| Age | Commit message (Collapse) | Author | Lines | |
|---|---|---|---|---|
| 2015-04-19 | Merge branch 'fcgi_chdir' of git://github.com/philpennock/fcgiwrap | Furkan Sahin | -7/+15 | |
| Fixes: https://github.com/gnosek/fcgiwrap/pull/21 | ||||
| 2015-04-19 | Don't free socket_url at exit | Furkan Sahin | -3/+2 | |
| While this generally is the right thing to do, we don't clean up the rest of the memory (we're exiting in a moment, anyway) and conditionally freeing a single variable seems wrong. | ||||
| 2015-04-19 | Return the new fd directly from setup_socket() | Furkan Sahin | -4/+8 | |
| We either have a proper descriptor (>0) or an error (<0) so we don't strictly need the fd_out parameter | ||||
| 2014-08-15 | Use-after-free fix | Furkan Sahin | -4/+6 | |
| 2014-08-15 | SIGTERM, not SIGQUIT.. | Furkan Sahin | -1/+1 | |
| 2014-08-15 | Clean up unix socket on exit so we can start properly. | Furkan Sahin | -3/+30 | |
| If unix socket is not cleaned up, we will fail to bind on it the next startup round (Address already in use). | ||||
| 2014-03-09 | Let chdir be overriden with FCGI_CHDIR | Furkan Sahin | -7/+15 | |
| chdir to directory which holds scripts doesn't work well with some CGIs. Let the FastCGI invoker provide `FCGI_CHDIR` which can be `-` to inhibit chdir, or another place to chdir to. | ||||
| 2014-01-09 | prefork: Fix 100% CPU usage in parent process | Furkan Sahin | -1/+1 | |
| When a child process is terminated, the parent calls waitpid() to check for dead children. This returns -1 on error (e.g. there are no other children or a signal interrupted waitpid()), the pid (> 0) for dead children OR 0 if there are some children which are still alive. Fixes gnosek/fcgiwrap#18. | ||||
| 2013-04-13 | Add `-p path` option to restrict scripts | Furkan Sahin | -2/+27 | |
| If the purpose of fcgiwrap is to wrap cgit, then I want to be sure that no other program can be executed under the privileges of the fcgiwrap user. When the option `-p path` is given, only the programs specified by `path` are allowed to execute (multiple occurrences of `-p` are merged to form a list of allowed programs). Note that this value will be matched literally, no attempt is done to canonicalize the path. This also implies that glob patterns or directories will never match. | ||||
| 2013-02-03 | Bump version number | Furkan Sahin | -1/+1 | |
| 2013-02-03 | Add help for -f option | Furkan Sahin | -0/+1 | |
| 2013-02-03 | Close FCGI socket before executing script | Furkan Sahin | -0/+2 | |
| We do it in a rather violent way to avoid FCGI shutdown (the parent must keep the socket alive and working) | ||||
| 2013-02-03 | Unify CGI error handling | Furkan Sahin | -7/+7 | |
| Use the same error handler for 403s and 502s. This basically ports the required fixes from error_403 (previous commit) to the 502 error on failed exec(). Two user-visible side effects: - error message now says "403 Forbidden" instead of "403" - failed exec() gets logged over stderr (also, use \r\n instead of \n as a line seprator but that has been fixed up by the parent process before). | ||||
| 2013-02-03 | Fix 403 error handling | Furkan Sahin | -19/+21 | |
| Report 403 errors over normal stdout/stderr (after setting up the pipes). Properly reporting the error response over stdout requires: - flushing the I/O, which would otherwise get buffered - skipping atexit handlers (would otherwise close the FCGI connection cleanly, interfering with the parent process still trying to talk over it) | ||||
| 2013-02-03 | Check file permissions even when we get full path over FastCGI | Furkan Sahin | -0/+2 | |
| It's not a security issue (executing the file would fail, anyway) but it's a sensible sanity check. | ||||
| 2012-08-19 | Cleanup -Wmissing-prototypes compiler warnings | Furkan Sahin | -5/+5 | |
