Valentine Krasnobaeva 351ae5dbed BUG/MINOR: startup: fix UAF when set the default for log_tag ...

In the init_early() global.log_tag is initialized to the string from progname
pointer and global.log_tag.area points to this pointer.

If log-tag keyword is provided in the configuration, its parser at first frees
global.log_tag.area and then it does a new memory allocation to copy
there the argument of log-tag. So, progname no longer points to the valid
memory.

To fix this, let's always keep progname and global.log_tag.area at separate
memory areas. If log_tag will be redefined in the configuration, its parser will
free the memory allocated for the default value in chunk_destroy(). Memory
allocated for progname will be freed in deinit().

This should not be backported as related to the latest master-worker
refactoring.

2024-11-21 19:55:21 +01:00

..

acl.c

MINOR: acl: export find_acl_default()

2024-11-18 15:15:54 +01:00

action.c

…

activity.c

MINOR: activity/memprofile: show per-DSO stats

2024-10-24 10:49:21 +02:00

applet.c

MINOR: stconn: Use a dedicated function to get the opposite sedesc

2024-07-12 15:27:04 +02:00

arg.c

MINOR: arg: add an argument type for identifier

2024-10-18 14:30:24 +02:00

auth.c

…

backend.c

BUG/MEDIUM: queue: make sure never to queue when there's no more served conns

2024-10-16 18:08:39 +02:00

base64.c

…

buf.c

CLEANUP: buffers: simplify b_get_varint()

2024-10-18 18:28:39 +02:00

cache.c

BUILD: cache: silence an uninitialized warning at -Og with gcc-12.2

2024-10-12 16:28:54 +02:00

calltrace.c

…

cbuf.c

…

cebtree-prv.h

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cebu32_tree.c

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cebu64_tree.c

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cebua_tree.c

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cebub_tree.c

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cebuib_tree.c

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cebuis_tree.c

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cebul_tree.c

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cebus_tree.c

IMPORT: import cebtree (compact elastic binary trees)

2024-09-15 23:44:59 +02:00

cfgcond.c

…

cfgdiag.c

…

cfgparse-global.c

MINOR: cfgparse-global: add more checks for "chroot" argument

2024-11-21 19:55:21 +01:00

cfgparse-listen.c

MINOR: cfgparse: Emit a warning for misplaced "tcp-response content" rules

2024-11-21 09:55:04 +01:00

cfgparse-quic.c

MINOR: quic: support pacing for newreno and nocc

2024-11-21 11:33:44 +01:00

cfgparse-ssl.c

MINOR: ssl: relax the 'ssl.default-dh-param' keyword parsing

2024-06-14 11:36:52 +02:00

cfgparse-tcp.c

MINOR: capabilities: add cap_sys_admin support

2024-04-30 21:40:17 +02:00

cfgparse-unix.c

…

cfgparse.c

MEDIUM: uri_auth: implement clean uri_auth cleaning

2024-11-14 15:03:38 +01:00

channel.c

OPTIM: channel: speed up co_getline()'s search of the end of line

2024-09-30 11:36:39 +02:00

check.c

MEDIUM: config: warn on unitless timeouts < 100 ms

2024-11-19 10:33:20 +01:00

chunk.c

MINOR: chunk: add a BUG_ON upon the next init_trash_buffer()

2024-11-15 17:15:06 +01:00

cli.c

MEDIUM: mworker: remove USE_SYSTEMD requirement for -Ws

2024-11-20 12:07:38 +01:00

clock.c

BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY

2024-11-15 16:01:31 +01:00

compression.c

MINOR: dynbuf: pass a criticality argument to b_alloc()

2024-05-10 17:18:13 +02:00

connection.c

MINOR: connection: add new sample fetch functions fc_err_name and bc_err_name

2024-11-05 18:57:43 +01:00

cpuset.c

CLEANUP: Reapply xalloc_cast.cocci

2024-04-02 07:27:33 +02:00

debug.c

MINOR: debug/cli: replace "debug dev counters" with "debug counters"

