| 1 |
/** @page apreq_changes CHANGES
|
| 2 |
//! brief List of major changes.
|
| 3 |
|
| 4 |
|
| 5 |
@section v2_07 Changes with libapreq2-2.07 (released February 12, 2006)
|
| 6 |
|
| 7 |
|
| 8 |
- C API [joes]
|
| 9 |
SECURITY: CVE-2006-0042 (cve.mitre.org)
|
| 10 |
Eliminate potential quadratic behavior in apreq_parse_headers() and
|
| 11 |
apreq_parse_urlencoded().
|
| 12 |
|
| 13 |
- Perl API [Philip M. Gollucci]
|
| 14 |
Fix Apache2::Cookie->cookies() to comply with its documentation
|
| 15 |
|
| 16 |
- C API [Philip M. Gollucci]
|
| 17 |
Use the APREQ_DEFAULT_READ_LIMIT constant for the read_limit
|
| 18 |
|
| 19 |
- C API [Ville Skyttä, Dirk Nehring]
|
| 20 |
Add explicit cast in apreq_escape()/apreq_util.h to keep
|
| 21 |
C++ compilers happy.
|
| 22 |
|
| 23 |
- C API [joes]
|
| 24 |
Protect against arbitrary recursion depth in apreq_parse_multipart()
|
| 25 |
by adding a reasonable compile-time MAX_LEVEL limit.
|
| 26 |
|
| 27 |
- C API [joes]
|
| 28 |
Clean up end-of-file parsing for apreq_parse_multipart(),
|
| 29 |
conforming to rfc-2046 § 5.1.1.
|
| 30 |
|
| 31 |
- Perl API [joes]
|
| 32 |
Move APR::Request::Param::Table and APR::Request::Cookie::Table
|
| 33 |
packages to APR::Request module.
|
| 34 |
|
| 35 |
- Perl XS [Steve Hay]
|
| 36 |
Fix compile problems on Win32 without PERL_IMPLICIT_SYS
|
| 37 |
related to link being an unresolved symbol.
|
| 38 |
|
| 39 |
- Perl API [joes]
|
| 40 |
APR::Request::Cookie::thaw() isn't a class method.
|
| 41 |
|
| 42 |
- C API [joes]
|
| 43 |
Fix off-by-one bug in the continuation-lines portion of the
|
| 44 |
header parser.
|
| 45 |
|
| 46 |
- Perl API [joes]
|
| 47 |
Move APR::Request::upload to APR::Request, where it belongs.
|
| 48 |
|
| 49 |
- Perl XS [Nikolay Ananiev]
|
| 50 |
Use MP_STATIC declarations to allow Cygwin builds.
|
| 51 |
|
| 52 |
- Perl API [joes]
|
| 53 |
encode()/decode() were busted with zero-length args. This caused
|
| 54 |
Apache2::Cookie::new() to segfault on cookie value of "".
|
| 55 |
|
| 56 |
- C API [joes]
|
| 57 |
Add apreq_charset_divine() and eliminate charset offset from return
|
| 58 |
value of apreq_decode(v).
|
| 59 |
|
| 60 |
- C API [joes]
|
| 61 |
Improve the cp1252-charset heuristics for apreq_decode(v).
|
| 62 |
|
| 63 |
- C API [Ralph Mattes]
|
| 64 |
Add explicit casts for apreq_param_charset_* to keep c++ compilers happy.
|
| 65 |
|
| 66 |
|
| 67 |
@section v2_06_dev Changes with libapreq2-2.06-dev (released July 20, 2005)
|
| 68 |
|
| 69 |
|
| 70 |
- C API [Marc Gràcia, joes]
|
| 71 |
Fix apreq_decode(v) when iso-latin-1 chars appear
|
| 72 |
at the end of an encoded string.
|
| 73 |
|
| 74 |
- Perl API [Philip M. Gollucci]
|
| 75 |
Fix "Attempt to free temp prematurely" error in apreq_xs_croak().
|
| 76 |
|
| 77 |
- C API [Philip M. Gollucci]
|
| 78 |
Add mod_apreq2 to httpd's server tokens.
|
| 79 |
|
| 80 |
- Perl API [joes]
|
| 81 |
Drop support for $req->env(), which also died with 2.05-dev.
|
| 82 |
|
| 83 |
- Perl API [joes]
|
| 84 |
Support for table set/add/delete methods is formally withdrawn.
|
| 85 |
Technically this feature died with the module API refactoring in
|
| 86 |
2.05-dev.
|
| 87 |
|
| 88 |
- C API [max]
|
| 89 |
Right-hand limit of apreq_brigade_move() is declared as "excluding",
|
| 90 |
but APR_RING_UNSPLICE() wants an "including" right-hand limit. Fixed
|
| 91 |
this by passing the previous bucket.
|
| 92 |
|
| 93 |
- Perl API [joes]
|
| 94 |
Drop support for Apache2::Request::new's HOOK_DATA.
