upstream/haproxy
1
0
Fork 0
mirror of https://github.com/haproxy/haproxy.git synced 2026-06-18 05:50:35 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 9
haproxy/src
History
William Lallemand 85a833feba BUG/MINOR: ssl-gencert: validate SNI characters to prevent SAN certificate injection 
ssl_sock_add_san_ext() builds the Subject Alternative Name extension by
concatenating "DNS:" + servername and passing the result to
X509V3_EXT_nconf_nid(). OpenSSL's nconf parser splits the value string on
commas into multiple type:value SAN entries. The SNI comes from unauthenticated
TLS ClientHello data -- an attacker can embed commas and colons (e.g.,
"host,dns:internal.corp,ip:10.0.0.1") to inject arbitrary GENERAL_NAME entries
into certificates signed by HAProxy's configured CA.

This is a CA issuance-policy violation: the operator expects one certificate
per SNI hostname, but an attacker can obtain certificates containing additional
hostnames/IPs/emails without access to the CA private key.

Fix by adding ssl_sock_sni_is_valid() that validates the SNI contains only
DNS-label-legal characters (alphanumeric, hyphens, dots). The check is
performed at the start of ssl_sock_do_create_cert() before any allocation.
Commas, colons, spaces, and other special characters cause certificate
generation to fail, preventing SAN injection while allowing all valid
hostname values.

Must be backported in every maintained branches.
2026-05-27 10:20:55 +02:00
..
_ceb_addr.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_blk.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_int.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_str.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
acl.c CLEANUP: acl: remove duplicate test in parse_acl_expr() and unused variable 2026-04-30 17:39:26 +02:00
acme.c BUG/MEDIUM: acme: protect against risk of null-deref on connection failure 2026-05-26 13:13:24 +02:00
acme_resolvers.c MINOR: acme: extend resolver-based DNS pre-check to dns-persist-01 2026-04-13 18:45:08 +02:00
action.c MINOR: actions: also report execution contexts registered directly 2026-03-12 18:06:38 +01:00
activity.c MINOR: activity: support aggregating by caller also for memprofile 2026-03-12 18:06:38 +01:00
applet.c BUG/MEDIUM: applet: Properly handle receives of size 0 2026-05-22 08:45:57 +02:00
arg.c MINOR: arg: add an argument type for identifier 2024-10-18 14:30:24 +02:00
auth.c BUG/MEDIUM: auth: fix unconfigured password NULL deref 2026-05-26 14:13:23 +02:00
backend.c MINOR: backend: support QMux in clear for BE side 2026-05-21 15:09:10 +02:00
base64.c BUG/MINOR: base64: return empty string for empty input in base64dec() 2026-05-26 13:13:24 +02:00
buf.c CLEANUP: tree-wide: fix typos in non user-visible comments in 3 more files 2026-05-12 17:07:55 +02:00
cache.c BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry() 2026-05-26 13:13:24 +02:00
calltrace.c BUG/MINOR: calltrace: fix 'now' being used in place of 'date' 2023-04-27 18:14:57 +02:00
ceb32_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
ceb64_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
ceba_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebb_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebib_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebis_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebl_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebs_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebtree-dbg.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebtree-prv.h IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cfgcond.c BUG/MINOR: cfgcond: make KQUEUE check for GTUNE_USE_KQUEUE not GTUNE_USE_EPOLL 2026-05-11 16:04:19 +02:00
cfgdiag.c MEDIUM: tcpcheck: Refactor how tcp-check rulesets are stored 2026-04-01 16:34:37 +02:00
cfgparse-global.c MINOR: config: shm-stats-file is no longer experimental 2026-05-21 08:50:20 +02:00
cfgparse-listen.c BUG/MINOR: cfgparse-listen: do not emit extraneous line in rule order warnings 2026-05-11 09:32:41 +02:00