2024-11-15 16:26:01 +01:00

dgram.c

MINOR: cfgparse: parse tune.{rcvbuf,sndbuf}.{frontend,backend} as sizes

2024-11-18 18:50:02 +01:00

dict.c

…

dns_ring.c

MAJOR: import: update mt_list to support exponential back-off (try #2)

2024-07-09 16:46:38 +02:00

dns.c

MEDIUM: socket: always properly use the sock_domain for requested families

2024-08-21 17:36:58 +02:00

dynbuf.c

MINOR: cfgparse: parse tune.bufsize.small as a size

2024-11-18 19:07:05 +01:00

eb32sctree.c

…

eb32tree.c

…

eb64tree.c

…

ebimtree.c

…

ebistree.c

…

ebmbtree.c

…

ebpttree.c

…

ebsttree.c

…

ebtree.c

…

errors.c

BUG/MINOR: errors: print_message: don't allocate startup logs ring

2024-10-29 18:17:49 +01:00

ev_epoll.c

BUG/MINOR: polling: fix time reporting when using busy polling

2024-09-12 17:47:13 +02:00

ev_evports.c

BUG/MINOR: polling: fix time reporting when using busy polling

2024-09-12 17:47:13 +02:00

ev_kqueue.c

BUG/MINOR: polling: fix time reporting when using busy polling

2024-09-12 17:47:13 +02:00

ev_poll.c

DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints

2024-05-24 12:07:18 +02:00

ev_select.c

DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints

2024-05-24 12:07:18 +02:00

event_hdl.c

MAJOR: import: update mt_list to support exponential back-off (try #2)

2024-07-09 16:46:38 +02:00

extcheck.c

BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration

2024-11-15 15:39:00 +01:00

fcgi-app.c

BUG/MINOR: fcgi-app: handle a possible strdup() failure

2024-08-06 08:21:49 +02:00

fcgi.c

…

fd.c

MINOR: fd: don't scan the full fdtab on all threads

2024-07-15 19:19:13 +02:00

filters.c

MINOR: stream: Use an enum to identify last and waiting entities for streams

2024-10-31 20:24:37 +01:00

fix.c

…

flt_bwlim.c

MEDIUM: bwlim: Use a read-lock on the sticky session to apply a shared limit

2024-09-02 15:50:25 +02:00

flt_http_comp.c

MINOR: dynbuf: pass a criticality argument to b_alloc()

