fcgiwrap - Fork of github.com/gnosek/fciwrap

Age	Commit message (Collapse)	Author	Lines
2014-01-09	prefork: Fix 100% CPU usage in parent process	Furkan Sahin	-1/+1
	When a child process is terminated, the parent calls waitpid() to check for dead children. This returns -1 on error (e.g. there are no other children or a signal interrupted waitpid()), the pid (> 0) for dead children OR 0 if there are some children which are still alive. Fixes gnosek/fcgiwrap#18.
2013-04-13	Add `-p path` option to restrict scripts	Furkan Sahin	-2/+27
	If the purpose of fcgiwrap is to wrap cgit, then I want to be sure that no other program can be executed under the privileges of the fcgiwrap user. When the option `-p path` is given, only the programs specified by `path` are allowed to execute (multiple occurrences of `-p` are merged to form a list of allowed programs). Note that this value will be matched literally, no attempt is done to canonicalize the path. This also implies that glob patterns or directories will never match.
2013-02-03	Bump version number	Furkan Sahin	-1/+1

2013-02-03	Add help for -f option	Furkan Sahin	-0/+1

2013-02-03	Close FCGI socket before executing script	Furkan Sahin	-0/+2
	We do it in a rather violent way to avoid FCGI shutdown (the parent must keep the socket alive and working)
2013-02-03	Unify CGI error handling	Furkan Sahin	-7/+7
	Use the same error handler for 403s and 502s. This basically ports the required fixes from error_403 (previous commit) to the 502 error on failed exec(). Two user-visible side effects: - error message now says "403 Forbidden" instead of "403" - failed exec() gets logged over stderr (also, use \r\n instead of \n as a line seprator but that has been fixed up by the parent process before).
2013-02-03	Fix 403 error handling	Furkan Sahin	-19/+21
	Report 403 errors over normal stdout/stderr (after setting up the pipes). Properly reporting the error response over stdout requires: - flushing the I/O, which would otherwise get buffered - skipping atexit handlers (would otherwise close the FCGI connection cleanly, interfering with the parent process still trying to talk over it)
2013-02-03	Check file permissions even when we get full path over FastCGI	Furkan Sahin	-0/+2
	It's not a security issue (executing the file would fail, anyway) but it's a sensible sanity check.
2012-08-19	Cleanup -Wmissing-prototypes compiler warnings	Furkan Sahin	-5/+5

2012-08-19	Add support for socket activation via systemd	Furkan Sahin	-0/+12
	This prevents the need for starting fcgiwrap explicitly, or using a tool such as spawn-fcgi. The type of socket does not matter, we merely accept a single FD passed from pid 1 and listen on it.
2012-08-19	split listen() logic into separate function	Furkan Sahin	-18/+24

2011-12-07	Create -f option to allow sending stderr to fcgi logs	Furkan Sahin	-2/+10

2010-08-14	fixing compilation under FreeBSD	Furkan Sahin	-0/+1

2010-06-03	Add `-s' option to enable binding by fcgiwrap itself	Furkan Sahin	-2/+123
	This should ease testing and deployment in simpler cases
2010-06-03	Use SCRIPT_FILENAME environment variable when available	Furkan Sahin	-1/+5
	If present, it overrides DOCUMENT_ROOT and SCRIPT_NAME and prevents mangling of PATH_INFO. Should allow cleaner configs when script names don't come from request URIs directly.
2010-05-25	adjusted option _-c_ help text	Furkan Sahin	-1/+1

2010-05-25	fcgiwrap to rely on definitions provided by autoconf/autoreconf	Furkan Sahin	-4/+4

2010-05-25	nitpicks as described in today's email to Mark	Furkan Sahin	-4/+4
	Signed-off-by: W-Mark Kubacki <wmark@hurrikane.de>
2010-03-22	help screen, along with version set to 1.0	Furkan Sahin	-1/+13

2009-07-17	Compile fixes for OpenBSD	Furkan Sahin	-2/+3
	Thanks to Toni Mueller, original author of the patch
2009-03-17	Officially release fcgiwrap under the MIT licence	Furkan Sahin	-0/+25

2009-03-17	Close child's pipe ends after dup2()ing them to the right places	Furkan Sahin	-0/+4
	Thanks to Fenixk19 for the report and patch.
2009-02-28	Better diagnostics for 403 errors	Furkan Sahin	-12/+19
	Passed via FastCGI stderr, so should end up in webserver's error log
2009-02-28	Simple prefork support	Furkan Sahin	-2/+81
	(start as fcgiwrap -c <num-children>, with a suitable socket on FD 0)
2008-12-03	Don't eat characters after final CR/LF	Furkan Sahin	-2/+2

2008-06-10	Restore default SIGCHLD handler (also SIGPIPE for completeness)	Furkan Sahin	-0/+2

2008-06-10	Keep passing data from CGI to FastCGI even after a descriptor closes early	Furkan Sahin	-1/+1

2008-05-05	Fix CR/LF mangling to skip response body	Furkan Sahin	-0/+5

2008-05-05	Split out passing the request to a separate function	Furkan Sahin	-6/+17

2008-03-22	Fix off-by-one while walking the buffer	Furkan Sahin	-1/+1

2008-03-22	Use a much prettier state machine	Furkan Sahin	-53/+71

2008-03-22	Implement a simple state machine to fixup CGI reply line endings	Furkan Sahin	-8/+88

2008-03-22	Inherit environment from parent in CGI processes	Furkan Sahin	-0/+68

2008-03-16	Fix classic off-by-one in select() call	Furkan Sahin	-1/+1

2008-03-16	Send CGI stderr to real stderr, not to fastcgi stream	Furkan Sahin	-2/+20

2008-03-16	Use INT_MIN instead of -1 as sentinel in max_va()	Furkan Sahin	-2/+5

2008-03-16	Chdir to script's directory before exec (per CGI spec)	Furkan Sahin	-0/+15

2007-09-30	Mostly rewritten for robustness and prettier code	Furkan Sahin	-44/+159

2007-03-10	Improved CGI permission logic	Furkan Sahin	-9/+37
	Symlinks are now allowed if owner matches
2007-03-10	Initial commit	Furkan Sahin	-0/+170