cfgparse-peers.c MINOR: errors: remove excessive errmsg checks 2026-04-13 15:39:05 +02:00
cfgparse-quic.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
cfgparse-ssl.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
cfgparse-tcp.c MINOR: tcp: add new bind option "tcp-ss" to instruct the kernel to save the SYN 2025-12-24 11:35:09 +01:00
cfgparse-unix.c CLEANUP: tree-wide: remove 25 occurrences of unneeded fcntl.h 2022-04-26 10:59:48 +02:00
cfgparse.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
channel.c CLEANUP: tree-wide: fix typos in non user-visible comments in 15 files 2026-05-11 16:01:50 +02:00
check.c BUG/MINOR: check: properly report errno in chk_report_conn_err() 2026-05-18 18:40:37 +02:00
chunk.c CLEANUP: tree-wide: fix typos in user-invisible files 2026-05-13 17:03:48 +02:00
cli.c BUG/MEDIUM: cli: Fix parsing of pattern finishing a command payload 2026-05-22 17:17:01 +02:00
clock.c MEDIUM: stats-file/clock: automatically update now_offset based on shared clock 2026-03-18 11:18:33 +01:00
compression.c MINOR: compression: prefix compression oriented functions with "comp_" 2026-04-17 08:26:56 +02:00
connection.c MINOR: connection: define mask CO_FL_WAIT_XPRT_L6 2026-05-21 15:09:10 +02:00
counters.c BUG/MINOR: counters: fix unexpected 127 char GUID truncation for shm-stats-file objects 2026-04-04 02:14:50 +02:00
cpu_topo.c CLEANUP: tree-wide: fix more typos and outdated explanations in comments 2026-05-13 11:24:27 +02:00
cpuset.c CLEANUP: src/cpuset.c: fix missing return in functions returning int 2026-05-12 08:55:19 +02:00
debug.c CLEANUP: tree-wide: fix more typos and outdated explanations in comments 2026-05-13 11:24:27 +02:00
dgram.c MINOR: cfgparse: parse tune.{rcvbuf,sndbuf}.{frontend,backend} as sizes 2024-11-18 18:50:02 +01:00
dict.c BUG/MINOR: dict: fix refcount race on insert collision 2026-05-25 10:52:42 +02:00
dns.c CLEANUP: address a few typos and copy-paste errors in httpclient and dns 2026-05-15 18:25:13 +02:00
dns_ring.c MAJOR: import: update mt_list to support exponential back-off (try #2) 2024-07-09 16:46:38 +02:00
dynbuf.c MINOR: buffers: Move small buffers management from quic to dynbuf part 2026-03-23 14:02:42 +01:00
eb32sctree.c REORG: ebtree: move the include files from ebtree to include/import/ 2020-06-11 09:31:11 +02:00
eb32tree.c IMPORT: ebtree: only use __builtin_prefetch() when supported 2025-09-17 14:30:32 +02:00
eb64tree.c IMPORT: ebtree: only use __builtin_prefetch() when supported 2025-09-17 14:30:32 +02:00
ebimtree.c CLEANUP: include: tree-wide alphabetical sort of include files 2020-06-11 10:18:59 +02:00
ebistree.c REORG: ebtree: move the include files from ebtree to include/import/ 2020-06-11 09:31:11 +02:00
ebmbtree.c CLEANUP: assorted typo fixes in the code and comments 2021-08-16 12:37:59 +02:00
ebsttree.c REORG: ebtree: move the include files from ebtree to include/import/ 2020-06-11 09:31:11 +02:00
ebtree.c BUG/MEDIUM: ebtree: use a byte-per-byte memcmp() to compare memory blocks 2020-06-16 11:30:33 +02:00
ech.c BUG/MINOR: ech: permission checks on the CLI 2026-03-25 18:37:06 +01:00
errors.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
ev_epoll.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_evports.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_kqueue.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_poll.c DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints 2024-05-24 12:07:18 +02:00
ev_select.c DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints 2024-05-24 12:07:18 +02:00
event_hdl.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
extcheck.c MINOR: mux: Rename the "token" from mux_proto_list to mux_proto 2026-05-19 18:33:54 +02:00
fcgi-app.c MINOR: mux: Rename the "token" from mux_proto_list to mux_proto 2026-05-19 18:33:54 +02:00
fcgi.c BUG/MAJOR: fcgi: Fix param decoding by properly checking its size 2026-03-05 15:35:21 +01:00
fd.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