2024-05-10 17:18:13 +02:00

flt_spoe.c

BUILD: spoe: fix build warning on older gcc around sub-struct initialization

2024-10-23 15:12:59 +02:00

flt_trace.c

…

freq_ctr.c

…

frontend.c

MINOR: protocol: create abnsz socket address family

2024-10-29 12:14:50 +01:00

guid.c

BUG/MINOR: guid/server: ensure thread-safety on GUID insert/delete

2024-11-07 18:17:03 +01:00

h1_htx.c

MINIR: mux-h1: Return 414 or 431 when appropriate

2024-11-19 15:29:40 +01:00

h1.c

MINOR: proxy: Rename accept-invalid-http-* options

2024-09-16 22:55:25 +02:00

h2.c

BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding

2024-11-20 17:44:22 +01:00

h3_stats.c

MINOR: h3/qpack: adjust naming for errors

2024-05-16 10:31:17 +02:00

h3.c

BUG/MEDIUM: h3: Increase max number of headers when sending headers

2024-11-20 17:44:22 +01:00

haproxy.c

BUG/MINOR: startup: fix UAF when set the default for log_tag

2024-11-21 19:55:21 +01:00

hash.c

…

hlua_fcn.c

MEDIUM: protocol: rely on AF_CUST_ABNS family to recognize ABNS sockets

2024-10-29 12:14:37 +01:00

hlua.c

OPTION: map/hlua: make core.set_map() lookup more efficient

2024-11-20 16:14:13 +01:00

hpack-dec.c

…

hpack-enc.c

…

hpack-huff.c

…

hpack-tbl.c

…

hq_interop.c

MINOR: quic: support sbuf allocation in quic_stream

2024-08-20 18:12:27 +02:00

http_acl.c

…

http_act.c

MINOR: http: don't %-encode the payload when not relevant

2024-11-06 10:21:15 +01:00

http_ana.c

BUG/MINOR: http-ana: Adjust the server status before the L7 retries

2024-11-20 09:22:06 +01:00

http_client.c

BUG/MEDIUM: mworker/httpclient: initialization skipped by accident in mworker mode

2024-10-17 12:16:35 +02:00

http_conv.c

MINOR: http-conv: Remove unreachable goto statement in sample_conv_q_preferred

2024-11-06 10:06:52 +01:00

http_ext.c

CLEANUP: http_ext: remove useless BUG_ON() in http_handle_xot_header()

2024-10-17 17:25:06 +02:00

http_fetch.c

MINOR: http-fetch: Add an option to 'query" to get the QS with the '?'

2024-11-20 10:20:05 +01:00

http_htx.c

MINOR: http: don't %-encode the payload when not relevant

2024-11-06 10:21:15 +01:00

http_rules.c

MINOR: http-ana: Add support for "set-cookie-fmt" option to redirect rules

2024-11-19 15:20:02 +01:00

http.c

MINOR: http: Add support for HTTP 414/431 status codes

2024-11-19 15:29:40 +01:00

htx.c

CLEANUP: assorted typo fixes in the code and comments

2023-11-23 16:23:14 +01:00

init.c

…

jwt.c

BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature

2024-07-26 16:59:00 +02:00

lb_chash.c

MEDIUM: lb-chash: Deterministic node hashes based on server address

2024-04-02 07:00:10 +02:00

lb_fas.c

…

lb_fwlc.c

…

lb_fwrr.c

…

lb_map.c

…

lb_ss.c

MINOR: lbprm: implement true "sticky" balance algo

2024-03-29 17:08:37 +01:00

limits.c

MINOR: debug: use LIM2A to show limits

2024-07-16 14:04:41 +02:00

linuxcap.c

MINOR: capabilities: use _LINUX_CAPABILITY_VERSION_3

2024-06-26 07:38:21 +02:00

listener.c

MEDIUM: quic: define cubic-pacing congestion algorithm

2024-11-19 16:20:58 +01:00

log.c

MEDIUM: protocol: make abns a custom unix socket address family

2024-10-29 12:14:25 +01:00

lru.c

BUG/MINOR: lru: fix the standalone test case for invalid revision

2024-04-13 08:43:12 +02:00

mailers.c

BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration

2024-11-15 15:39:58 +01:00

map.c

MEDIUM: cli/applet: Stop to test opposite SC in I/O handler of CLI commands

2024-03-28 17:28:20 +01:00

mjson.c

…

mqtt.c

CLEANUP: mqtt: fix typo in MQTT_REMAINING_LENGHT_MAX_SIZE

2024-08-30 14:58:59 +02:00

mux_fcgi.c

CLEANUP: muxes: remove useless inclusion of ebmbtree.h

2024-10-12 16:29:15 +02:00

mux_h1.c

MINIR: mux-h1: Return 414 or 431 when appropriate

2024-11-19 15:29:40 +01:00

mux_h2.c

BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding

2024-11-20 17:44:22 +01:00

mux_pt.c

BUG/MEDIUM: mux-pt: Fix condition to perform a shutdown for writes in mux_pt_shut()

2024-09-03 15:25:05 +02:00

mux_quic.c

MINOR: mux_quic/pacing: display pacing info on show quic

2024-11-19 16:21:05 +01:00

mux_spop.c

CLEANUP: muxes: remove useless inclusion of ebmbtree.h

2024-10-12 16:29:15 +02:00

mworker-prog.c

BUG/MINOR: mworker-prog: don't warn about deprecated section with expose-deprecated-directives