|
| 95 |
UPLOAD_HOOK now takes only two arguments: ($upload, $data).
|
| 96 |
|
| 97 |
- Perl API [joes]
|
| 98 |
Drop support for Apache2::Cookie::Jar::new's VALUE_CLASS.
|
| 99 |
2.05-dev broke that API, and it's not worth trying to fix.
|
| 100 |
People who need that should use APR::Request::Cookie::Table's
|
| 101 |
cookie_class() API instead.
|
| 102 |
|
| 103 |
- Perl API [joes]
|
| 104 |
Fix cookie domain/path munging in Apache2::Cookie::new().
|
| 105 |
|
| 106 |
|
| 107 |
@section v2_05_dev Changes with libapreq2-2.05-dev (released May 5, 2005)
|
| 108 |
|
| 109 |
|
| 110 |
- Win32 build [Randy Kobes]
|
| 111 |
Have top-level 'nmake', 'nmake test', and 'nmake install'
|
| 112 |
targets, respectively, also include building, testing, and
|
| 113 |
installing the corresponding perl glue targets.
|
| 114 |
|
| 115 |
- C API [geoff]
|
| 116 |
Minimum httpd version is now 2.0.48, which includes the official
|
| 117 |
apr 0.9.4 release.
|
| 118 |
|
| 119 |
- C API [Max Kellermann]
|
| 120 |
Fix apreq_quote.
|
| 121 |
|
| 122 |
- Perl API [joes]
|
| 123 |
Remove Apache2::Request::args. WARNING: through inheritance,
|
| 124 |
args() now maps to Apache2::RequestRec::args. Folks that want
|
| 125 |
the pre-2.05-dev behavior need to invoke APR::Request::args by name.
|
| 126 |
|
| 127 |
- C API [joes, Max Kellermann]
|
| 128 |
Add apreq_initialize, apreq_pre_initialize and apreq_post_initialize.
|
| 129 |
These are not thread-safe operations, so applications need to ensure
|
| 130 |
they are invoked (in the correct sequence) prior to using any apreq2
|
| 131 |
modules.
|
| 132 |
|
| 133 |
- C, Perl API [joes]
|
| 134 |
Add pool, bucket_alloc to apreq_handle_t.
|
| 135 |
|
| 136 |
- Perl API [joes]
|
| 137 |
Drop $data argument from UPLOAD_HOOK, and also drop HOOK_DATA option.
|
| 138 |
Perl folks should use a closure instead of passing in context data.
|
| 139 |
|
| 140 |
- Perl API [joes]
|
| 141 |
Move bake, bake2 to Apache2::Cookie, now requiring
|
| 142 |
an extra $r argument. Also ""-operator is mapped
|
| 143 |
to as_string() for Apache2::Cookie; but APR::Request::Cookie
|
| 144 |
maps it to value().
|
| 145 |
|
| 146 |
- C API [joes]
|
| 147 |
Remove header_in & header_out from apreq_module_t.
|
| 148 |
Remove apreq_ua_cookie_version() and apreq_cookie_bake*().
|
| 149 |
Remove cookie2 argument to apreq_handle_custom().
|
| 150 |
|
| 151 |
- C API [joes]
|
| 152 |
s/APREQ/APREQ2/g in webserver configuration directives.
|
| 153 |
|
| 154 |
- C API [Igor Shevchenko, Philip Gollucci]
|
| 155 |
Fix segfault in mfd parser caused by parts w/ empty param names.
|
| 156 |
|
| 157 |
- C API [joes]
|
| 158 |
Add apreq_cp1252_to_utf8().
|
| 159 |
|
| 160 |
- C, Perl API [joes]
|
| 161 |
Add charset support for params and couple the SvUTF8 flag
|
| 162 |
to the param's taint flag.
|
| 163 |
|
| 164 |
- C API [joes]
|
| 165 |
Replace v->size with v->nlen + v->dlen.
|
| 166 |
Added supporting apreq_value_table_add().
|
| 167 |
|
| 168 |
- C API [joes]
|
| 169 |
Remove apreq_cookie_attr().
|
| 170 |
|
| 171 |
- C API [joes]
|
| 172 |
- Add apreq_error.h, apreq_module.h.
|
| 173 |
- Rename apreq_run* and apreq_make* funcs to conform with
|
| 174 |
apreq_$obj_$meth scheme.
|
| 175 |
- Replace c->version & c->secure with flags.
|
| 176 |
- Parsers are assumed to be working with external data, so the
|
| 177 |
cookies & params they produce are marked tainted.
|
| 178 |
|
| 179 |
- C API [joes]
|
| 180 |
apreq_parse_cookie_header() failed to parse RFC Cookie headers which
|
| 181 |
contained no space chars after the '$Version=1' preamble.
|
| 182 |
|
| 183 |
- C API [joes]
|
| 184 |
Reorganize around include/, library/, and module/ dirs.