filters.c CLEANUP: Reapply strcmp.cocci (3) 2026-04-29 04:39:12 +02:00
fix.c CLEANUP: assorted typo fixes in the code and comments 2021-08-16 12:37:59 +02:00
flt_bwlim.c BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period 2025-11-24 14:10:13 +01:00
flt_http_comp.c CLEANUP: flt_http_comp: remove duplicate rate limit and CPU usage checks 2026-05-11 16:04:19 +02:00
flt_spoe.c BUG/MINOR: http-ana: Only consider client abort for abortonclose 2026-03-27 11:18:40 +01:00
flt_trace.c CLEANUP: tree-wide: drop a few useless null-checks before free() 2026-02-26 08:24:03 +01:00
freq_ctr.c BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period 2025-11-24 14:10:13 +01:00
frontend.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
guid.c MEDIUM: guid: switch guid to more compact cebuis_tree 2025-09-16 09:23:46 +02:00
h1.c MINOR: h1: Add a H1M flag to specify a non-empty 'Upgrade:' header was parsed 2026-05-26 18:28:07 +02:00
h1_htx.c BUG/MEDIUM: h1-htx: Sanitize parsing to properly handle upgrade requests 2026-05-26 18:28:07 +02:00
h2.c BUG/MINOR: h2: only accept :protocol with extended CONNECT 2026-05-05 14:10:36 +02:00
h3.c BUG/MINOR: h3: add missing break on rcv_buf() 2026-05-26 14:14:24 +02:00
h3_stats.c MEDIUM: counters: return aggregate extra counters in ->fill_stats() 2026-02-26 17:03:53 +01:00
haproxy.c MEDIUM: tools: switch the main PRNG to a thread-local xoshiro256** 2026-05-26 13:13:24 +02:00
hash.c BUILD: hash: use __fallthrough in hash_djb2() 2022-11-14 11:14:02 +01:00
haterm.c BUG/MINOR: haterm: fix the random suffix multiplication 2026-05-25 20:49:22 +02:00
haterm_init.c MINOR: haterm: do not emit a warning when not using SSL 2026-05-26 13:11:35 +02:00
hlua.c BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers 2026-05-26 14:18:20 +02:00
hlua_fcn.c BUG/MINOR: hlua: fix format-string vulnerability in Patref error path 2026-04-07 14:18:13 +02:00
hpack-dec.c BUG/MEDIUM: hpack: correctly deal with too large decoded numbers 2026-03-05 14:33:21 +01:00
hpack-enc.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
hpack-huff.c BUG/MEDIUM: hpack: fix incorrect huffman decoding of some control chars 2023-01-26 11:36:39 +01:00
hpack-tbl.c BUILD/DEBUG: hpack-tbl: fix format string in standalone debug code 2022-04-12 08:30:08 +02:00
hq_interop.c REORG: mux_quic: use newer qcm prefix for legacy qmux files 2026-05-13 16:11:50 +02:00
http.c MINOR: http: fix 405,431,501 default errorfile 2025-10-29 08:47:19 +01:00
http_acl.c CLEANUP: acl: don't reference the generic pattern deletion function anymore 2020-11-05 19:27:09 +01:00
http_act.c BUG/MINOR: http-act: set-status() must check the response message, not the request 2026-05-11 16:04:19 +02:00
http_ana.c BUG/MINOR: cache: also recognize directives in the form "token=" 2026-05-26 13:13:24 +02:00
http_client.c CLEANUP: address a few typos and copy-paste errors in httpclient and dns 2026-05-15 18:25:13 +02:00
http_conv.c BUG/MINOR: sample: request an extra output byte for the url_dec converter 2026-05-26 13:13:24 +02:00
http_ext.c BUG/MINOR: http-ext: always check remaining data when reading rfc7239 nodeport 2026-05-26 13:13:24 +02:00
http_fetch.c BUG/MINOR: http-fetch: check against the whole token in get_http_auth() 2026-05-26 13:13:24 +02:00
http_htx.c CLEANUP: http_htx: rename inner 'type' to 'ptype' to avoid variable shadowing 2026-05-11 16:04:19 +02:00
http_rules.c MINOR: actions: store the location of keywords registered via initcalls 2026-03-12 18:06:38 +01:00
httpclient_cli.c BUG/MINOR: httpclient-cli: fix uninit variable in error label 2026-05-19 18:33:13 +02:00
htx.c BUG/MEDIUM: htx: Alloc a chunk of right size in htx_replace_blk_value() 2026-05-20 16:21:02 +02:00
init.c MINOR: initcall: record the file and line declaration of an INITCALL 2026-03-12 18:06:38 +01:00
jwe.c BUG/MEDIUM: jwe: substitute random CEK on RSA1_5 decryption failure per RFC 7516 #11.5 2026-05-26 18:19:00 +02:00
jws.c BUG/MINOR: jws: Add missing return value check (EVP_PKEY_get_bn_param) 2026-05-19 15:21:26 +02:00