2024-11-19 14:13:30 +01:00

mworker.c

MEDIUM: mworker: remove USE_SYSTEMD requirement for -Ws

2024-11-20 12:07:38 +01:00

namespace.c

…

ncbuf.c

…

pattern.c

OPTIM: pattern: only apply LRU cache for large enough lists

2024-11-15 15:33:04 +01:00

payload.c

…

peers.c

BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration

2024-11-15 15:44:05 +01:00

pipe.c

…

pool.c

MINOR: pools: export the pools variable

2024-10-24 16:12:46 +02:00

proto_quic.c

CLEANUP: protocol: no longer initialize .receivers nor .nb_receivers

2024-08-21 17:37:46 +02:00

proto_rhttp.c

MINOR: protocol: add the real address family to the protocol

2024-08-21 17:37:46 +02:00

proto_sockpair.c

CLEANUP: protocol: no longer initialize .receivers nor .nb_receivers

2024-08-21 17:37:46 +02:00

proto_tcp.c

MEDIUM: protocol: add MPTCP per address support

2024-08-30 18:53:49 +02:00

proto_udp.c

CLEANUP: protocol: no longer initialize .receivers nor .nb_receivers

2024-08-21 17:37:46 +02:00

proto_uxdg.c

MINOR: protocol: create abnsz socket address family

2024-10-29 12:14:50 +01:00

proto_uxst.c

MINOR: protocol: create abnsz socket address family

2024-10-29 12:14:50 +01:00

protocol.c

MEDIUM: protocol: add MPTCP per address support

2024-08-30 18:53:49 +02:00

proxy.c

MINOR: quic: use dynamic cc_algo on bind_conf

2024-11-19 16:16:48 +01:00

qmux_http.c

MEDIUM: mux-quic: add BUG_ON if sending on locally closed QCS

2023-12-21 15:42:08 +01:00

qmux_trace.c

MINOR: mux-quic: add buf_in_flight to QCC debug infos

2024-08-22 17:48:23 +02:00

qpack-dec.c

MINOR: h3/qpack: adjust naming for errors

2024-05-16 10:31:17 +02:00

qpack-enc.c

BUG/MEDIUM: qpack: allow 6xx..9xx status codes

2024-01-29 15:40:19 +01:00

qpack-tbl.c

…

queue.c

BUG/MEDIUM: queue: always dequeue the backend when redistributing the last server

2024-10-01 18:57:51 +02:00

quic_ack.c

BUILD: quic: Variable name typo inside a BUG_ON().

2024-02-05 14:31:21 +01:00

quic_cc_bbr.c

BUG/MINOR: quic: Missing application limitations tracking for BBR

2024-11-21 19:23:53 +01:00

quic_cc_cubic.c

MINOR: quic: support pacing for newreno and nocc

2024-11-21 11:33:44 +01:00

quic_cc_drs.c

MINOR: quic: implement delivery rate sampling algorithm

2024-11-20 17:34:22 +01:00

quic_cc_newreno.c

MINOR: quic: support pacing for newreno and nocc

2024-11-21 11:33:44 +01:00

quic_cc_nocc.c

MINOR: quic: support pacing for newreno and nocc

2024-11-21 11:33:44 +01:00

quic_cc.c

MINOR: quic: quic_cc modifications to support BBR

2024-11-20 17:34:22 +01:00

quic_cid.c

CLEANUP: assorted typo fixes in the code and comments

2024-09-03 17:49:21 +02:00

quic_cli.c

BUILD: quic: 32bits build broken by wrong integer conversions for printf()