|
| 185 |
|
| 186 |
- C Tests [joes]
|
| 187 |
Replace CuTest-based tests with custom TAP-compliant framework.
|
| 188 |
|
| 189 |
- C API [Max Kellermann]
|
| 190 |
Continue the API improvements:
|
| 191 |
|
| 192 |
- Convert APREQ_RUN_PARSER and APREQ_RUN_HOOK to inline, and downcase them.
|
| 193 |
- Remove apreq_memmem.
|
| 194 |
- Convert apreq_(un)escape to inline.
|
| 195 |
- apreq_escape does not create an apreq_value_t*.
|
| 196 |
- Initialize default_parsers explicitly to NULL.
|
| 197 |
- Convert APREQ_BRIGADE_COPY to inline, and downcase it.
|
| 198 |
- Lowercase APREQ_BRIGADE_SETASIDE, APREQ_BRIGADE_COPY.
|
| 199 |
- Convert apreq_cookie_name and apreq_cookie_value macros to inline.
|
| 200 |
- Convert apreq_param_name, apreq_param_value, apreq_param_info, and
|
| 201 |
apreq_param_brigade to inline.
|
| 202 |
|
| 203 |
- C API [joes]
|
| 204 |
Widespread API refactorization to remove apreq_jar_t and apreq_request_t:
|
| 205 |
|
| 206 |
- Header includes reorganized; apreq_parsers.h added (back again).
|
| 207 |
- Replaced apreq_jar_t and apreq_request_t with single apreq_env_handle_t.
|
| 208 |
- Added const qualifier to "v" attribute of apreq_cookie_t and apreq_param_t.
|
| 209 |
- Use union type-puns to drop const qualifiers inside the new
|
| 210 |
apreq_value_to_cookie and apreq_value_to_param implementations
|
| 211 |
(gcc generates same object code as the macro versions did).
|
| 212 |
- Moved "flags" attribute from apreq_value_t to apreq_cookie_t and apreq_param_t.
|
| 213 |
- Remove env argument from hooks and parsers.
|
| 214 |
- Reduce apreq_env_module to minimal set of operations.
|
| 215 |
- Replace apreq_log calls with apreq-specific error codes.
|
| 216 |
- Hooks are called on each body param now, not just during file uploads.
|
| 217 |
- Tie the cgi handle to its creator pool.
|
| 218 |
|
| 219 |
Detailed changes by header file:
|
| 220 |
|
| 221 |
[apreq.h]
|
| 222 |
- Remove flags from apreq_value_t.
|
| 223 |
- Remove const qualifier from apreq_value_t's "name" attribute.
|
| 224 |
- Remove apreq_value_merge* and apreq_value_copy*.
|
| 225 |
- Remove apreq_char_to_value, apreq_strtoval, and apreq_strlen.
|
| 226 |
- Move apreq_enctype to apreq_env.h.
|
| 227 |
- Move apreq_env_handle_t struct definition to apreq_env.h
|
| 228 |
- Change signature of apreq_decode.
|
| 229 |
- Move apreq_brigade_concat here, changed its signature and improved it alot.
|
| 230 |
- Remove apreq_brigade_spoolfile.
|
| 231 |
- Dropped APREQ_*_ENCTYPE, renamed some APREQ_$foo defaults APREQ_DEFAULT_$foo.
|
| 232 |
- Added APREQ_ERROR_*.
|
| 233 |
|
| 234 |
[apreq_cookie.h]
|
| 235 |
- Remove apreq_env.h include.
|
| 236 |
- Remove apreq_jar_t.
|
| 237 |
- Add "flags" to apreq_cookie_t, add const qualifier to its "v" attr.
|
| 238 |
- Remove apreq_jar* functions.
|
| 239 |
- Add apreq_parse_cookie_header.
|
| 240 |
- Move apreq_cookie, apreq_cookie_bake(2), and
|
| 241 |
apreq_ua_cookie_version to apreq_env.h.
|
| 242 |
|
| 243 |
[apreq_params.h]
|
| 244 |
- Remove apreq_env.h include.
|
| 245 |
- Remove apreq_request_t.
|
| 246 |
- Add "flags" to apreq_param_t, and const qualifier to its "v" attr.
|
| 247 |
- Rename "bb" attribute "upload" in apreq_param_t.
|
| 248 |
- Remove apreq_request* functions.
|
| 249 |
- Remove apreq_parse_request.
|
| 250 |
- Changed apreq_decode_param signature.
|
| 251 |
- Replace env argument with apr_table_t in apreq_params_as_array,
|
| 252 |
apreq_params_as_string,
|
| 253 |
- Move remaining apreq_param* to apreq_env.h.
|
| 254 |
- Move parser and hook sections to apreq_parsers.h.
|
| 255 |
- Change apreq_upload(s) old apreq_request_t arg to apr_table_t.
