wessels [Wed, 7 Nov 2007 04:19:30 +0000 (04:19 +0000)]
Extended the Squid -> Rewriter interface with key=value pairs
Our customer wants to use a redirector (rewriter) but needs additional
fields. We think that new fields should be of the form "key=value"
so that, in the future, the user can choose which fields to send
to the rewriter.
amosjeffries [Mon, 5 Nov 2007 06:59:51 +0000 (06:59 +0000)]
Close three possible buffer over/under-runs
Simple fixes imported from earlier string work.
- prevent pointer operations in cut /set operations if the location
given is outside teh currently allocated buffer.
The methods will behave as if the operations were successful but did
not alter the string.
wessels [Sat, 3 Nov 2007 10:49:53 +0000 (10:49 +0000)]
Looks like 'dstdomain' and 'dstdomain_regex' ACLs were broken.
The dst_addr member of ACLChecklist class was never set so
certain reverse lookups for 'dstdomain' and 'dstdomain_regex'
ACLs probably were not working. This patch sets dst_addr
before (potentially) doing the non-blocking lookup.
When Squid is not doing the ranges it may still forward a Range request to the
origin server and receive a range response. The old code was comparing
endOffset of memObject with the last expected offset according to the Range
header value. That comparison did not account for the header size in
endOffset.
I do not know if the header size should not have been there or
should have been accounted for in the comparison. Adding headers size made
the 206 problem more difficult to reproduce (but it was still there).
Instead of trying to figure out when the header should or should not be
counted, I used http->out.offset and reply->content_range->spec.length. That
seems to work. This change, however, is in my Puzzle Area of Squid; I have low
confidence the fix is correct and cannot be improved.
rousskov [Tue, 16 Oct 2007 21:57:28 +0000 (21:57 +0000)]
Bug 2104 fix: handle REQMOD HTTP responses without body
When in request satisfaction mode and no body is expected, mark the store
entry as complete. Otherwise the ClientStreams(?) triggered by the
clientGetMoreData call will get stuck waiting for more data from the store.
There is probably a better way to do this (e.g., completely bypassing store).
The tunnelConnectTimeout function used the tunnelState object (and propably
the tunnelState->request object) after they were freed by the comm_close call.
The fix moves the comm_close call to the end of tunnelConnectTimeout.
amosjeffries [Tue, 16 Oct 2007 18:56:51 +0000 (18:56 +0000)]
Alter policy of ICP and HTCP access to default allow only local networks
Modifies both icp_access and htcp_access from recommended 'allow all'
to a default 'deny !localnet' with a fallback default 'deny all'
if the recommended icp/htcp access are removed or commented out.
Adds localnet acl by default the RFC1918 reserved private space
to support the use of localnet acl in the above.
amosjeffries [Sat, 13 Oct 2007 12:57:40 +0000 (12:57 +0000)]
Add notes about htcp_access effects on HTCP peers to config.
Discovered by Tony Dodd and Chris Robertson.
See Discussion:
Re: [squid-users] Squid marks alive siblings as dead.
http://www.squid-cache.org/mail-archive/squid-users/200710/0254.html
hno [Sat, 13 Oct 2007 06:02:28 +0000 (06:02 +0000)]
Bug #2100: Respect DNS ttl=0
Some DNS servers responds with a ttl=0 asking their results to not be cached
for long, but due to historical reasons from before when Squid had an internal
DNS client such DNS responses got cached for the positive DNS ttl (default 1 hour).
Witch this change such DNS responses gets cached for the minimum allowed TTL
(negative_dns_ttl, default 1 minute).
wessels [Thu, 4 Oct 2007 22:43:54 +0000 (22:43 +0000)]
Likely fix for helper-related SEGV shortly after reconfigure
I'm seeing occasional SEGVs in helperHandleRead() shortly after
a reconfigure. I suspect that the helper structure was kept
around during the reconfigure because of a pending request. If
it gets closed in helperHandleRead() after reading, then we must
return from the function rather than continue in the while loop.
Boost redirector cache.log message to indicate <NULL> also received when
redirector returns an empty URL as destination.
Was just when NULL pointer received.
Do not disable ICAP preview by default. Now, by default, the preview will be
used for ICAP servers that request it. For a discussion, please see
http://www.squid-cache.org/mail-archive/squid-dev/200709/0066.html
Warn users that multiple ICAP services per icap_class are not yet supported.
Despite the warning, we still allow them in the configuration file, but that
may change. This warning may help to make the transition smoother.
Forward port of latest tproxy changes from SQUID 2:
- Automatically disable tproxy if the needed capabilities could not be set
- Keep the permitted set unless root privileges is completely dropped (chroot),
as is normally done when not using capabilities. This fixes file permissions
regarding the pid file.
- Test for sys/capability.h linux include file to avoid failing on systems missing libcap
Fix a compile-time memory corruption error causing cf_gen to fail
The change to include dependency tracking had a small memory allocation
error resulting in memory corruption, causing cf_gen to fail during the
compile on some platforms/compilers.
Polished "Major new features" list to downplay the importance of ESI and
related code changes (because nobody currently supports ESI modifications
amd they have known bugs).
Did not update the .html version for the lack of linuxdoc installation.
Author: Thomas-Martin Seck <tmseck@netcologne.de>
Bug #2071: SNMP not enabled on FreeBSD on some other systems
While investigating the SNMP linking issue, I noticed that configure.in contains
a bashism that will effectively disable SNMP support in environments where bash
is not present (e.g. a bare FreeBSD environment with a rather puristic
/bin/sh).
Bug 2067: do not print "aborting on premature eof" messages at debug level 1.
This messages are printed, for example, whenever the origin server closes
the connection prematurely. No need to warn the cache admin about such events.
projects / thirdparty / squid.git / log
