GitHub / haproxy/haproxy / commits
HAProxy Load Balancer's development branch (mirror of git.haproxy.org)
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| 091768ab | Revert "BUG/MEDIUM: dns: fix long loops in additional records parse on name f... | Christopher Faulet <c****t@h****m> | 20 days ago | |
| 20531202 | BUG/MEDIUM: qmux: do not crash on receiving an invalid first frame | Amaury Denoyelle <a****e@h****m> | 20 days ago | |
| cd652efe | BUG/MINOR: qmux: reject too large initial record | Amaury Denoyelle <a****e@h****m> | 20 days ago | |
| 8a8898ae | BUG/MEDIUM: qmux: do not crash on too large record | Amaury Denoyelle <a****e@h****m> | 20 days ago | |
| 15896211 | BUG/MEDIUM: cpu-topo: Enforce thread-hard-limit on policy |
Olivier Houchard <o****d@h****m>
Committed by: Olivier Houchard <c****t@c****g> |
20 days ago | |
| 31cd3d13 | BUG/MINOR: tcpcheck: Check LDAP response to not read more data than available | Christopher Faulet <c****t@h****m> | 20 days ago | |
| 88da61e2 | [RELEASE] Released version 3.4-dev14 | Willy Tarreau <w****@1****u> | 21 days ago | |
| 16446de1 | CLEANUP: mux-fcgi/mux-spop: Remove copy/pasted comment about slow realign | Christopher Faulet <c****t@h****m> | 21 days ago | |
| 010ab979 | BUG/MINOR: mux-spop: Use relative offset to compute contig data in demux buf | Christopher Faulet <c****t@h****m> | 21 days ago | |
| 1a5a3339 | BUG/MEDIUM: jwe: substitute random CEK on RSA1_5 decryption failure per RFC 7... |
Remi Tricot-Le Breton <r****n@h****m>
Committed by: Willy Tarreau <w****@1****u> |
21 days ago | |
| ce9371a7 | BUG/MINOR: quic: reject packet too short for HP decryption | Amaury Denoyelle <a****e@h****m> | 21 days ago | |
| 3ffbf553 | BUG/MINOR: mux-fcgi: Use relative offset to compute contig data in demux buf | Christopher Faulet <c****t@h****m> | 21 days ago | |
| 4e7518ed | BUG/MINOR: jwe: enforce GCM tag length to 128 bits |
Remi Tricot-Le Breton <r****n@h****m>
Committed by: Willy Tarreau <w****@1****u> |
21 days ago | |
| 3843f48f | BUG/MEDIUM: h1-htx: Sanitize parsing to properly handle upgrade requests | Christopher Faulet <c****t@h****m> | 21 days ago | |
| b238c080 | MINOR: h1: Add a H1M flag to specify a non-empty 'Upgrade:' header was parsed | Christopher Faulet <c****t@h****m> | 21 days ago | |
| 547c2e4e | MINOR: http: Add function to remove all occurrences of a value in a header | Christopher Faulet <c****t@h****m> | 21 days ago | |
| 2c0e633f | BUG/MINOR: qmux: do not crash on frame parsing issue | Amaury Denoyelle <a****e@h****m> | 21 days ago | |
| dfb6daca | BUG/MEDIUM: auth: fix unconfigured password NULL deref | William Lallemand <w****d@h****m> | 21 days ago | |
| f7130c0f | BUG/MINOR: h3: add missing break on rcv_buf() | Amaury Denoyelle <a****e@h****m> | 21 days ago | |
| 3ac082b2 | BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records | Christopher Faulet <c****t@h****m> | 21 days ago | |
| b4630720 | BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers | Willy Tarreau <w****@1****u> | 21 days ago | |
| 635652c5 | MINOR: haterm: do not emit a warning when not using SSL | Willy Tarreau <w****@1****u> | 21 days ago | |
| d8460a53 | BUG/MINOR: h3: reject client CANCEL_PUSH frame | Amaury Denoyelle <a****e@h****m> | 21 days ago | |
| 4a8bb2fe | BUG/MINOR: h3: adjust error on PUSH_PROMISE frame reception | Amaury Denoyelle <a****e@h****m> | 21 days ago | |