|
| 256 |
|
| 257 |
[apreq_parsers.h]
|
| 258 |
- Acquire the hook and parser sections of original apreq_params.h.
|
| 259 |
- Remove env argument from APREQ_PARSER_ARGS and APREQ_HOOK_ARGS
|
| 260 |
- Augment apreq_hook_t and apreq_parser_t to replace missing env features.
|
| 261 |
- Change apreq_make_parser and apreq_make_hook signatures.
|
| 262 |
- Rename apreq_add_hook to apreq_parser_add_hook, returning apr_status_t.
|
| 263 |
- Change apreq_parser signature.
|
| 264 |
|
| 265 |
[apreq_env.h]
|
| 266 |
- Remove read, log, pool, bucket_alloc, request, jar, and query_string methods.
|
| 267 |
- Include apreq_parsers.h.
|
| 268 |
- Reorganize apreq_env_module_t to provide hook, parser, jar, args,
|
| 269 |
& body table ops.
|
| 270 |
- Rename max_brigade to "brigade_limit", max_body to "read_limit".
|
| 271 |
- Change related module sigs, including temp_dir, to get/set methods.
|
| 272 |
- Add parser and read_limit args to apreq_env_make_custom_handle.
|
| 273 |
- Drop "name" arg and APREQ_ENV_MODULE =~ s/_ENV//.
|
| 274 |
- s/apreq_env_make/apreq_handle/ in the handle constructor names.
|
| 275 |
|
| 276 |
[mod_apreq.c, apreq_env_apache2.h]
|
| 277 |
- Changed APREQ_Max* configs to APREQ_BrigadeLimit and APREQ_ReadLimit.
|
| 278 |
- Handle constructor renamed apreq_handle_apache2.
|
| 279 |
|
| 280 |
- C API [joes]
|
| 281 |
Make our "libtool current interface" number depend on apr's
|
| 282 |
major number. This allows libapreq2 to be installed into a
|
| 283 |
system-wide location while avoiding ABI conflicts arising from
|
| 284 |
our apr-based interfaces.
|
| 285 |
|
| 286 |
- C API [Max Kellermann]
|
| 287 |
Introduce apreq_env_handle_t to replace the void *env usage.
|
| 288 |
Also added apreq_env_custom for making private handles, and new
|
| 289 |
apreq_env_apache2.h to let mod_apreq export apreq_env_make_apache2.
|
| 290 |
|
| 291 |
- C API [Max Kellermann]
|
| 292 |
Rename apreq_env_t to apreq_env_module_t, to prepare for
|
| 293 |
a new thread-safe apreq_env API.
|
| 294 |
|
| 295 |
- C API [Max Kellermann]
|
| 296 |
mod_apreq must check the return value of apreq_brigade_concat
|
| 297 |
to avoid a RAM-consuming infinite loop. A bad APREQ_TempDir
|
| 298 |
setting can cause this situation.
|
| 299 |
|
| 300 |
- C API [joes]
|
| 301 |
Provide workaround for chunked trailers bug in ap_http_filter.
|
| 302 |
|
| 303 |
- C, Perl API [joes]
|
| 304 |
Several upload-related bugfixes:
|
| 305 |
1) apreq_upload and apreq_uploads did not search the full body table,
|
| 306 |
2) $upload->slurp and $io->read did not autovivify the resultant string.
|
| 307 |
|
| 308 |
- C API [joes]
|
| 309 |
Add "flags" attribute to apreq_value_t, planning for charset support.
|
| 310 |
This is an ABI change, starting with libapreq2.so.2.0.24.
|
| 311 |
|
| 312 |
- C API [joes]
|
| 313 |
Add apreq_env_bucket_alloc() to get an allocator directly from the
|
| 314 |
environment instead of creating them from a pool. This is an
|
| 315 |
ABI change, starting with libapreq2.so.2.0.23.
|
| 316 |
|
| 317 |
- Build system [joes]
|
| 318 |
Add --with-apache2-httpd option so users can override apxs's
|
| 319 |
notion of where the httpd executable is. XSBuilder's header
|
| 320 |
parser runs from buildconf now instead of configure, so we
|
| 321 |
will include those tables in the release tarball. buildconf
|
| 322 |
gets an additional --with-perl option for running the xsbuilder.pl
|
| 323 |
parsing script. The XS generation code in xsbuilder.pl has moved
|
| 324 |
to glue/perl/Makefile.PL.
|
| 325 |
|
| 326 |
- Perl API [joes]
|
| 327 |
Allow ctors for Apache::Cookie, Apache::Cookie::Jar
|
| 328 |
and Apache:::Request to accept Apache::Request objects
|
| 329 |
(instead of requiring an Apache::RequestRec object).
|
| 330 |
This thread details the bug
|
| 331 |
http://thread.gmane.org/gmane.comp.apache.mod-perl/15727
|
| 332 |
|
| 333 |
- C API [Bojan Smojver]
|
| 334 |
Bake cookies with err_headers_out so they are
|
| 335 |
sent on non-2xx server responses (ie. a 304 redirect).