jwt.c BUG/MINOR: jwt: fix possible memory leak in convert_ecdsa_sig() error path 2026-05-18 18:50:30 +02:00
lb_chash.c MINOR: backend: support hash-key guid for a stabler distribution 2026-05-19 19:11:25 +02:00
lb_fas.c MINOR: lb: make LB initialization even more declarative 2026-05-11 08:50:40 +02:00
lb_fwlc.c MINOR: lb: make LB initialization even more declarative 2026-05-11 08:50:40 +02:00
lb_fwrr.c MINOR: lb: make LB initialization even more declarative 2026-05-11 08:50:40 +02:00
lb_map.c MINOR: lb: make LB initialization even more declarative 2026-05-11 08:50:40 +02:00
lb_ss.c MINOR: lb: make LB initialization even more declarative 2026-05-11 08:50:40 +02:00
limits.c BUG/MEDIUM: limits: properly account for global.maxpipes in compute_ideal_maxconn() 2026-05-19 15:19:23 +02:00
linuxcap.c MEDIUM: init: always warn when running as root without being asked to 2025-09-05 08:51:07 +02:00
listener.c MAJOR: mux-quic: activate QMux for frontend side 2026-04-02 14:02:05 +02:00
log.c BUG/MINOR: log: look for the end of priority before the end of the buffer 2026-05-25 10:52:42 +02:00
lru.c BUG/MINOR: lru: fix the standalone test case for invalid revision 2024-04-13 08:43:12 +02:00
mailers.c MINOR: mailers: warn if mailers are configured but not actually used 2025-06-27 16:41:18 +02:00
map.c CLEANUP: map/cli: fix some map-related help messages 2026-04-30 17:39:26 +02:00
mjson.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
mpring.c MINOR: add an MPSC ring buffer implementation 2026-04-30 15:33:07 +02:00
mqtt.c CLEANUP: mqtt: fix spelling of shared_subscription_available 2026-05-11 17:28:21 +02:00
mux_fcgi.c CLEANUP: mux-fcgi/mux-spop: Remove copy/pasted comment about slow realign 2026-05-26 18:28:07 +02:00
mux_h1.c BUILD: traces: set a few __maybe_unused on vars used only for traces 2026-05-20 11:46:43 +02:00
mux_h2.c BUG/MINOR: mux-h2: validate HEADERS frame length before reading stream dep 2026-05-25 10:52:42 +02:00
mux_pt.c MINOR: mux: Rename the "token" from mux_proto_list to mux_proto 2026-05-19 18:33:54 +02:00
mux_quic.c BUG/MINOR: mux_quic: do not exceed stream.max-concurrent on backend side 2026-05-20 14:42:03 +02:00
mux_spop.c CLEANUP: mux-fcgi/mux-spop: Remove copy/pasted comment about slow realign 2026-05-26 18:28:07 +02:00
mworker.c MEDIUM: tools: switch the main PRNG to a thread-local xoshiro256** 2026-05-26 13:13:24 +02:00
namespace.c BUG/MINOR: namespace: handle a possible strdup() failure 2024-12-10 08:05:34 +01:00
ncbmbuf.c MINOR: ncbmbuf: improve itbmap_next() code 2026-02-23 16:28:41 +01:00
ncbuf.c MINOR: ncbuf: missing malloc checks in standalone code 2023-05-12 09:45:30 +02:00
net_helper.c BUG/MEDIUM: net_helper: fix a remaining possibly infinite loop in converters 2026-05-21 15:05:39 +02:00
pattern.c BUG/MINOR: pattern: release the reference on failure to load from file 2026-04-30 17:39:26 +02:00
payload.c BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_parse() 2026-05-26 13:13:24 +02:00
peers.c CLEANUP: tree-wide: fix around 20 mistakes in comments in h2,tools,peers 2026-04-27 14:47:39 +02:00
pipe.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
pool.c CLEANUP: stats: drop stats.h / stats-t.h where not needed 2026-02-26 08:24:03 +01:00
proto_quic.c OPTIM: quic: rework the QUIC RX code 2026-04-30 15:33:07 +02:00
proto_rhttp.c MINOR: mux: Rename the "token" from mux_proto_list to mux_proto 2026-05-19 18:33:54 +02:00
proto_sockpair.c BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS 2026-03-16 16:31:58 +01:00
proto_tcp.c MINOR: startup: Add HAVE_WORKING_TCP_MD5SIG in haproxy -vv 2026-02-12 18:02:19 +01:00
proto_udp.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
proto_uxdg.c MINOR: protocol: create abnsz socket address family 2024-10-29 12:14:50 +01:00
proto_uxst.c MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket() 2025-06-11 18:37:34 +02:00
protocol.c CLEANUP: tree-wide: fix more typos and outdated explanations in comments 2026-05-13 11:24:27 +02:00