| 8e776206 | BUG/MINOR: h3: reject server push stream | Amaury Denoyelle <a****e@h****m> | 21 days ago | |
| 04811943 | MINOR: haterm: enable h3 for TCP bindings | Frederic Lecaille <f****e@h****m> | 21 days ago | |
| e4a5a641 | BUG/MINOR: h3: reject server MAX_PUSH_ID frame | Amaury Denoyelle <a****e@h****m> | 21 days ago | |
| 433cce7a | BUG/MEDIUM: h3: reject client push stream | Amaury Denoyelle <a****e@h****m> | 21 days ago | |
| 93f9ecbf | BUG/MINOR: addons/51d: NUL-terminate headers before passing them to Trie API | Willy Tarreau <w****@1****u> | 21 days ago | |
| 2a47cab7 | BUG/MINOR: resolvers: switch to a better PRNG for query IDs | Willy Tarreau <w****@1****u> | 21 days ago | |
| c41c731f | BUG/MINOR: ssl-hello: make use of the null-terminated servername | Willy Tarreau <w****@1****u> | 21 days ago | |
| 26539365 | BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_pa... | Willy Tarreau <w****@1****u> | 21 days ago | |
| 997c99df | BUG/MINOR: base64: return empty string for empty input in base64dec() | Willy Tarreau <w****@1****u> | 21 days ago | |
| 076655e1 | BUG/MINOR: http-ext: always check remaining data when reading rfc7239 nodeport | Willy Tarreau <w****@1****u> | 21 days ago | |
| 8cb0a0c5 | BUG/MEDIUM: acme: protect against risk of null-deref on connection failure | Willy Tarreau <w****@1****u> | 21 days ago | |
| e583b38c | BUG/MINOR: http-fetch: check against the whole token in get_http_auth() | Willy Tarreau <w****@1****u> | 21 days ago | |
| ffdc91c4 | BUG/MINOR: sample: request an extra output byte for the url_dec converter | Willy Tarreau <w****@1****u> | 21 days ago | |
| e8c9aabd | BUG/MINOR: haterm: fix the random suffix multiplication | Willy Tarreau <w****@1****u> | 22 days ago | |
| 73b5f0ee | MEDIUM: quic: use ha_random64_pair_hashed() to generate the QUIC retry tokens | Willy Tarreau <w****@1****u> | 22 days ago | |
| 7ac4d7d6 | MEDIUM: h1: use ha_random64_pair_hashed() for the WebSocket key | Willy Tarreau <w****@1****u> | 22 days ago | |
| f9328634 | MEDIUM: init: fall back to ha_random64_pair_hashed() for the cluster secret | Willy Tarreau <w****@1****u> | 22 days ago | |
| 85003563 | MEDIUM: tools: use the hashed random pair for UUID generation | Willy Tarreau <w****@1****u> | 22 days ago | |
| 9b6389c8 | BUG/MEDIUM: tools: insert an XXH64 layer on the PRNG output | Willy Tarreau <w****@1****u> | 22 days ago | |
| 26c3b3f4 | MINOR: tools: provide a function to generate a hashed random pair | Willy Tarreau <w****@1****u> | 22 days ago | |
| 4a9ec66f | MEDIUM: tools: switch the main PRNG to a thread-local xoshiro256** | Willy Tarreau <w****@1****u> | 22 days ago | |
| 85a833fe | BUG/MINOR: ssl-gencert: validate SNI characters to prevent SAN certificate in... | William Lallemand <w****d@h****m> | 22 days ago | |
| 007d5946 | BUILD: intops: mask the fail value in array_size_or_fail() | Willy Tarreau <w****@1****u> | 22 days ago | |
| 73472025 | BUG/MINOR: cache: also recognize directives in the form "token=" | Willy Tarreau <w****@1****u> | 23 days ago | |
| 8bdcc551 | BUG/MEDIUM: h1: limit status codes to 3 digits by default | Willy Tarreau <w****@1****u> | 23 days ago | |
| 5cb93282 | BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry() | Willy Tarreau <w****@1****u> | 23 days ago | |
