Willy Tarreau 0b291bdef1 BUG/MEDIUM: uri_auth: missing NULL check and memory leak on memory shortage ... A test is obviously wrong in uri_auth(). If strdup(pass) returns an error while strdup(user) passes, the NULL pointer is still stored into the structure. If the user returns the NULL instead, the allocated memory is not released before returning the error. The issue was present in 1.4 so the fix should be backported. Reported-by: Dinko Korunic <dkorunic@reflected.net>		2013-01-24 16:19:19 +01:00
..
acl.c	BUG/MINOR: config: fix improper check for failed memory alloc in ACL parser	2013-01-24 16:19:18 +01:00
appsession.c	MEDIUM: make the trash be a chunk instead of a char *	2012-10-29 16:57:30 +01:00
arg.c	MEDIUM: sample: pass an empty list instead of a null for fetch args	2012-10-19 19:49:09 +02:00
auth.c	CLEANUP: auth: make the code build again with DEBUG_AUTH	2012-05-10 23:25:35 +02:00
backend.c	CLEANUP: backend: use the same tproxy address selection code for servers and backends	2012-12-09 10:06:01 +01:00
base64.c	[MINOR] add encode/decode function for 30-bit integers from/to base64	2010-10-30 19:04:33 +02:00
buffer.c	CLEANUP: buffer: use buffer_empty() instead of buffer_len()==0	2012-12-17 01:14:49 +01:00
cfgparse.c	BUG/MINOR: config: check the proper variable when parsing log minlvl	2013-01-24 16:19:18 +01:00
channel.c	OPTIM: channel: inline channel_forward's fast path	2012-10-26 01:08:01 +02:00
checks.c	BUG/MEDIUM: checks: ensure the health_status is always within bounds	2013-01-24 16:19:18 +01:00
chunk.c	MINOR: chunks: centralize the trash chunk allocation	2012-12-23 21:46:07 +01:00
compression.c	BUG/MEDIUM: compression: does not forward trailers	2012-11-23 11:12:33 +01:00
connection.c	BUG/MEDIUM: connection: always update connection flags prior to computing polling	2012-12-17 01:14:25 +01:00
cttproxy.c	CLEANUP: cttproxy: remove a warning on undeclared close()	2012-10-05 22:18:07 +02:00
dumpstats.c	BUG/MINOR: cli: show sess should always validate s->listener	2013-01-24 16:19:18 +01:00
ev_epoll.c	BUG/MINOR: epoll: use a fix maxevents argument in epoll_wait()	2013-01-18 15:31:03 +01:00
ev_kqueue.c	BUG/MINOR: poll: the I/O handler was called twice for polled I/Os	2012-12-14 00:17:03 +01:00
ev_poll.c	BUG/MINOR: poll: the I/O handler was called twice for polled I/Os	2012-12-14 00:17:03 +01:00
ev_select.c	BUG/MINOR: poll: the I/O handler was called twice for polled I/Os	2012-12-14 00:17:03 +01:00
fd.c	BUG: polling: don't skip polled events in the spec list	2012-11-12 01:57:14 +01:00
freq_ctr.c	BUG/MINOR: time: frequency counters are not totally accurate	2012-12-29 21:50:07 +01:00
frontend.c	BUG/MINOR: log: make log-format, unique-id-format and add-header more independant	2012-12-28 09:51:00 +01:00
haproxy.c	BUG/MEDIUM: remove supplementary groups when changing gid	2013-01-18 10:25:25 +01:00
hdr_idx.c	OPTIM/MINOR: move the hdr_idx pools out of the proxy struct	2011-10-24 18:15:04 +02:00
i386-linux-vsys.c	MEDIUM: listener: add support for linux's accept4() syscall	2012-10-08 20:11:03 +02:00
lb_chash.c	[MEDIUM] hash: add support for an 'avalanche' hash-type	2010-11-29 07:28:16 +01:00