2024-08-26 11:21:48 +02:00

quic_conn.c

MINOR: quic: quic_loss modifications to support BBR

2024-11-20 17:34:22 +01:00

quic_fctl.c

MINOR: mux-quic: define a flow control related type

2024-01-31 16:28:54 +01:00

quic_frame.c

MINOR: quic: implement dedicated type for out-of-order stream ACK

2024-10-04 17:56:45 +02:00

quic_loss.c

MINOR: quic: quic_loss modifications to support BBR

2024-11-20 17:34:22 +01:00

quic_openssl_compat.c

BUG/MEDIUM: quic: keylog callback not called (USE_OPENSSL_COMPAT)

2024-01-16 10:17:27 +01:00

quic_pacing.c

MINOR: mux_quic/pacing: display pacing info on show quic

2024-11-19 16:21:05 +01:00

quic_retransmit.c

MINOR: quic: implement dedicated type for out-of-order stream ACK

2024-10-04 17:56:45 +02:00

quic_retry.c

BUG/MEDIUM: quic: always validate sender address on 0-RTT

2024-08-30 17:04:09 +02:00

quic_rules.c

MINOR: action: add do-log action

2024-10-04 21:38:14 +02:00

quic_rx.c

MINOR: quic: RX part modifications to support BBR

2024-11-20 17:34:22 +01:00

quic_sock.c

BUILD: quic: fix build errors on FreeBSD since recent GSO changes

2024-08-30 18:53:49 +02:00

quic_ssl.c

BUG/MEDIUM: quic: avoid freezing 0RTT connections

2024-10-17 15:04:06 +02:00

quic_stats.c

MINOR: stats: introduce a more expressive stat definition method

2024-04-26 10:20:57 +02:00

quic_stream.c

BUG/MEDIUM: quic: properly decount out-of-order ACK on stream release

2024-10-09 17:47:16 +02:00

quic_tls.c

MINOR: quic: refactor STREAM room notification

2024-10-01 16:19:25 +02:00

quic_token.c

MINOR: quic: Token for future connections implementation.

2024-08-30 17:04:09 +02:00

quic_tp.c

BUG/MEDIUM: quic: don't blindly rely on unaligned accesses

2024-04-06 00:07:49 +02:00

quic_trace.c

MINOR: quic: implement dedicated type for out-of-order stream ACK

2024-10-04 17:56:45 +02:00

quic_tx.c

BUG/MINOR: quic: Missing application limitations tracking for BBR

2024-11-21 19:23:53 +01:00

raw_sock.c

MINOR: rawsock: set connection error codes when returning from recv/send/splice

2024-11-05 18:57:43 +01:00

regex.c

…

resolvers.c

MEDIUM: config: warn on unitless timeouts < 100 ms

2024-11-19 10:33:20 +01:00

ring.c

MINOR: ring: count processed messages in ring_dispatch_messages()

2024-07-24 17:59:03 +02:00

sample.c

MINOR: sample: extend the "when" converter to support an ACL

2024-11-18 16:11:55 +01:00

server_state.c

BUG/MEDIUM: server: server stuck in maintenance after FQDN change

2024-10-16 14:26:57 +02:00

server.c

BUG/MEDIUM: server: fix race on servers_list during server deletion

2024-10-24 11:35:57 +02:00

session.c

MEDIUM: protocol: rely on AF_CUST_ABNS family to recognize ABNS sockets

2024-10-29 12:14:37 +01:00

sha1.c

…

shctx.c

DEBUG: shctx: name shared memory using vma_set_name()

2024-05-21 17:55:03 +02:00

signal.c

CLEANUP: assorted typo fixes in the code and comments

2023-11-23 16:23:14 +01:00

sink.c

MINOR: ring: support unit suffixes in the size

2024-11-19 10:56:45 +01:00

slz.c

…

sock_inet.c

MEDIUM: protocol: add MPTCP per address support

2024-08-30 18:53:49 +02:00

sock_unix.c

MEDIUM: socket: add zero-terminated ABNS alternative

2024-10-29 12:15:24 +01:00

sock.c

MEDIUM: sock: also restore effective unix family in get_{src,dst}()

