unicorn.git - Rack HTTP server for Unix and fast clients

Date	Commit message (Collapse)
2010-04-19	http: negative/invalid Content-Length raises exception
	...instead of tripping an assertion. This fixes a potential denial-of-service for servers exposed directly to untrusted clients. This bug does not affect supported Unicorn deployments as Unicorn is only supported with trusted clients (such as nginx) on a LAN. nginx is known to reject clients that send invalid Content-Length headers, so any deployments on a trusted LAN and/or behind nginx are safe. Servers affected by this bug include (but are not limited to) Rainbows! and Zbatery. This does not affect Thin nor Mongrel which never got request body filtering treatment that the Unicorn HTTP parser got in August 2009.
2010-02-18	http: const correctness fixes
	Not fun, but maybe this can help us spot _real_ problems more easily in the future.
2009-09-15	http: add #endif comment labels where appropriate
	Sometimes I end up hacking on 10-row high terminals and need more context :x
2009-09-06	http: verbose assertions
	This makes it easier for bug reporters to tell us what's wrong in case line numbers change.
2009-08-15	http: fix warning when sizeof(off_t) == sizeof(long long)
	We need to declare constants for 64-bit off_t explicitly with the "LL" suffix on 32-bit machines.
2009-08-10	http: add CONST_MEM_EQ macro
	For comparing a raw memory space against a constant
2009-08-09	http: preliminary chunk decoding

2009-08-09	http: process Content-Length and Transfer-Encoding
	Explicitly track if our request will need Content-Length or chunked body decoding.
2009-08-09	http: move non-Ruby-specific macros c_util.h

2009-08-09	Refactoring unicorn_http C/Ragel code
	More tightly integrate the C/Ruby portions with C/Ragel to avoid the confusing the flow. Split out some files into hopefully logical areas so it's easier to focus on more interesting/volatile code.