lb_fas.c	CLEANUP: lb_first: add reference to a paper describing the original idea	2012-04-07 09:08:45 +02:00
lb_fwlc.c	[MEDIUM] build: switch ebtree users to use new ebtree version	2009-10-26 21:10:04 +01:00
lb_fwrr.c	[MEDIUM] build: switch ebtree users to use new ebtree version	2009-10-26 21:10:04 +01:00
lb_map.c	[BUG] url_param hash may return a down server	2010-03-12 06:22:16 +01:00
listener.c	MINOR: listeners: make the accept loop more robust when maxaccept==0	2012-11-23 20:22:10 +01:00
log.c	BUG/MINOR: log: improper NULL return check on utoa_pad()	2013-01-24 16:19:18 +01:00
memory.c	MEDIUM: memory: add the ability to poison memory at run time	2012-05-08 21:28:16 +02:00
peers.c	CLEANUP: session: use an array for the stick counters	2012-12-09 15:57:16 +01:00
pipe.c	BUILD/MINOR: silent a build warning in src/pipe.c (fcntl)	2011-10-24 17:09:22 +02:00
proto_http.c	CLEANUP: http: remove a useless null check	2013-01-24 16:19:18 +01:00
proto_tcp.c	CLEANUP: tcp/unix: remove useless NULL check in {tcp,unix}_bind_listener()	2013-01-24 16:19:18 +01:00
proto_uxst.c	CLEANUP: tcp/unix: remove useless NULL check in {tcp,unix}_bind_listener()	2013-01-24 16:19:18 +01:00
protocol.c	REORG: split "protocols" files into protocol and listener	2012-09-15 22:29:32 +02:00
proxy.c	BUG: proxy: fix server name lookup in get_backend_server()	2012-11-15 00:15:18 +01:00
queue.c	MAJOR: connection: replace struct target with a pointer to an enum	2012-11-12 00:42:33 +01:00
raw_sock.c	OPTIM: splice: assume by default that splice is working correctly	2013-01-07 16:57:09 +01:00
rbtree.c	[MINOR] imported the rbtree function from Linux kernel	2007-01-07 02:12:57 +01:00
regex.c	[MINOR] prepare req_*/rsp_* to receive a condition	2010-01-28 18:10:50 +01:00
sample.c	MINOR: chunks: centralize the trash chunk allocation	2012-12-23 21:46:07 +01:00
server.c	MEDIUM: server: move parsing of keyword "id" to server.c	2012-10-10 17:51:05 +02:00
session.c	BUG/MINOR: http: don't process abortonclose when request was sent	2012-12-30 00:50:35 +01:00
sessionhash.c	[PATCH] appsessions: cleanup DEBUG_HASH and initialize request_counter	2008-08-13 23:43:26 +02:00
shctx.c	MINOR: ssl: Setting global tune.ssl.cachesize value to 0 disables SSL session cache.	2012-12-28 14:48:13 +01:00
signal.c	BUG/MEDIUM: signal: signal handler does not properly check for signal bounds	2013-01-24 16:19:19 +01:00
ssl_sock.c	MINOR: chunks: centralize the trash chunk allocation	2012-12-23 21:46:07 +01:00
standard.c	BUG/MEDIUM: tools: off-by-one in quote_arg()	2013-01-24 16:19:19 +01:00
stick_table.c	BUG/MEDIUM: stick-tables: conversions to strings were broken in dev13	2012-12-09 11:10:30 +01:00
stream_interface.c	BUG/MEDIUM: stream_interface: don't close outgoing connections on shutw()	2012-12-30 01:39:37 +01:00
task.c	[OPTIM] task: don't scan the run queue if we know it's empty	2011-09-10 20:08:49 +02:00
time.c	BUG/MINOR: time: frequency counters are not totally accurate	2012-12-29 21:50:07 +01:00
trace.c	MINOR: add a new function call tracer for debugging purposes	2012-05-26 00:12:37 +02:00
uri_auth.c	BUG/MEDIUM: uri_auth: missing NULL check and memory leak on memory shortage	2013-01-24 16:19:19 +01:00