|
| 336 |
Also ensure that headers are copied with apr_table_add
|
| 337 |
instead of apr_table_addn. Since apreq_cookie_bake()
|
| 338 |
allocates from the stack, the Set-Cookie headers would
|
| 339 |
occasionally get mangled without this patch.
|
| 340 |
|
| 341 |
- C API [joes]
|
| 342 |
Add apreq_register_parser(), which allows users to add
|
| 343 |
their own parsers to apreq_parser()'s recognized MIME types.
|
| 344 |
|
| 345 |
- C API [joes]
|
| 346 |
Support "multipart/mixed" file uploads.
|
| 347 |
Support XForms' "multipart/related" enctype.
|
| 348 |
|
| 349 |
- C API [joes]
|
| 350 |
Add apreq_hook_apr_xml_parser(), which is a simple wrapper
|
| 351 |
hook around APR's expat-based apr_xml_parser. Add a generic
|
| 352 |
parser apreq_parse_generic() to parse arbitrary enctypes using
|
| 353 |
the hook API.
|
| 354 |
|
| 355 |
|
| 356 |
@section v2_04_dev Changes with libapreq2-2.04-dev (released August 30, 2004)
|
| 357 |
|
| 358 |
|
| 359 |
- Perl API [joes]
|
| 360 |
Add TAINT checks, marking all parsed data as tainted.
|
| 361 |
|
| 362 |
- C API [joes]
|
| 363 |
Add body_status attribute to apreq_request_t, to allow the both
|
| 364 |
environment and the parser to report any errors encountered.
|
| 365 |
|
| 366 |
- C API [randyk, joes]
|
| 367 |
Cookie parser was locking up on non-alphanumeric chars in cookie names.
|
| 368 |
Also RFC Cookie attributes are always checked for quotes during bake(2),
|
| 369 |
and the quotes are now stripped from incoming RFC cookies during parsing
|
| 370 |
(but they are never stripped from the actual cookie value).
|
| 371 |
|
| 372 |
- Perl API [joes]
|
| 373 |
Apache::Cookie::Jar->new accepts a VALUE_CLASS argument, which effectively
|
| 374 |
blesses all the jar's cookies into that class, which simplifies subclassing
|
| 375 |
Apache::Cookie. Accordingly Apache::Cookie->freeze($value) no longer accepts
|
| 376 |
a freeze()-able object in $value.
|
| 377 |
|
| 378 |
- C API [Markus Wichitill, randyk, joes]
|
| 379 |
Drop APR_DELONCLOSE from apreq_file_mktemp implementation and install
|
| 380 |
apreq_file_cleanup. When passed to apr_file_open on Win32, APR_DELONCLOSE
|
| 381 |
sets the FILE_SHARED_DELETE flag, which is, unfortunately, a property that
|
| 382 |
is preserved across NTFS "hard" links. This breaks apps that link()
|
| 383 |
the temp file to a permanent location, and subsequently expect to open it
|
| 384 |
without FILE_SHARED_DELETE before the original tempfile is closed+deleted.
|
| 385 |
In fact, even Apache::Upload does this, so it is a common enough event that
|
| 386 |
the apreq_file_cleanup workaround is necessary.
|
| 387 |
|
| 388 |
- C API [Ken Burcham, joes]
|
| 389 |
Fix bug in url parser that occurs when a %XX-encoded sequence
|
| 390 |
is split across multiple buckets. Added apreq_decode_decodev
|
| 391 |
to make this problem less inconvenient.
|
| 392 |
|
| 393 |
- Perl API [joes]
|
| 394 |
Exception objects inherit from the object which raised it,
|
| 395 |
which allows $@ to invoke its methods with impunity (exceptions
|
| 396 |
are disabled for objects which derive from an exception class).
|
| 397 |
|
| 398 |
- Perl API [joes]
|
| 399 |
Implement HOOK_DATA and UPLOAD_HOOK.
|
| 400 |
|
| 401 |
- Perl API [joes]
|
| 402 |
Add safe XS wrappers for $table->add, $table->set, $table->STORE,
|
| 403 |
and $table_class->new.
|
| 404 |
|
| 405 |
- Perl API [joes]
|
| 406 |
Add exceptions to $upload->link, $upload->tempname, $upload->slurp,
|
| 407 |
and $cookie->set_attr. Return value of $upload->slurp is now the
|
| 408 |
upload length. Also document new $upload->io.
|
| 409 |
|
| 410 |
- C API [joes]
|
| 411 |
Restrict all apr_status_t codes to APR_SUCCESS, APR_INCOMPLETE,
|
| 412 |
APR_EGENERAL, APR_EINIT, APR_ENOTIMPL, since any others will
|
| 413 |
generate confusing error messages from apr_strerror.