2024-10-29 12:15:03 +01:00

ssl_ckch.c

BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly

2024-10-29 16:01:07 +01:00

ssl_clienthello.c

BUILD: ssl: replace USE_OPENSSL_AWSLC by OPENSSL_IS_AWSLC

2024-07-30 18:53:08 +02:00

ssl_crtlist.c

MEDIUM: ssl: don't load file by discovering them in crt-store

2024-05-21 18:30:45 +02:00

ssl_gencert.c

MEDIUM: ssl: allow to change the OpenSSL security level from global section

2024-03-12 17:37:11 +01:00

ssl_ocsp.c

MINOR: mworker/ocsp: skip ocsp-update proxy init in master

2024-10-17 12:30:59 +02:00

ssl_sample.c

MEDIUM: ssl/sample: add ssl_fc_sigalgs_bin sample fetch

2024-08-26 15:17:40 +02:00

ssl_sock.c

CLEANUP: connection: properly name the CO_ER_SSL_FATAL enum entry

2024-11-05 18:57:42 +01:00

ssl_utils.c

…

stats-file.c

MEDIUM: stats-file: silently ignore be/fe mistmatch

2024-11-19 16:44:51 +01:00

stats-html.c

BUG/MEDIUM: stats-html: Never dump more data than expected during 0-copy FF

2024-10-22 08:00:32 +02:00

stats-json.c

MINOR: stats: update ambiguous "metrics" naming to "stat_cols"

2024-04-26 10:20:57 +02:00

stats-proxy.c

MINOR: protocol: create abnsz socket address family

2024-10-29 12:14:50 +01:00

stats.c

DEBUG: wdt: add a stats counter "BlockedTrafficWarnings" in show info

2024-11-06 18:35:42 +01:00

stconn.c

BUG/MEDIUM: stconn: Don't forward shut for SC in connecting state

2024-11-13 10:53:27 +01:00

stick_table.c

CLEANUP: stick-table: make the file location point to a global file name

2024-09-19 15:38:19 +02:00

stream.c

MINOR: tinfo/clock: turn sched_call_date to 64-bits

2024-11-19 20:13:41 +01:00

systemd.c

MINOR: systemd: replace SOCK_CLOEXEC by fcntl call to FD_CLOEXEC

2024-11-20 14:26:23 +01:00

task.c

MINOR: sched: add TASK_F_WANTS_TIME to make the scheduler update the call date

2024-11-19 20:13:41 +01:00

tcp_act.c

MINOR: action: add do-log action

2024-10-04 21:38:14 +02:00

tcp_rules.c

MINOR: cfgparse: Emit a warning for misplaced "tcp-response content" rules

2024-11-21 09:55:04 +01:00

tcp_sample.c

MINOR: tcp_sample: Move TCP low level sample fetch function to control layer

2024-07-31 10:29:42 +02:00

tcpcheck.c

MINOR: agent-check: Be able to set absolute weight via an agent

2024-11-19 15:29:40 +01:00

thread.c

BUG/MINOR: guid/server: ensure thread-safety on GUID insert/delete

2024-11-07 18:17:03 +01:00

time.c

…

tools.c

MINOR: tools: make parse_size_err() support 32/64 bits

2024-11-19 10:50:42 +01:00

trace.c

BUG/MINOR: trace: stop rewriting argv with -dt

2024-10-29 11:01:47 +01:00

uri_auth.c

MEDIUM: uri_auth: implement clean uri_auth cleaning

2024-11-14 15:03:38 +01:00

uri_normalizer.c

BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char (2)

2024-07-18 13:29:52 +02:00

vars.c

OPTIM: vars: use multiple name heads in the vars struct

2024-09-15 23:51:51 +02:00

version.c

…

wdt.c

DEBUG: wdt: set the default blocked task delay to 100 ms

2024-11-06 18:35:42 +01:00

xprt_handshake.c

…

xprt_quic.c

MINOR: quic: dump quic_conn debug string for logs

2024-08-07 15:40:52 +02:00