proxy.c BUILD: proxy: unstatify the proxies_del_lock to avoid a warning without threads 2026-05-21 09:03:03 +02:00
qcm_http.c REORG: mux_quic: use newer qcm prefix for legacy qmux files 2026-05-13 16:11:50 +02:00
qcm_qmux.c BUG/MINOR: qmux: do not crash on frame parsing issue 2026-05-26 14:29:55 +02:00
qcm_trace.c MEDIUM: mux_quic: rename qmux traces to qcm 2026-05-13 16:23:58 +02:00
qpack-dec.c MINOR: mux_quic/h3: report termination events at connection level 2026-04-27 15:02:58 +02:00
qpack-enc.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
qpack-tbl.c CLEANUP: qpack: properly use the QPACK macros not HPACK ones in debug code 2022-11-24 15:38:26 +01:00
queue.c CLEANUP: tree-wide: fix more typos and outdated explanations in comments 2026-05-13 11:24:27 +02:00
quic_ack.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_cc.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cc_bbr.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_cc_cubic.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_cc_drs.c BUG/MINOR: quic: remove max_bw filter from delivery rate sampling 2024-12-13 14:42:43 +01:00
quic_cc_newreno.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cc_nocc.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cid.c BUG/MINOR: quic: fix ODCID lookup from derived value 2026-05-22 16:03:10 +02:00
quic_cli.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_conn.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_enc.c TESTS: quic: useless param for b_quic_dec_int() 2025-10-15 09:58:03 +02:00
quic_fctl.c MINOR: mux-quic: define a flow control related type 2024-01-31 16:28:54 +01:00
quic_frame.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_loss.c MINOR: quic: split congestion controler options for FE/BE usage 2025-10-23 16:49:20 +02:00
quic_openssl_compat.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_pacing.c MINOR: quic: adapt credit based pacing to BBR 2025-01-23 17:41:07 +01:00
quic_retransmit.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_retry.c OPTIM: quic: reduce the size of struct quic_dgram 2026-04-30 15:33:07 +02:00
quic_rules.c OPTIM: quic: reduce the size of struct quic_dgram 2026-04-30 15:33:07 +02:00
quic_rx.c BUG/MINOR: quic: reject packet too short for HP decryption 2026-05-26 17:21:07 +02:00
quic_sock.c BUG/MINOR: quic: fix trace crash on datagram receive 2026-05-04 11:18:35 +02:00
quic_ssl.c BUILD: traces: set a few __maybe_unused on vars used only for traces 2026-05-20 11:46:43 +02:00
quic_stats.c MEDIUM: counters: return aggregate extra counters in ->fill_stats() 2026-02-26 17:03:53 +01:00
quic_stream.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_tls.c BUILD: traces: set a few __maybe_unused on vars used only for traces 2026-05-20 11:46:43 +02:00
quic_token.c MEDIUM: quic: use ha_random64_pair_hashed() to generate the QUIC retry tokens 2026-05-26 13:13:24 +02:00
quic_tp.c BUG/MINOR: mux_quic: do not exceed stream.max-concurrent on backend side 2026-05-20 14:42:03 +02:00
quic_trace.c MINOR: quic: fix trace spacing when datagram is displayed 2026-05-04 11:18:47 +02:00
quic_tx.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
raw_sock.c CLEANUP: tree-wide: fix more typos and outdated explanations in comments 2026-05-13 11:24:27 +02:00
regex.c BUG/MEDIUM: regex: allocate a large enough pcre2 match for all matches 2026-05-25 10:16:06 +02:00
resolvers.c BUG/MINOR: resolvers: switch to a better PRNG for query IDs 2026-05-26 13:13:24 +02:00
ring.c OPTIM: ring: avoid reloading the tail_ofs value before the CAS in ring_write() 2025-09-18 15:27:32 +02:00
sample.c BUG/MINOR: sample: limit the be2hex converter's chunk size 2026-05-25 10:57:13 +02:00
server.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
server_state.c MEDIUM: counters: Dynamically allocate per-thread group counters 2026-01-13 11:12:34 +01:00
session.c MINOR: session: support QMux in clear on FE side 2026-05-21 15:09:10 +02:00
sha1.c BUILD: use inttypes.h instead of stdint.h 2019-04-01 07:44:56 +02:00
