| Age | Commit message (Expand) | Author |
|---|
| 2018-08-01 | Clarify that we chroot to the users home directory if -u is provided. | Florian Obser |
| 2017-10-17 | add missing HISTORY; based on CVS logs and release announcements | Ingo Schwarze |
| 2017-07-04 | consistently use the evtimer wrappers around the connection timeout. | Florian Obser |
| 2017-05-26 | Sync the severity of the syslog_* functions shared between identd, slowcgi, | Florian Obser |
| 2016-09-04 | Add format attribute to logger functions. | Florian Obser |
| 2016-08-16 | As suggested by the FastCGI spec, zero-pad the response buffers to be | Reyk Floeter |
| 2015-11-20 | typo in error message: to -> too | tb |
| 2015-11-05 | pledge(2) for slowcgi. | Florian Obser |
| 2015-11-05 | re-shuffle slowcgi_listen to run less code as root. | Florian Obser |
| 2015-09-25 | Output the contents of the environment in debug mode which is | Todd C. Miller |
| 2015-01-22 | Clean up includes, while here fix a white space which lead to a false | Florian Obser |
| 2015-01-19 | The kernel doesn't actually care what a sockaddr's sa_len is on input, | Philip Guenther |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
| 2014-12-08 | read(2) returns ssize_t, not size_t | Bret Lambert |
| 2014-12-05 | enable warnings | Florian Obser |
| 2014-12-05 | Bail out if the buffer is too small to contain the length of a | Florian Obser |
| 2014-12-05 | dead stores; pointed out by llvm scan-build; no binary change | Florian Obser |
| 2014-12-05 | pause shadows global; pointed out by gcc; no binary change | Florian Obser |
| 2014-12-05 | mode is unused; pointed out by gcc; no binary change | Florian Obser |
| 2014-12-05 | declare lerr and lerrx __dead; unconfuses llvm scan-build | Florian Obser |
| 2014-09-19 | Instead of doing the fcntl(2) and ioctl(2) song and dance just tell | Florian Obser |
| 2014-08-28 | fix previous, and add a SEE ALSO section for httpd; | Jason McIntyre |
| 2014-08-26 | remove nginx references | Robert Nagy |
| 2014-07-13 | Use lerrx instead of errx since the logging subsystem is already initialized. | Claudio Jeker |
| 2014-06-10 | Implement -u (user to drop privs to) and -p flag (path to chroot to). | Florian Obser |
| 2014-06-10 | Cleanup socket creation. | Florian Obser |
| 2014-04-16 | My previous attempt to chdir(2) to the directory containing the cgi | Florian Obser |
| 2014-04-14 | Calculate the length of name and value for parameters the right way | Florian Obser |
| 2014-04-13 | httpd(8) did a chdir(2) to the directory containing the cgi script. As | Florian Obser |
| 2014-03-17 | jturner pointed out that if one wants to run cgi scripts outside | Florian Obser |
| 2014-01-20 | Better explanation what slowcgi(8) is for. | Florian Obser |
| 2014-01-19 | Wording improvements from Patrik Lundin | Theo de Raadt |
| 2014-01-19 | fix reaper loop that could run indefinitely | Damien Miller |
| 2013-12-12 | Make it clear that slowcgi(8) drops privileges to user www. | Florian Obser |
| 2013-10-31 | Initialize sun_len, pointed out by deraadt@. | Florian Obser |
| 2013-10-29 | Fix a potential file descriptor overlap in exec_cgi() by making sure | Florian Obser |
| 2013-10-23 | We need to loop around waitpid to catch all exited children as we are | Florian Obser |
| 2013-10-21 | Do not leak fds in fork(2) error path. | Florian Obser |
| 2013-10-21 | Check for EINTR, too. | Florian Obser |
| 2013-10-21 | No need for volatile here. | Florian Obser |
| 2013-10-20 | spelling, spacing, etc | Theo de Raadt |
| 2013-10-20 | reserve file descriptors for incoming connections so we | Sebastian Benoit |
| 2013-10-19 | Keep track of which fds were closed before and only close those still | Florian Obser |
| 2013-10-18 | Do not fiddle with the response queue directly but go through | Florian Obser |
| 2013-10-18 | Logging to syslog works better with openlog(3). | Florian Obser |
| 2013-10-18 | Use a dedicated socketpair for stdin, makes the code more symetric and | Florian Obser |
| 2013-10-18 | Calculate correct pointer for fcgi_{begin,end}_request_body. | Florian Obser |
| 2013-10-18 | Calculate correct pointer for end_request; while there initialize | Florian Obser |
| 2013-10-18 | set FD_CLOEXEC | Florian Obser |
| 2013-09-19 | adjust the names to more accurately reflect the names of structs | Bret Lambert |
