summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Add better error handling for socket setupflu0r1ne2023-09-101-3/+15
|
* close() always results in a duplicate callflu0r1ne2023-09-101-11/+16
| | | | Remove close as it always results in a duplicated call, simplify logic
* Fix implicit fallthrough false positive, noreturnflu0r1ne2023-09-091-1/+7
| | | | | | With warnings and pedantic mode enabled, `gcc (GCC) 13.2.1` returns an implicit fall through warning. This can be fixed by annotating the error function with NORETURN.
* Ignore aclocal.m4 (autogenerated during build)Grzegorz Nosek2015-04-191-0/+1
|
* Add documentation for FCGI_CHDIRGrzegorz Nosek2015-04-191-0/+6
|
* Merge branch 'fcgi_chdir' of git://github.com/philpennock/fcgiwrapGrzegorz Nosek2015-04-191-7/+15
|\ | | | | | | Fixes: https://github.com/gnosek/fcgiwrap/pull/21
| * Let chdir be overriden with FCGI_CHDIRPhil Pennock2014-03-091-7/+15
| | | | | | | | | | | | chdir to directory which holds scripts doesn't work well with some CGIs. Let the FastCGI invoker provide `FCGI_CHDIR` which can be `-` to inhibit chdir, or another place to chdir to.
* | Don't free socket_url at exitGrzegorz Nosek2015-04-191-3/+2
| | | | | | | | | | | | While this generally is the right thing to do, we don't clean up the rest of the memory (we're exiting in a moment, anyway) and conditionally freeing a single variable seems wrong.
* | Return the new fd directly from setup_socket()Grzegorz Nosek2015-04-191-4/+8
| | | | | | | | | | We either have a proper descriptor (>0) or an error (<0) so we don't strictly need the fd_out parameter
* | Merge remote-tracking branch 'stromnet/socket_cleanup'Grzegorz Nosek2015-04-191-4/+33
|\ \ | | | | | | | | | Fixes: https://github.com/gnosek/fcgiwrap/pull/26
| * | Use-after-free fixJohan Ström2014-08-151-4/+6
| | |
| * | SIGTERM, not SIGQUIT..Johan Ström2014-08-151-1/+1
| | |
| * | Clean up unix socket on exit so we can start properly.Johan Ström2014-08-151-3/+30
| |/ | | | | | | | | If unix socket is not cleaned up, we will fail to bind on it the next startup round (Address already in use).
* | Explicit license info in README and COPYINGGrzegorz Nosek2015-04-172-0/+27
| |
* | Merge pull request #27 from justinclift/masterGrzegorz Nosek2015-04-191-0/+2
|\ \ | |/ |/| Added pkg-config to the requirements
| * Added pkg-config to the requirementsJustin Clift2015-03-191-0/+2
|/
* Merge pull request #20 from Lekensteyn/fix-bug-18Grzegorz Nosek2014-01-091-1/+1
|\ | | | | prefork: Fix 100% CPU usage in parent process
| * prefork: Fix 100% CPU usage in parent processPeter Wu2014-01-091-1/+1
|/ | | | | | | | | When a child process is terminated, the parent calls waitpid() to check for dead children. This returns -1 on error (e.g. there are no other children or a signal interrupted waitpid()), the pid (> 0) for dead children OR 0 if there are some children which are still alive. Fixes gnosek/fcgiwrap#18.
* Add info about Spanish translationGrzegorz Nosek2013-05-071-0/+3
|
* Merge pull request #12 from Lekensteyn/restrict-program2Grzegorz Nosek2013-04-151-2/+27
|\ | | | | Add `-p path` option to restrict scripts
| * Add `-p path` option to restrict scriptsPeter Wu2013-04-131-2/+27
|/ | | | | | | | | | | | | If the purpose of fcgiwrap is to wrap cgit, then I want to be sure that no other program can be executed under the privileges of the fcgiwrap user. When the option `-p path` is given, only the programs specified by `path` are allowed to execute (multiple occurrences of `-p` are merged to form a list of allowed programs). Note that this value will be matched literally, no attempt is done to canonicalize the path. This also implies that glob patterns or directories will never match.
* Update READMEGrzegorz Nosek2013-02-031-2/+6
|
* Bump version numberGrzegorz Nosek2013-02-032-2/+2
|
* Add help for -f optionGrzegorz Nosek2013-02-031-0/+1
|
* Close FCGI socket before executing scriptGrzegorz Nosek2013-02-031-0/+2
| | | | | We do it in a rather violent way to avoid FCGI shutdown (the parent must keep the socket alive and working)
* Unify CGI error handlingGrzegorz Nosek2013-02-031-7/+7
| | | | | | | | | | | | Use the same error handler for 403s and 502s. This basically ports the required fixes from error_403 (previous commit) to the 502 error on failed exec(). Two user-visible side effects: - error message now says "403 Forbidden" instead of "403" - failed exec() gets logged over stderr (also, use \r\n instead of \n as a line seprator but that has been fixed up by the parent process before).
