 18:39:50 2024 +0400 # Node ID 96ff3f8b7e508a345c18bb1e1071f248f1e5a75c # Parent 6317e21a15e083a215b52480b8ef473fdfe34158 Stream: $server_name. diff --git a/src/stream/ngx_stream_variables.c b/src/stream

[nginx] Stream: moved fastopen compatibility check.

details: https://hg.nginx.org/nginx/rev/6317e21a15e0 branches: changeset: 9224:6317e21a15e0 user: Roman Arutyunyan date: Thu Jan 18 19:12:38 2024 +0400 description: Stream: moved fastopen compatibility check. The move makes the code look similar to the corresponding code in http

[nginx] Stream: the "setfib" parameter of the "listen" directive.

details: https://hg.nginx.org/nginx/rev/dd516985310f branches: changeset: 9223:dd516985310f user: Sergey Kandaurov date: Fri Mar 22 14:53:19 2024 +0400 description: Stream: the "setfib" parameter of the "listen" directive. The FreeBSD SO_SETFIB support. di

[nginx] Stream: the "accept_filter" parameter of the "listen" directive.

details: https://hg.nginx.org/nginx/rev/c78790d3d061 branches: changeset: 9222:c78790d3d061 user: Sergey Kandaurov date: Fri Mar 22 14:53:19 2024 +0400 description: Stream: the "accept_filter" parameter of the "listen" directive. The FreeBSD accept filters suppo

[nginx] Stream: the "deferred" parameter of the "listen" directive.

details: https://hg.nginx.org/nginx/rev/bed832296f5d branches: changeset: 9221:bed832296f5d user: Sergey Kandaurov date: Fri Mar 22 14:53:19 2024 +0400 description: Stream: the "deferred" parameter of the "listen" directive. The Linux TCP_DEFER_ACCEPT suppo

[nginx] Stream: reshuffled ngx_stream_listen_opt_t fields.

details: https://hg.nginx.org/nginx/rev/c8cf6b1cc82e branches: changeset: 9220:c8cf6b1cc82e user: Sergey Kandaurov date: Fri Mar 22 14:53:19 2024 +0400 description: Stream: reshuffled ngx_stream_listen_opt_t fields. In preparation for adding more parameters to the listen directive

[nginx] Overhauled some diagnostic messages akin to 1b05b9bbcebf.

details: https://hg.nginx.org/nginx/rev/71880e854bc7 branches: changeset: 9219:71880e854bc7 user: Sergey Kandaurov date: Fri Mar 22 14:51:14 2024 +0400 description: Overhauled some diagnostic messages akin to 1b05b9bbcebf. diffstat: src/http/modules/ngx_http_referer_module.c

[nginx] Stream: using ngx_stream_ssl_srv_conf_t *sscf naming convention.

details: https://hg.nginx.org/nginx/rev/fa75fccf7fa0 branches: changeset: 9218:fa75fccf7fa0 user: Sergey Kandaurov date: Fri Mar 22 14:18:51 2024 +0400 description: Stream: using ngx_stream_ssl_srv_conf_t *sscf naming convention. Originally, the stream module was developed based

Re: [PATCH] Configure: link libcrypt when a feature using it is detected

> +if [ $ngx_found = yes ]; then > +CRYPT_LIB="-lcrypt" > +fi > + > > ngx_include="sys/vfs.h"; . auto/include > -- Sergey Kandaurov ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

Re: [PATCH] macOS: detect cache line size at runtime

On Wed, Feb 28, 2024 at 01:24:06AM +, Piotr Sikora via nginx-devel wrote: > # HG changeset patch > # User Piotr Sikora > # Date 1708977640 0 > # Mon Feb 26 20:00:40 2024 + > # Branch patch015 > # Node ID f58bc1041ebca635517b919d58b49923bf24f76d > # Parent