| bbef74fb | BUG/MEDIUM: tcpcheck/spoe: bound the SPOP error code to valid values | Willy Tarreau <w****@1****u> | 23 days ago | |
| b9aaf3c1 | BUG/MEDIUM: h1: drop headers whose names contain invalid chars | Willy Tarreau <w****@1****u> | 23 days ago | |
| 60895184 | BUG/MEDIUM: regex: allocate a large enough pcre2 match for all matches | Willy Tarreau <w****@1****u> | 23 days ago | |
| 7d182a2e | BUG/MINOR: init: use more than ha_random64() for the cluster secret | Willy Tarreau <w****@1****u> | 23 days ago | |
| f62d0201 | BUG/MEDIUM: cache: fix a refcount leak for missed secondary entries | Willy Tarreau <w****@1****u> | 24 days ago | |
| c0e302fe | BUG/MINOR: dict: fix refcount race on insert collision | Willy Tarreau <w****@1****u> | 24 days ago | |
| 478e7e52 | BUG/MINOR: log: look for the end of priority before the end of the buffer | Willy Tarreau <w****@1****u> | 24 days ago | |
| f9088a5d | BUG/MEDIUM: log-forward: make sure the month is unsigned | Willy Tarreau <w****@1****u> | 24 days ago | |
| b78b023d | BUG/MINOR: sample: limit the be2hex converter's chunk size | Willy Tarreau <w****@1****u> | 24 days ago | |
| 8e1d33a6 | BUG/MINOR: mux-h2: validate HEADERS frame length before reading stream dep | Willy Tarreau <w****@1****u> | 24 days ago | |
| 49d6306d | BUG/MINOR: resolvers: fix risk of appending garbage past the domain name | Willy Tarreau <w****@1****u> | 24 days ago | |
| 01ebb668 | BUG/MINOR: resolvers: fix room for trailing zero in resolv_dn_label_to_str() | Willy Tarreau <w****@1****u> | 24 days ago | |
| 8d771110 | BUG/MINOR: mux-h1: H2 preface rejection doesn't update stick-table glitches |
Chad Lavoie <c****e@h****m>
Committed by: Christopher Faulet <c****t@h****m> |
25 days ago | |
| 41bb1c24 | BUG/MEDIUM: cli: Fix parsing of pattern finishing a command payload | Christopher Faulet <c****t@h****m> | 25 days ago | |
| 9091cfa6 | BUG/MEDIUM: hlua: Fix integer underflow when receiving line from lua cosocket | Christopher Faulet <c****t@h****m> | 25 days ago | |
| 7cab3a3c | BUG/MINOR: quic: fix ODCID lookup from derived value | Amaury Denoyelle <a****e@h****m> | 25 days ago | |
| 57b526e0 | BUG/MINOR: tcpchecks: Limit parsing of agent-check reply to the buffer | Christopher Faulet <c****t@h****m> | 25 days ago | |
| 2644f9dd | BUG/MEDIUM: dict: hold lock while decrementing refcount in dict_entry_unref | Christopher Faulet <c****t@h****m> | 25 days ago | |
| 04b9215a | BUG/MEDIUM: ssl-gencert: Unlock LRU cache if failing to generate certificate | Christopher Faulet <c****t@h****m> | 25 days ago | |
| 75f72c2e | BUG/MEDIUM: resolvers: Fix test on dn label size in resolv_dn_label_to_str() | Christopher Faulet <c****t@h****m> | 25 days ago | |
| 340cc86e | BUG/MINOR: log: free logformat expr on compile failure in cfg_parse_log_profile | Willy Tarreau <w****@1****u> | 25 days ago | |
| 6bb8cb51 | CLEANUP: resolvers: remove pool_free(NULL) in SRV additional record matching | Willy Tarreau <w****@1****u> | 25 days ago | |
| 4f58fef3 | BUG/MINOR: resolvers: relax size checks in authority record parsing | Willy Tarreau <w****@1****u> | 25 days ago | |
| 32fc35ef | CLEANUP: resolvers: fix comment typos and wrong filenames in file headers | Willy Tarreau <w****@1****u> | 25 days ago | |