* Fix 403 error handlingGrzegorz Nosek2013-02-031-19/+21
| | | | | | | | | Report 403 errors over normal stdout/stderr (after setting up the pipes). Properly reporting the error response over stdout requires: - flushing the I/O, which would otherwise get buffered - skipping atexit handlers (would otherwise close the FCGI connection cleanly, interfering with the parent process still trying to talk over it)
* Check file permissions even when we get full path over FastCGIGrzegorz Nosek2013-02-031-0/+2
| | | | | It's not a security issue (executing the file would fail, anyway) but it's a sensible sanity check.
* Merge pull request #8 from falconindy/masterGrzegorz Nosek2012-09-082-3/+5
|\ | | | | Minor buildsys fixes
| * Correct invalid defintion in configuring systemd supportDave Reisner2012-09-081-2/+1
| | | | | | | | | | | | | | This was an unfortunate copypasta error that slipped in with 9836d6d22. The HAVE_SYSTEMD macro should only be defined based on the presence of the library, not the unit files, since the units are useless without the library support.
| * Makefile.in: define dummy datarootdir variableDave Reisner2012-09-081-0/+1
| | | | | | | | | | | | | | | | This suppresses a warning on ./configure for a directory which fcgiwrap does not use: config.status: WARNING: 'Makefile.in' seems to ignore the --datarootdir setting
| * simplify build rule for fcgiwrapDave Reisner2012-08-231-1/+3
|/ | | | | | | Add flags and libraries to the respective environment vars and let make figure out the order on its own. This provides support for unmentioned vars such as LDFLAGS implicitly, as the compilation rule isn't explicitly defined.
* Merge pull request #7 from falconindy/systemdGrzegorz Nosek2012-08-214-0/+32
|\ | | | | add systemd unit files for installation
| * add systemd unit files for installationDave Reisner2012-08-214-0/+32
|/ | | | | These are automatically installed iff systemd support is compiled into fcgiwrap.
* Merge pull request #6 from falconindy/systemdGrzegorz Nosek2012-08-213-24/+59
|\ | | | | systemd socket activation support
| * Cleanup -Wmissing-prototypes compiler warningsDave Reisner2012-08-191-5/+5
| |
| * Add support for socket activation via systemdDave Reisner2012-08-193-1/+30
| | | | | | | | | | | | This prevents the need for starting fcgiwrap explicitly, or using a tool such as spawn-fcgi. The type of socket does not matter, we merely accept a single FD passed from pid 1 and listen on it.
| * split listen() logic into separate functionDave Reisner2012-08-191-18/+24
|/
* Merge pull request #5 from goochjj/masterGrzegorz Nosek2011-12-082-2/+16
|\ | | | | STDERR redirection back through the FCGI socket
| * fix manpage - add -f optionJoe Gooch2011-12-081-0/+6
| |
| * Create -f option to allow sending stderr to fcgi logsJoseph Gooch2011-12-081-2/+10
|/
* support LDFLAGSNikoli2010-09-151-1/+1
|
* Add missing escaping to minus signs.Jordi Mallach2010-09-081-2/+2
| | | | | | "-" must be escaped ("\-") to be interpreted as minus. Signed-off-by: Jordi Mallach <jordi@debian.org>
* [GH-2] Advance configure.ac version to 1.0.3Grzegorz Nosek2010-08-231-1/+1
|
* fixing compilation under FreeBSDQuentin Stievenart2010-08-161-0/+1
|
* Create folder for man prior to the installation.Ron Huang2010-06-111-0/+2
|
* Add `-s' option to enable binding by fcgiwrap itselfGrzegorz Nosek2010-06-032-4/+144
| | | | This should ease testing and deployment in simpler cases
* Use SCRIPT_FILENAME environment variable when availableGrzegorz Nosek2010-06-032-4/+16
| | | | | | If present, it overrides DOCUMENT_ROOT and SCRIPT_NAME and prevents mangling of PATH_INFO. Should allow cleaner configs when script names don't come from request URIs directly.
* Jordi Mallach's email has been corrected as requested by him.W-Mark Kubacki2010-06-022-1/+2
| | | | He's been added to the contributors in README.rst.
* added handling of manpages to makefileW-Mark Kubacki2010-05-251-1/+2
|