|
| 414 |
|
| 415 |
- Perl API [joes]
|
| 416 |
Added $upload->io with a TIEHANDLE API layered over APR::Brigade. $upload->fh
|
| 417 |
remains implemented as an APR::PerlIO object, which is seekable but less efficient
|
| 418 |
and currently suffers some portability issues associated with largefile support
|
| 419 |
in perl and apr.
|
| 420 |
|
| 421 |
- Perl API [joes]
|
| 422 |
Added apreq_xs_croak for throwing APR::Error exceptions and included
|
| 423 |
error-checking on $req->param, $req->args, $req->body, $req->upload,
|
| 424 |
and $jar->get.
|
| 425 |
|
| 426 |
- Perl API [joes]
|
| 427 |
Added $jar->status, $req->args_status and $req->body_status to report
|
| 428 |
parsing errors. Also add $upload->tempname per user request.
|
| 429 |
|
| 430 |
- C API [joes]
|
| 431 |
Dropped status attribute of apreq_value_t. Added status field to
|
| 432 |
apreq_jar_t and added args_status field to apreq_request_t. Parsers
|
| 433 |
also must return their public status code when a NULL brigade is passed.
|
| 434 |
apreq_hook_disable_uploads() is also added.
|
| 435 |
|
| 436 |
This is an ABI change affecting all versions of libapreq2 prior to 2.0.12.
|
| 437 |
|
| 438 |
- Perl API [joes]
|
| 439 |
$upload->info returns a proper APR::Table object now. Also implemented
|
| 440 |
$upload->size, $upload->fh, and $upload->type.
|
| 441 |
|
| 442 |
- C API [Jean-François Meesse]
|
| 443 |
mfd parser fails to parse CRLF-terminated files when the terminating
|
| 444 |
boundary string is at the start of a new bucket. This is reportedly
|
| 445 |
a common event for PDF files uploaded with Netscape 7.
|
| 446 |
|
| 447 |
- Perl API [joes]
|
| 448 |
Add back-compat support for Apache::Cookie->fetch() via
|
| 449 |
Apache->request.
|
| 450 |
|
| 451 |
- C API [joes]
|
| 452 |
Add MaxBody, MaxBrigade, and TempDir per-dir directives to mod_apreq
|
| 453 |
filter.
|
| 454 |
|
| 455 |
- C API [joes]
|
| 456 |
Replace free/tempnam dependency in apreq_file_mktemp() with
|
| 457 |
apr_temp_dir_get(). Add additional gcc warning flags when
|
| 458 |
--enable-maintainer-mode is set.
|
| 459 |
|
| 460 |
- C API [joes, Scott Hutton]
|
| 461 |
Replace apreq_brigade_copy with more effective APREQ_BRIGADE_COPY
|
| 462 |
macro. Also introduce APREQ_BRIGADE_SETASIDE to deal with buckets
|
| 463 |
that need to be set aside for use in future function calls. mod_ssl
|
| 464 |
generates transient buckets which tickled this bug.
|
| 465 |
|
| 466 |
- Perl API [joes]
|
| 467 |
Separate Apache::Upload module from Apache::Request for
|
| 468 |
better organization.
|
| 469 |
|
| 470 |
|
| 471 |
@section v2_03_dev Changes with libapreq2-2.03-dev (released June 12, 2004)
|
| 472 |
|
| 473 |
|
| 474 |
- C API [joes]
|
| 475 |
"Objectify" cookie/jar API: s/apreq_(make|serialize)_cookie/apreq_cookie_$1/
|
| 476 |
and reordering args so the cookie/jar object is always the first argument.
|
| 477 |
Macros added to provide source-compatibility with the old names.
|
| 478 |
|
| 479 |
- Perl API [joes]
|
| 480 |
Added $upload->slurp($data), which reads the contents of the file
|
| 481 |
upload "$upload" into the scalar "$data".
|
| 482 |
|
| 483 |
- C API [joes, randyk]
|
| 484 |
apreq_run_(hook|parser) are macros, so they are capitalized now.
|
| 485 |
Fixed apreq_params_as_string() and added apreq_params_as_array().
|
| 486 |
Reworked definitions of APREQ_DECLARE_HOOK, APREQ_DECLARE_PARSER
|
| 487 |
and apreq_(parser|hook)_t, hopefully to be more Win32 friendly.
|
| 488 |
Also updated the documentation.
|
| 489 |
|
| 490 |
- C API [joes]
|
| 491 |
Compensate for a missing CRLF in empty file upload block, which
|
| 492 |
actually complies with RFC 2046 Section 5.1.1. Konqueror (version unknown)
|
| 493 |
and Mozilla 0.9.7 are known to emit such blocks.
|
| 494 |
|
| 495 |
- Perl API [joes]
|
| 496 |
$req->upload() in list context failed to filter out non-uploads.
|
| 497 |
Also $req->upload("nonexistent-key-name") segfaults.