| 8fe8d5fb | CLEANUP: resolvers: use read_n32() instead of open-coded big-endian read | Willy Tarreau <w****@1****u> | 25 days ago | |
| 1ed4ef66 | BUG/MEDIUM: applet: Properly handle receives of size 0 | Christopher Faulet <c****t@h****m> | 26 days ago | |
| 3fab21ea | MINOR: mux_quic: do not crash on unhandled QMux frame reception | Amaury Denoyelle <a****e@h****m> | 26 days ago | |
| f9d4d659 | MINOR: mux_quic: handle MAX_STREAMS for uni stream in QMux | Amaury Denoyelle <a****e@h****m> | 26 days ago | |
| c0aa91a2 | MINOR: mux_quic: handle STOP_SENDING in QMux | Amaury Denoyelle <a****e@h****m> | 26 days ago | |
| e2c3cd9e | BUG/MINOR: ocsp: Manage date too far away in the future |
Remi Tricot-Le Breton <r****n@h****m>
Committed by: Willy Tarreau <w****@1****u> |
26 days ago | |
| 413f6f9a | BUG/MEDIUM: net_helper: fix a remaining possibly infinite loop in converters | Willy Tarreau <w****@1****u> | 26 days ago | |
| e98595e4 | MINOR: ssl_sock: remove unneeded check on QMux flags | Amaury Denoyelle <a****e@h****m> | 26 days ago | |
| 3475a5bb | BUILD: proxy: unstatify the proxies_del_lock to avoid a warning without threads | Willy Tarreau <w****@1****u> | 26 days ago | |
| 050e06dd | MINOR: config: shm-stats-file is no longer experimental | Willy Tarreau <w****@1****u> | 26 days ago | |
| bcf768f1 | [RELEASE] Released version 3.4-dev13 | Willy Tarreau <w****@1****u> | 27 days ago | |
| 897c5ddb | DOC: update supported gcc and openssl versions in INSTALL | Willy Tarreau <w****@1****u> | 27 days ago | |
| f5477c8d | CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations | Willy Tarreau <w****@1****u> | 27 days ago | |
| b62ba759 | MINOR: intops: add a multiply overflow detection for ulong and size_t | Willy Tarreau <w****@1****u> | 27 days ago | |
| 482b6763 | BUG/MEDIUM: htx: Alloc a chunk of right size in htx_replace_blk_value() | Christopher Faulet <c****t@h****m> | 27 days ago | |
| 3e25104a | MEDIUM: stick-tables: Avoid freeing elements while holding a lock |
Olivier Houchard <o****d@h****m>
Committed by: Olivier Houchard <c****t@c****g> |
27 days ago | |
| 2a876290 | BUG/MEDIUM: applet: Fix transfer of HTX data to the applet | Christopher Faulet <c****t@h****m> | 27 days ago | |
| 56e7f8ef | MEDIUM: htx: Improve htx_xfer API to not count HTX meta-data | Christopher Faulet <c****t@h****m> | 27 days ago | |
| 99d48c3a | BUG/MINOR: htx: Fix value of HTX_XFER_HDRS_ONLY flag | Christopher Faulet <c****t@h****m> | 27 days ago | |
| b7c607e2 | DOC: fix typo on QUIC stream.max-concurrent reference | Amaury Denoyelle <a****e@h****m> | 27 days ago | |
| 05e65489 | BUG/MEDIUM: servers: Don't forget to set srv_hash when needed |
Olivier Houchard <o****d@h****m>
Committed by: Olivier Houchard <c****t@c****g> |
27 days ago | |
| b9acb441 | MEDIUM: startup: warn when chroot is not set for root | Willy Tarreau <w****@1****u> | 27 days ago | |
| 3c35e7f1 | MINOR: startup: do not execute chroot() when "/" | Willy Tarreau <w****@1****u> | 27 days ago | |
| 8dd31dcd | BUILD: traces: set a few __maybe_unused on vars used only for traces | Willy Tarreau <w****@1****u> | 27 days ago | |
| 33c82709 | OPTIM: h2: do not update committed streams if elasticity disabled | Amaury Denoyelle <a****e@h****m> | 27 days ago | |
| 7004bb3b | MINOR: backend: support hash-key guid for a stabler distribution | Willy Tarreau <w****@1****u> | 28 days ago |