| 2012-08-19 | Add support for socket activation via systemd | Furkan Sahin | -0/+12 | |
| This prevents the need for starting fcgiwrap explicitly, or using a tool such as spawn-fcgi. The type of socket does not matter, we merely accept a single FD passed from pid 1 and listen on it. | ||||
| 2012-08-19 | split listen() logic into separate function | Furkan Sahin | -18/+24 | |
| 2011-12-07 | Create -f option to allow sending stderr to fcgi logs | Furkan Sahin | -2/+10 | |
| 2010-08-14 | fixing compilation under FreeBSD | Furkan Sahin | -0/+1 | |
| 2010-06-03 | Add `-s' option to enable binding by fcgiwrap itself | Furkan Sahin | -2/+123 | |
| This should ease testing and deployment in simpler cases | ||||
| 2010-06-03 | Use SCRIPT_FILENAME environment variable when available | Furkan Sahin | -1/+5 | |
| If present, it overrides DOCUMENT_ROOT and SCRIPT_NAME and prevents mangling of PATH_INFO. Should allow cleaner configs when script names don't come from request URIs directly. | ||||
| 2010-05-25 | adjusted option _-c_ help text | Furkan Sahin | -1/+1 | |
| 2010-05-25 | fcgiwrap to rely on definitions provided by autoconf/autoreconf | Furkan Sahin | -4/+4 | |
| 2010-05-25 | nitpicks as described in today's email to Mark | Furkan Sahin | -4/+4 | |
| Signed-off-by: W-Mark Kubacki <wmark@hurrikane.de> | ||||
| 2010-03-22 | help screen, along with version set to 1.0 | Furkan Sahin | -1/+13 | |
| 2009-07-17 | Compile fixes for OpenBSD | Furkan Sahin | -2/+3 | |
| Thanks to Toni Mueller, original author of the patch | ||||
| 2009-03-17 | Officially release fcgiwrap under the MIT licence | Furkan Sahin | -0/+25 | |
| 2009-03-17 | Close child's pipe ends after dup2()ing them to the right places | Furkan Sahin | -0/+4 | |
| Thanks to Fenixk19 for the report and patch. | ||||
| 2009-02-28 | Better diagnostics for 403 errors | Furkan Sahin | -12/+19 | |
| Passed via FastCGI stderr, so should end up in webserver's error log | ||||
| 2009-02-28 | Simple prefork support | Furkan Sahin | -2/+81 | |
| (start as fcgiwrap -c <num-children>, with a suitable socket on FD 0) | ||||
| 2008-12-03 | Don't eat characters after final CR/LF | Furkan Sahin | -2/+2 | |
| 2008-06-10 | Restore default SIGCHLD handler (also SIGPIPE for completeness) | Furkan Sahin | -0/+2 | |
| 2008-06-10 | Keep passing data from CGI to FastCGI even after a descriptor closes early | Furkan Sahin | -1/+1 | |
| 2008-05-05 | Fix CR/LF mangling to skip response body | Furkan Sahin | -0/+5 | |
| 2008-05-05 | Split out passing the request to a separate function | Furkan Sahin | -6/+17 | |
| 2008-03-22 | Fix off-by-one while walking the buffer | Furkan Sahin | -1/+1 | |
| 2008-03-22 | Use a much prettier state machine | Furkan Sahin | -53/+71 | |
| 2008-03-22 | Implement a simple state machine to fixup CGI reply line endings | Furkan Sahin | -8/+88 | |
| 2008-03-22 | Inherit environment from parent in CGI processes | Furkan Sahin | -0/+68 | |
| 2008-03-16 | Fix classic off-by-one in select() call | Furkan Sahin | -1/+1 | |
| 2008-03-16 | Send CGI stderr to real stderr, not to fastcgi stream | Furkan Sahin | -2/+20 | |
| 2008-03-16 | Use INT_MIN instead of -1 as sentinel in max_va() | Furkan Sahin | -2/+5 | |
| 2008-03-16 | Chdir to script's directory before exec (per CGI spec) | Furkan Sahin | -0/+15 | |
| 2007-09-30 | Mostly rewritten for robustness and prettier code | Furkan Sahin | -44/+159 | |
| 2007-03-10 | Improved CGI permission logic | Furkan Sahin | -9/+37 | |
| Symlinks are now allowed if owner matches | ||||
| 2007-03-10 | Initial commit | Furkan Sahin | -0/+170 | |
 |
index : fcgiwrap | |
| Fork of github.com/gnosek/fciwrap | Furkan Sahin |
| aboutsummaryrefslogtreecommitdiff |
path: root/fcgiwrap.c