summaryrefslogtreecommitdiff
path: root/usr.sbin/slowcgi
AgeCommit message (Expand)Author
2016-08-16As suggested by the FastCGI spec, zero-pad the response buffers to beReyk Floeter
2015-11-20typo in error message: to -> tootb
2015-11-05pledge(2) for slowcgi.Florian Obser
2015-11-05re-shuffle slowcgi_listen to run less code as root.Florian Obser
2015-09-25Output the contents of the environment in debug mode which isTodd C. Miller
2015-01-22Clean up includes, while here fix a white space which lead to a falseFlorian Obser
2015-01-19The kernel doesn't actually care what a sockaddr's sa_len is on input,Philip Guenther
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2014-12-08read(2) returns ssize_t, not size_tBret Lambert
2014-12-05enable warningsFlorian Obser
2014-12-05Bail out if the buffer is too small to contain the length of aFlorian Obser
2014-12-05dead stores; pointed out by llvm scan-build; no binary changeFlorian Obser
2014-12-05pause shadows global; pointed out by gcc; no binary changeFlorian Obser
2014-12-05mode is unused; pointed out by gcc; no binary changeFlorian Obser
2014-12-05declare lerr and lerrx __dead; unconfuses llvm scan-buildFlorian Obser
2014-09-19Instead of doing the fcntl(2) and ioctl(2) song and dance just tellFlorian Obser
2014-08-28fix previous, and add a SEE ALSO section for httpd;Jason McIntyre
2014-08-26remove nginx referencesRobert Nagy
2014-07-13Use lerrx instead of errx since the logging subsystem is already initialized.Claudio Jeker
2014-06-10Implement -u (user to drop privs to) and -p flag (path to chroot to).Florian Obser
2014-06-10Cleanup socket creation.Florian Obser
2014-04-16My previous attempt to chdir(2) to the directory containing the cgiFlorian Obser
2014-04-14Calculate the length of name and value for parameters the right wayFlorian Obser
2014-04-13httpd(8) did a chdir(2) to the directory containing the cgi script. AsFlorian Obser
2014-03-17jturner pointed out that if one wants to run cgi scripts outsideFlorian Obser
2014-01-20Better explanation what slowcgi(8) is for.Florian Obser
2014-01-19Wording improvements from Patrik LundinTheo de Raadt
2014-01-19fix reaper loop that could run indefinitelyDamien Miller
2013-12-12Make it clear that slowcgi(8) drops privileges to user www.Florian Obser
2013-10-31Initialize sun_len, pointed out by deraadt@.Florian Obser
2013-10-29Fix a potential file descriptor overlap in exec_cgi() by making sureFlorian Obser
2013-10-23We need to loop around waitpid to catch all exited children as we areFlorian Obser
2013-10-21Do not leak fds in fork(2) error path.Florian Obser
2013-10-21Check for EINTR, too.Florian Obser
2013-10-21No need for volatile here.Florian Obser
2013-10-20spelling, spacing, etcTheo de Raadt
2013-10-20reserve file descriptors for incoming connections so weSebastian Benoit
2013-10-19Keep track of which fds were closed before and only close those stillFlorian Obser
2013-10-18Do not fiddle with the response queue directly but go throughFlorian Obser
2013-10-18Logging to syslog works better with openlog(3).Florian Obser
2013-10-18Use a dedicated socketpair for stdin, makes the code more symetric andFlorian Obser
2013-10-18Calculate correct pointer for fcgi_{begin,end}_request_body.Florian Obser
2013-10-18Calculate correct pointer for end_request; while there initializeFlorian Obser
2013-10-18set FD_CLOEXECFlorian Obser
2013-09-19adjust the names to more accurately reflect the names of structsBret Lambert
2013-09-11Sprinkle some comments which clarify the protocol/process flow.Bret Lambert
2013-09-06When dumping FastCGI protocol headers during debug, dump theBret Lambert
2013-09-06Use the correct buffer size for memory allocation and reads.Bret Lambert
2013-08-30If the CGI script died due to receipt of signal, pass that backBret Lambert
2013-08-26slowcgi grows an option to specify an alternate FastCGI socketBret Lambert