Re: [PATCH] Core: fix build without libcrypt

int_t > ngx_libc_crypt(ngx_pool_t *pool, u_char *key, u_char *salt, u_char > **encrypted) > @@ -76,6 +76,14 @@ > return NGX_ERROR; > } > > +#else > + > +ngx_int_t > +ngx_libc_crypt(ngx_pool_t *pool, u_char *key, u_char *salt, u_char > **encrypted) > +{ > +return NGX_

Re: [PATCH] Core: fix conversion of IPv4-mapped IPv6 addresses

On Fri, Mar 15, 2024 at 08:12:50PM +0400, Sergey Kandaurov wrote: > > > On 28 Feb 2024, at 05:21, Piotr Sikora via nginx-devel > > wrote: > > > > # HG changeset patch > > # User Piotr Sikora > > # Date 1708977626 0 > > # Mon Feb 26 20:00:26 2

Re: [PATCH] Core: free connections and read/write events at shutdown

free() calls on win32), but this would require moving >> code that uses these connections afterwards to catch socket leaks.) > > Freeing memory in exit_process could result in use-after-free, since > cleanups for the cycle->pool might still access those connections. > Yep

Re: [PATCH] Core: fix conversion of IPv4-mapped IPv6 addresses

} else { >inaddr = INADDR_NONE; > diff -r 03e554997676 -r 5584232259d2 src/stream/ngx_stream_geoip_module.c > --- a/src/stream/ngx_stream_geoip_module.c Mon Feb 26 20:00:23 2024 + > +++ b/src/stream/ngx_stream_geoip_module.c Mon Feb 26 20:00:26 2024 + > @@ -236,10 +236,10 @@ >if (IN6_IS_ADDR_V4MAPPED(inaddr6)) { >p = inaddr6->s6_addr; > > -inaddr = p[12] << 24; > -inaddr += p[13] << 16; > -inaddr += p[14] << 8; > -inaddr += p[15]; > +inaddr = (in_addr_t) p[12] << 24; > +inaddr += (in_addr_t) p[13] << 16; > +inaddr += (in_addr_t) p[14] << 8; > +inaddr += (in_addr_t) p[15]; > >return inaddr; >} > ___ > nginx-devel mailing list > nginx-devel@nginx.org > https://mailman.nginx.org/mailman/listinfo/nginx-devel -- Sergey Kandaurov ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

Re: [PATCH] Avoiding mixed socket families in PROXY protocol v1 (ticket #2594)

On Mon, Mar 11, 2024 at 04:44:15PM +0400, Roman Arutyunyan wrote: > Hi, > > On Wed, Mar 06, 2024 at 06:50:26PM +0400, Sergey Kandaurov wrote: > > On Thu, Feb 22, 2024 at 07:17:26PM +0400, Roman Arutyunyan wrote: > > > Hi, > > > > > > On Thu, Feb 22

Re: [PATCH] Configure: add support for Homebrew on Apple Silicon

ault > [5] https://en.wikipedia.org/wiki/Apple_silicon > [6] https://docs.brew.sh/Homebrew-on-Linux > > Best regards, > Piotr Sikora > ___ > nginx-devel mailing list > nginx-devel@nginx.org > https://mailman.nginx.org/mailman/listinfo/nginx-devel -- Sergey Kandaurov ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

Re: [PATCH] Core: free connections and read/write events at shutdown

better to free the memory in the exit_process method to obey the ownership (this would also fix missing ngx_free() calls on win32), but this would require moving code that uses these connections afterwards to catch socket leaks.) -- Sergey Kandaurov ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

Re: [PATCH] Configure: add support for Homebrew on Apple Silicon

::CPU.arm Ruby language boolean to make the distinction. Further, given the smooth decay on Intel-based hardware, I'd reduce this just to "Homebrew". [..] -- Sergey Kandaurov ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

Re: [PATCH] Avoiding mixed socket families in PROXY protocol v1 (ticket #2594)

On Thu, Feb 22, 2024 at 07:17:26PM +0400, Roman Arutyunyan wrote: > Hi, > > On Thu, Feb 22, 2024 at 01:59:25AM +, J Carter wrote: > > Hello Roman, > > > > On Wed, 21 Feb 2024 17:29:52 +0400 > > Roman Arutyunyan wrote: > > > > > Hi, > > > > > > > > On Wed, Jan 24, 2024 at 12:03:06AM