|
| 498 |
|
| 499 |
- Perl test suite
|
| 500 |
t/TEST.PL must run parent class' pre_configure to get the
|
| 501 |
configuration right
|
| 502 |
|
| 503 |
- C API [joes]
|
| 504 |
apreq_brigade_concat() wasn't supplying the final EOS bucket
|
| 505 |
to large brigades (>256K), which somtimes caused the prefetch
|
| 506 |
loop in mod_apreq.c's apreq_filter() to hang.
|
| 507 |
|
| 508 |
- Documentation [joes]
|
| 509 |
CHANGES file reformatted, removing dates & other clutter
|
| 510 |
as Stas suggests.
|
| 511 |
|
| 512 |
- C API [joes]
|
| 513 |
Rewrote cgi_read() in apreq_env.c and reworked mod_apreq.c
|
| 514 |
to enforce apreq_env_max_body() settings.
|
| 515 |
|
| 516 |
- C API [joes]
|
| 517 |
Fixed bug in url_parser code- missing context brigade was
|
| 518 |
needed to track key-value pairs which span multiple buckets.
|
| 519 |
|
| 520 |
- C API [joes]
|
| 521 |
API modifications: removed struct apreq_cfg_t, adding
|
| 522 |
new apreq_env hooks max_body, max_brigade_len, and temp_dir.
|
| 523 |
Folded apreq_parsers.h into apreq_params.h and modified the arguments
|
| 524 |
to apreq_run_parser() and apreq_run_hook(). Renamed
|
| 525 |
apreq_parser_t's content_type as enctype and apreq_copy_brigade()
|
| 526 |
as apreq_brigade_copy().
|
| 527 |
These changes make libapreq2.so.2.0.5 incompatible with earlier
|
| 528 |
versions.
|
| 529 |
|
| 530 |
- Perl API [stas]
|
| 531 |
Include ppport.h from blead-perl to support older perls.
|
| 532 |
Add a proper support for ithreads.
|
| 533 |
|
| 534 |
- C API [Swen Schillig, joes]
|
| 535 |
Fixed bug in calculation of Netscape cookie expiration dates.
|
| 536 |
apr_time_t is measured in microseconds, not seconds, which
|
| 537 |
threw off the arithmetic; apr_time_from_sec was needed for
|
| 538 |
the conversion.
|
| 539 |
|
| 540 |
- C API [Max Kellermann]
|
| 541 |
Fix segfault caused by invalid %-escape sequence in query string.
|
| 542 |
|
| 543 |
|
| 544 |
@section v2_02_dev Changes with libapreq2-2.02-dev (released Nov 15, 2003)
|
| 545 |
|
| 546 |
|
| 547 |
- Perl API [joes]
|
| 548 |
Fix bogus pool/cookie initializers in Apache::Cookie::set_attr(),
|
| 549 |
which caused Apache::Cookie::new to segfault. Bug
|
| 550 |
first reported to modperl list by Wolfgang Kubens.
|
| 551 |
|
| 552 |
|
| 553 |
@section v2_01_dev Changes with libapreq2-2.01-dev (released Nov 10, 2003)
|
| 554 |
|
| 555 |
|
| 556 |
- build system [joes]
|
| 557 |
Skip Apache::Test tests in env/ when Apache::Test is unavailable.
|
| 558 |
This allows the C API to be build and installed without requiring
|
| 559 |
Apache::Test (it is still a requirement for compiling the perl glue).
|
| 560 |
|
| 561 |
- C API mod_apreq.c [joes]
|
| 562 |
Parser errors were creeping into the return value of apreq_filter,
|
| 563 |
which breaks the "transparent tee" paradigm. This caused bogus
|
| 564 |
"400 Bad Request" responses (first reported by Vladimir Dudo)
|
| 565 |
to occur when libapreq2 was used by an output filter during a GET
|
| 566 |
request (handled by apache2's default handler). The test suite
|
| 567 |
has been updated accordingly.
|
| 568 |
|
| 569 |
- C API [joes]
|
| 570 |
Incorporate libapreq_cgi into libapreq2 as the default environment,
|
| 571 |
and add apreq_env_t and initializer apreq_env_module() to manage the
|
| 572 |
environment at runtime (determining the environment at load-time
|
| 573 |
was problematic on non-ELF systems).
|
| 574 |
|
| 575 |
|
| 576 |
@section v2_0_0 Changes with libapreq2-2.00-dev (Oct 25, 2003)
|
| 577 |
|
| 578 |
|
| 579 |
- C API: libapreq_cgi.c [randyk, joes]
|
| 580 |
CGI environment defined by env/libapreq_cgi.c is functional
|
| 581 |
(with tests added to env/t). This library may soon be incorporated
|
| 582 |
directly into libapreq2 as a default enviroment.
