Short: thttpd v2.25b Author: acme@acme.com Type: dev/gg Requires: MorphOS Architecture: ppc-morphos Uploaded: djbase@gmx.de - DJBase URL: http://www.acme.com/software/thttpd thttpd is a simple, small, portable, fast, and secure HTTP server. Ported by DJBase. http://www.djbase.de ----------------------------------------- New in version 2.25b: o Move fdwatch initialization before the chroot, so that /dev/poll can work. o Multiple fdwatch cleanups and fixes (Adam Zell). New in version 2.25: o Prohibit "Host: ." and "Host: .." (David Leadbeater). o Don't free memory prematurely on SIGUSR1 (A.D.F.). o Use the specified charset in directory listings and errors (Jonas Ohlsson). o Lowered THROTTLE_TIME from 60 seconds to 2 seconds, plus more aggressive computation of sending rate, to improve throttle reaction time (E Frank Ball). o Added code to redistribute the throttled bandwidth fairly among the currently sending connections. o Some more throttling changes that smooth things out a lot. o Added an experimental limitation on the number of simultaneous CGIs. o Chown the log file when starting as root, so that it can later be re-opened when running as nobody (or whatever user you configure). Also tweak the logfile pathname so that it still works inside a chroot tree. o Make sure URL paths begin with a slash. o Generate multiple MIME encodings in the correct order, and with the correct separator. o Ignore EINTR on read() and write(). o Fix error in httpd_read_fully() and httpd_write_fully() that could cause incorrect data to be read or written (Daniel Jensen). o Don't attempt to double-free a file descriptor if a connection times out while it is paused for throttling. o Save and restore errno in signal handlers. o The non-local referer check is no longer fooled by URLs with query strings. o Simplified handling of HAVE_INT64T (Trisk). If this causes problems, e.g. if there are still systems which don't have "long long", we can back out the change. o Keep a list of free connection structs, instead of doing linear search to find a free one (Adam Zell). o Added config.h option FLUSH_LOG_EVERY_TIME - if it's turned off, the log does not get fflushed after each request (Adam Zell). o Multiple robustness improvements to the fdwatch module (Adam Zell). o Added /dev/poll support to fdwatch (Adam Zell). o Automatically add no-cache control header on error responses. New in version 2.24: o Added a bunch of MIME types. o Fix minor problem with returning unknown protocol on some errors. o Changed the config-file option for diabling symlink checking from "nosymlink" to "nosymlinkcheck" to make its function clearer. o Allow blank lines in the config file. o Handle more than one SIGHUP and SIGUSR2 (Cameron Gregory). o Slight change to handle_newconnect() to better deal with unexpected errors from accept(), such as running out of file descriptors (Alex Keahan). o Added optional minimum rate to throttles. o Stats syslog messages downgraded from LOG_NOTICE to LOG_INFO. o Use unsigned short consistently for port number. o Prohibit slashes in the Host: header (Marcus Breiing). o Added a -dd data_dir flag and corresponding config-file option. o Got rid of the old timer-based zombie process reaper, replacing it with a SIGCHLD handler. o Changed the idle connection checking from using a separate timer for each connection to using a single timer that checks all active connections. o Correction to missing-slash directory redirect with query string. o Added a watchdog alarm handler that forces a core dump if thttpd stops running its timers for too long. o Don't send Content-Length header on 304 Not Modified responses. o Allow user-agent log entries to be up to 200 characters long, instead only of 80. o Fixed buffer overflow bug in defang(). o Re-arranged the order of calling de_dotdot() so that it doesn't get applied to query strings. o Some fixes for the syslogtocern script (paul fox). o Changed configure script to use "gcc -dumpversion" instead of "gcc --version" (Ed Goforth). o Changed most uses of \r and \n to \015 and \012 (Jens Bauer). o In ssi.c, lack of PATH_INFO is now non-fatal (David Phillips). o Some improvements to fdwatch (David Burgess).