Re: [PATCH 3 of 3] Stream: ngx_stream_pass_module

On Wed, Feb 28, 2024 at 06:22:34PM +0400, Roman Arutyunyan wrote: > Hi, > > On Wed, Feb 28, 2024 at 02:15:40PM +0400, Sergey Kandaurov wrote: > > On Wed, Feb 21, 2024 at 05:37:51PM +0400, Roman Arutyunyan wrote: > > > Hi, > > > > > > Attached is an i

Re: [PATCH 3 of 3] Stream: ngx_stream_pass_module

On Wed, Feb 21, 2024 at 05:37:51PM +0400, Roman Arutyunyan wrote: > Hi, > > On Tue, Feb 13, 2024 at 02:46:35PM +0400, Sergey Kandaurov wrote: > > > > > On 10 Nov 2023, at 14:07, Roman Arutyunyan wrote: > > > > > > # HG changeset patch > > &g

Re: [PATCH 1 of 2] Linux packages: removed Ubuntu 23.04 'lunar' due to EOL

On Wed, Feb 21, 2024 at 01:53:47PM -0800, Konstantin Pavlov wrote: > # HG changeset patch > # User Konstantin Pavlov > # Date 1708551797 28800 > # Wed Feb 21 13:43:17 2024 -0800 > # Node ID 98a4f772621c4f0751042ab0f7e1f2d4ba53556f > # Parent e10905e43fa1d5abfdbc0bb6e9bd6e188aad6421 > Linux

Re: Issues building Nginx using boringssl

be used in pure C programs. Someday they will hopefully fix that, meanwhile you may want to: - switch to C++ linker as described in the revision; - build libssl as a shared library (see BUILDING.md in sources); - use some other workarounds when linking with BoringSSL statically, such as explicit linkin

[nginx-ru-announce] nginx security advisory (CVE-2024-24989, CVE-2024-24990)

модулем ngx_http_v3_module (по умолчанию не собирается), если в конфигурационном файле используется параметр quic директивы listen. Проблеме подвержен nginx 1.25.0 - 1.25.3. Проблема исправлена в nginx 1.25.4. -- Sergey Kandaurov ___ nginx-ru-announce

nginx security advisory (CVE-2024-24989, CVE-2024-24990)

модулем ngx_http_v3_module (по умолчанию не собирается), если в конфигурационном файле используется параметр quic директивы listen. Проблеме подвержен nginx 1.25.0 - 1.25.3. Проблема исправлена в nginx 1.25.4. -- Sergey Kandaurov ___ nginx-ru mailing

[nginx-announce] nginx security advisory (CVE-2024-24989, CVE-2024-24990)

with the ngx_http_v3_module (not compiled by default) if the "quic" option of the "listen" directive is used in a configuration file. The issue affects nginx 1.25.0 - 1.25.3. The issue is fixed in nginx 1.25.4. -- Sergey Kandaurov __

nginx security advisory (CVE-2024-24989, CVE-2024-24990)

with the ngx_http_v3_module (not compiled by default) if the "quic" option of the "listen" directive is used in a configuration file. The issue affects nginx 1.25.0 - 1.25.3. The issue is fixed in nginx 1.25.4. -- Sergey Kandaurov __

[nginx-ru-announce] nginx-1.25.4

, если использовалось SSL-проксирование и директива image_filter, а ошибки с кодом 415 перенаправлялись с помощью директивы error_page. *) Исправления и улучшения в HTTP/3. -- Sergey Kandaurov ___ nginx-ru-announce mailing list nginx-ru

nginx-1.25.4

, если использовалось SSL-проксирование и директива image_filter, а ошибки с кодом 415 перенаправлялись с помощью директивы error_page. *) Исправления и улучшения в HTTP/3. -- Sergey Kandaurov ___ nginx-ru mailing list nginx-ru@nginx.org

  1   2   3   4   5   6   7   8   9   10   >