|
| 583 |
|
| 584 |
- C API: mod_apreq.c [joes]
|
| 585 |
Added ctx->saw_eos to ensure we don't read from upstream filters
|
| 586 |
after receiving an eos bucket. Otherwise it was possible for
|
| 587 |
two eos buckets to appear when a prefetch read is involved, which
|
| 588 |
breaks other modules like mod_proxy. This bug was uncovered by
|
| 589 |
Philippe Chiasson. mod_apreq's apreq_env_majic_number bumped to
|
| 590 |
reflect the added fixes.
|
| 591 |
|
| 592 |
- configure: --enable-perl-glue [joes]
|
| 593 |
The --enable-perl-glue option integrates the perl glue into the
|
| 594 |
normal Unix build cycle. It is disabled by default, but is silently
|
| 595 |
reenabled if the user configures the source tree via Makefile.PL.
|
| 596 |
|
| 597 |
- C API [joes]
|
| 598 |
Added apreq_header_attribute() and fixed mfd parser to allow
|
| 599 |
"charset" attribute to appear in the Content-Type header. Sven
|
| 600 |
Geisler points out that Opera 7.20 does generate such headers.
|
| 601 |
|
| 602 |
- C API [joes]
|
| 603 |
Added versioning API following http://apr.apache.org/versioning.html
|
| 604 |
apreq_env renamed apreq_env_name, and apreq_env_magic_number added
|
| 605 |
to provide versioning for environments (modules). The header files
|
| 606 |
are now installed to "include/apreq2", and the library is renamed
|
| 607 |
"libapreq2". Also added an apreq2-config script based on apu-config.
|
| 608 |
|
| 609 |
- configure: static mod_apreq.c [Bojan Smojver, joes]
|
| 610 |
Add --with-apache2-src configure option, along with --with-apr-config
|
| 611 |
and --with-apu-config, and provide support for compiling mod_apreq
|
| 612 |
into httpd as a static apache module.
|
| 613 |
|
| 614 |
- C API: mod_apreq.c [joes]
|
| 615 |
Support for internal redirects added to the mod_apreq filter.
|
| 616 |
This ensures any POST data prefetched in the main request
|
| 617 |
gets passed along to the subrequest handler(s).
|
| 618 |
|
| 619 |
- C bugfix: apreq_decode [Graham Clark]
|
| 620 |
If the source and destination strings are represented by the same
|
| 621 |
pointer - e.g. if called as apreq_unescape(s) - string s is modified
|
| 622 |
incorrectly in general. Patch includes new unit test.
|
| 623 |
|
| 624 |
- Perl API [joes]
|
| 625 |
Added $req->parse, $req->status, & "preparse" logic
|
| 626 |
to $req->param & $req->upload.
|
| 627 |
|
| 628 |
- C API [joes]
|
| 629 |
Added "preparse" logic to apreq_params & apreq_uploads
|
| 630 |
to bring behavior in line with libapreq-1.x.
|
| 631 |
|
| 632 |
- C API [joes]
|
| 633 |
Dropped param->charset.
|
| 634 |
Make apreq_brigade_concat public, so mod_apreq can use it
|
| 635 |
for its ctx->spool brigade.
|
| 636 |
|
| 637 |
- Documentation [joes]
|
| 638 |
Updated Cookie_pod to reflect API changes over v1.X.
|
| 639 |
|
| 640 |
- Documentation [joes]
|
| 641 |
Added doxygen links to Apache::Request and Apache::Cookie
|
| 642 |
perl docs.
|
| 643 |
|
| 644 |
- C API [joes]
|
| 645 |
Added apreq_copy_brigade(bb) to apreq.h.
|
| 646 |
|
| 647 |
- C API [joes]
|
| 648 |
The new filter-based design required a complete
|
| 649 |
departure from libapreq-1.X codebase. libapreq-2
|
| 650 |
is based solely on APR, and to be fully functional,
|
| 651 |
requires a supporting environment similar to Apache-2.
|
| 652 |
A person wishing to port libapreq-2 to a new environment
|
| 653 |
needs to provide definitions for the declarations in apreq_env.h.
|
| 654 |
|
| 655 |
- Perl API [joes]
|
| 656 |
Aggregates are always collected into an APR::Table-based package.
|
| 657 |
New table packages: Apache::Cookie::Table, Apache::Request::Table,
|
| 658 |
and Apache::Upload::Table.
|
| 659 |
|
| 660 |
- Perl API [joes]
|
| 661 |
Apache::Cookie->fetch now requires an "environment" argument ($r).
|
| 662 |
Its return value is blessed into the Apache::Cookie::Jar class.
|
| 663 |
|
| 664 |
- Perl API [joes]
|
| 665 |
Two new request lookup functions:
|
| 666 |
-# $req->args - param lookup using only the query string
|
| 667 |
-# $req->body - param lookup using only the POST data
|
| 668 |
|
| 669 |
|
| 670 |
**/
|
Parent Directory
| 
Revision Log