shctx.c BUG/MEDIUM: shctx: Use the next block when data exactly filled a block 2026-02-18 09:44:15 +01:00
signal.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
sink.c BUG/MINOR: sink: do not free existing sinks on allocation error 2026-04-30 08:01:24 +02:00
slz.c BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals 2026-04-08 19:14:25 +02:00
sock.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
sock_inet.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
sock_unix.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
ssl_ckch.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
ssl_clienthello.c BUG/MINOR: ssl-hello: make use of the null-terminated servername 2026-05-26 13:13:24 +02:00
ssl_crtlist.c BUG/MINOR: ssl: error with ssl-f-use when no "crt" 2026-02-16 18:41:40 +01:00
ssl_gencert.c BUG/MINOR: ssl-gencert: validate SNI characters to prevent SAN certificate injection 2026-05-27 10:20:55 +02:00
ssl_ocsp.c BUG/MINOR: ocsp: Manage date too far away in the future 2026-05-21 15:43:49 +02:00
ssl_sample.c BUG/MEDIUM: ssl/sample: check output buffer size in aes_cbc_enc converter 2026-05-04 17:38:15 +02:00
ssl_sock.c MINOR: connection: define xprt_add_l6hs() 2026-05-21 15:09:10 +02:00
ssl_trace.c BUILD: ssl: make X509_NAME usage OpenSSL 4.0 ready 2026-03-11 17:00:59 +01:00
ssl_utils.c BUILD: ssl: make X509_NAME usage OpenSSL 4.0 ready 2026-03-11 17:00:59 +01:00
stats-file.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
stats-html.c MEDIUM: stats: Hide the version by default and add stats-showversion 2026-04-01 14:39:28 +02:00
stats-json.c BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer 2025-02-06 17:19:49 +01:00
stats-proxy.c CLEANUP: tree-wide: fix typos in non user-visible comments in 15 files 2026-05-11 16:01:50 +02:00
stats.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
stconn.c MINOR: stream: Add flags to identify the stream tansaction when allocated 2026-04-22 15:19:12 +02:00
stick_table.c CLEANUP: tree-wide: use array_size_or_fail() in array size for allocations 2026-05-20 17:05:19 +02:00
stream.c MEDIUM: connections: Use both mux_proto and alpn to pick a mux 2026-05-19 18:33:54 +02:00
systemd.c BUILD: systemd: fix usage of reserved name "sun" in the address field 2024-11-25 08:09:09 +01:00
task.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
tcp_act.c MEDIUM: stats: consider that shared stats pointers may be NULL 2025-09-18 16:49:51 +02:00
tcp_rules.c BUG/MINOR: config: Properly test warnif_misplaced_* return values 2026-03-27 07:35:25 +01:00
tcp_sample.c MINOR: tcp-sample: permit retrieving tcp_info from the connection/session stage 2026-01-11 15:48:20 +01:00
tcpcheck.c BUG/MINOR: tcpcheck: Check LDAP response to not read more data than available 2026-05-27 09:30:00 +02:00
thread.c BUG/MINOR: threads: properly set the number of tgroups when non using policy 2026-04-15 17:47:26 +02:00
time.c REORG: time: move time-keeping code and variables to clock.c 2021-10-08 17:22:26 +02:00
tools.c MEDIUM: tools: switch the main PRNG to a thread-local xoshiro256** 2026-05-26 13:13:24 +02:00
trace.c MINOR: trace: implement source alias 2026-05-13 16:23:58 +02:00
uri_auth.c BUG/MINOR: uri-auth: fix possible null-deref in latest fix for leaks 2026-05-11 16:33:44 +02:00
uri_normalizer.c BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char (2) 2024-07-18 13:29:52 +02:00
vars.c BUG/MINOR: vars: only print first invalid char in fill_desc() 2026-04-30 09:19:53 +02:00
version.c REORG: version: move the remaining BUILD_* stuff from haproxy.c to version.c 2025-01-20 17:53:55 +01:00
wdt.c CLEANUP: tree-wide: fix more typos and outdated explanations in comments 2026-05-13 11:24:27 +02:00
xprt_handshake.c MINOR: connection: track mux calls to report their allocation context 2026-03-12 18:06:38 +01:00
xprt_qmux.c MINOR: connection: define mask CO_FL_WAIT_XPRT_L6 2026-05-21 15:09:10 +02:00
xprt_quic.c CLEANUP: tree-wide: fix typos in non user-visible comments in 3 more files 2026-05-12 17:07:55 +02:00