sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

[SM-Commit] GIT changes to master grimoire by Vlad Glagolev (42ec0f865fdbcc688c87b95eb185fdb8a27a1c92)

From: Vlad Glagolev <scm AT sourcemage.org>
To: sm-commit AT lists.ibiblio.org
Subject: [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (42ec0f865fdbcc688c87b95eb185fdb8a27a1c92)
Date: Mon, 29 Sep 2008 13:44:25 -0500

GIT changes to master grimoire by Vlad Glagolev <stealth AT sourcemage.org>:

http/lighttpd/DETAILS | 4 +-
http/lighttpd/HISTORY | 6 +++
http/lighttpd/PRE_BUILD | 1
http/lighttpd/memory.leak.patch | 68
++++++++++++++++++++++++++++++++++++++++
4 files changed, 77 insertions(+), 2 deletions(-)

New commits:
commit 42ec0f865fdbcc688c87b95eb185fdb8a27a1c92
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

lighttpd: security update

diff --git a/http/lighttpd/DETAILS b/http/lighttpd/DETAILS
index 59a69ac..7c7cda9 100755
--- a/http/lighttpd/DETAILS
+++ b/http/lighttpd/DETAILS
@@ -3,11 +3,11 @@

SOURCE_HASH=sha512:022f8773c67110d352f9144ece7f42904cec0c0ca2559def3ecc5ddee3ec0d842c9f754f6e24f73ec5a240602da35203625c34586409209e0e1418d6941c0ac0
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE_URL[0]=http://www.lighttpd.net/download/$SOURCE
-SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
WEB_SITE=http://www.lighttpd.net/
LICENSE[0]=BSD
ENTERED=20050722
- SECURITY_PATCH=4
+ SECURITY_PATCH=5
PATCHLEVEL=2
KEYWORDS="http"
SHORT="light httpd"
diff --git a/http/lighttpd/HISTORY b/http/lighttpd/HISTORY
index 32a6b90..85547cd 100644
--- a/http/lighttpd/HISTORY
+++ b/http/lighttpd/HISTORY
@@ -1,3 +1,9 @@
+2008-09-29 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: SECURITY_PATCH+=1 (http://secunia.com/advisories/32069/);
+ quoting paths
+ * PRE_BUILD: apply one more patch
+ * memory.leak.patch: added
+
2008-09-02 Vlad Glagolev <stealth AT sourcemage.org>
* DETAILS: PATCHLEVEL+=1
* PRE_BUILD: apply the patch for mod_{s,fast}cgi
diff --git a/http/lighttpd/PRE_BUILD b/http/lighttpd/PRE_BUILD
index ddefc2e..db47e35 100755
--- a/http/lighttpd/PRE_BUILD
+++ b/http/lighttpd/PRE_BUILD
@@ -1,5 +1,6 @@
default_pre_build &&
cd "$SOURCE_DIRECTORY" &&

+patch -p0 < "$SPELL_DIRECTORY/memory.leak.patch" &&
patch -p0 < "$SPELL_DIRECTORY/mod_scgi.patch" &&
patch -p0 < "$SPELL_DIRECTORY/mod_fastcgi.patch"
diff --git a/http/lighttpd/memory.leak.patch b/http/lighttpd/memory.leak.patch
new file mode 100644
index 0000000..138096a
--- /dev/null
+++ b/http/lighttpd/memory.leak.patch
@@ -0,0 +1,68 @@
+--- src/request.c.orig 2008-09-20 19:53:44.000000000 +0800
++++ src/request.c 2008-09-20 20:03:14.000000000 +0800
+@@ -825,6 +825,7 @@
+
"request-header:\n",
+
con->request.request);
+ }
++
ds->free((data_unset*)ds);
+
return 0;
+ }
+
+@@ -839,7 +840,7 @@
+
con->http_status = 400;
+
con->keep_alive = 0;
+
+-
array_insert_unique(con->request.headers, (data_unset *)ds);
++
ds->free((data_unset*)ds);
+
return 0;
+ }
+ }
+@@ -856,7 +857,7 @@
+
con->http_status = 400;
+
con->keep_alive = 0;
+
+-
array_insert_unique(con->request.headers, (data_unset *)ds);
++
ds->free((data_unset*)ds);
+
return 0;
+ }
+ } else if (cmp > 0 &&
0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key),
CONST_STR_LEN("Content-Type")))) {
+@@ -874,6 +875,7 @@
+
"request-header:\n",
+
con->request.request);
+ }
++
ds->free((data_unset*)ds);
+
return 0;
+ }
+ } else if (cmp > 0 &&
0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key),
CONST_STR_LEN("Expect")))) {
+@@ -911,6 +913,7 @@
+
"request-header:\n",
+
con->request.request);
+ }
++
ds->free((data_unset*)ds);
+
return 0;
+ }
+ } else if (cmp > 0 &&
0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key),
CONST_STR_LEN("If-Modified-Since")))) {
+@@ -936,6 +939,7 @@
+
"request-header:\n",
+
con->request.request);
+ }
++
ds->free((data_unset*)ds);
+
return 0;
+ }
+ } else if (cmp > 0 &&
0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key),
CONST_STR_LEN("If-None-Match")))) {
+@@ -953,6 +957,7 @@
+
"request-header:\n",
+
con->request.request);
+ }
++
ds->free((data_unset*)ds);
+
return 0;
+ }
+ } else if (cmp > 0 &&
0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key),
CONST_STR_LEN("Range")))) {
+@@ -976,6 +981,7 @@
+
"request-header:\n",
+
con->request.request);
+ }
++
ds->free((data_unset*)ds);
+
return 0;
+ }
+ }

[SM-Commit] GIT changes to master grimoire by Vlad Glagolev (42ec0f865fdbcc688c87b95eb185fdb8a27a1c92), Vlad Glagolev, 09/29/2008