upstream/haproxy
1
0
Fork 0
mirror of https://github.com/haproxy/haproxy.git synced 2026-05-19 08:32:34 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 6
haproxy/src
History
Willy Tarreau 4fc1e39371 BUG/MAJOR: http-ana: fix private session retrieval on NTLM 
During the architectural review leading to commit 90b2154d93 ("MEDIUM:
muxes: always set conn->owner to the session that owns the connection"),
we wondered whether srv_conn->owner could ever be NULL or even invalid,
or if it ought to be changed to sess, and the projections of various use
cases, as well as a number of attempts to fool it led us to conclude
that it was always valid since the connection is private. So it was
considered safer not to start fiddling with the pointer in case it
could still match a previous session after a reuse, which would match
the scenario described in the session_add_conn() comment.

Actually there was exactly one case where a NULL could be met, and that
was covered by the preliminary call to conn_set_owner() that was removed
in that patch, precisely related to the one that the next patch tried to
address: in http-reuse always, after the second request on a connection
releases the connection, the owner can now become NULL, so if an NTLM
header is seen at this point, it will crash.

Interestingly, after the immediately following commit was merged,
d93c53b0df ("MEDIUM: session: always reset the conn->owner on backend
when installing mux"), the problem became immediate as the conn's
owner is now null during operation if the connection is not private, and
now the first response in NTLM is sufficient to crash the process. On
the other hand, thanks to the two patches above, we're now certain never
to meet a different session, which was the sought goal: either the session
is normal and it has no owner, or it's private and it has <sess> as owner.
Also with HTTP/1 (since the code explicitly checks for H1), there may be
a single request at a time on a connection so the owner should either be
the session or NULL.

So this patch finally implements the original plan, to pass <sess> to
session_add_conn(). The call is idempotent if the owner is already set,
but at least the function performs some preliminary sanity checks which
are quite welcome, so better continue to always call it.

Note that this is only for 3.4 or any branch that has exactly the two
patches above. And if the patches above were to ever be backported
(together), this one would be needed as well.

Thanks to Omkhar Arasaratnam for reporting this regression.
2026-05-04 18:57:15 +02:00
..
_ceb_addr.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_blk.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_int.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_str.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
acl.c CLEANUP: acl: remove duplicate test in parse_acl_expr() and unused variable 2026-04-30 17:39:26 +02:00
acme.c BUG/MEDIUM: acme: fix stalled renewal when opportunistic DNS check fails 2026-05-04 11:06:12 +02:00
acme_resolvers.c MINOR: acme: extend resolver-based DNS pre-check to dns-persist-01 2026-04-13 18:45:08 +02:00
action.c MINOR: actions: also report execution contexts registered directly 2026-03-12 18:06:38 +01:00
activity.c MINOR: activity: support aggregating by caller also for memprofile 2026-03-12 18:06:38 +01:00
applet.c MEDIUM: tree-wide: Rely on htx_xfer() instead of htx_xfer_blks() 2026-03-23 14:02:43 +01:00
arg.c MINOR: arg: add an argument type for identifier 2024-10-18 14:30:24 +02:00
auth.c BUG/MINOR: auth: Fix a leak on error path when parsing user's groups 2025-02-06 16:55:37 +01:00
backend.c MEDIUM: lb: use the LB ops tables 2026-04-28 15:31:51 +02:00
base64.c
buf.c MINOR: buffers: Swap buffers of same size only 2026-02-18 13:26:20 +01:00
cache.c MEDIUM: http-htx: Make authority update optional when adding a header 2026-04-29 10:03:39 +02:00
calltrace.c
ceb32_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
ceb64_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
ceba_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebb_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebib_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebis_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebl_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebs_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebtree-dbg.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebtree-prv.h IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cfgcond.c BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature" 2026-04-03 09:17:35 +02:00
cfgdiag.c MEDIUM: tcpcheck: Refactor how tcp-check rulesets are stored 2026-04-01 16:34:37 +02:00
cfgparse-global.c MINOR: debug: read all libs in memory when set-dumpable=libs 2026-03-18 15:30:39 +01:00
cfgparse-listen.c BUG/MINOR: fix various typos and spelling mistakes in user-visible messages 2026-04-29 15:11:44 +02:00
cfgparse-peers.c MINOR: errors: remove excessive errmsg checks 2026-04-13 15:39:05 +02:00
cfgparse-quic.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
cfgparse-ssl.c BUG/MINOR: fix various typos and spelling mistakes in user-visible messages 2026-04-29 15:11:44 +02:00
cfgparse-tcp.c MINOR: tcp: add new bind option "tcp-ss" to instruct the kernel to save the SYN 2025-12-24 11:35:09 +01:00
cfgparse-unix.c
cfgparse.c CLEANUP: config: Fix warning about invalid small buffer size 2026-04-23 10:49:17 +02:00
channel.c MINOR: channel: Remove total field from channels 2025-11-06 15:01:29 +01:00
check.c BUG/MEDIUM: checks: Don't forget to set the "alt_proto" field 2026-04-20 11:59:44 +02:00
chunk.c CLEANUP: chunk: Fix a typo in a comment 2026-04-23 10:49:21 +02:00
cli.c BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect 2026-04-30 17:06:19 +02:00
clock.c MEDIUM: stats-file/clock: automatically update now_offset based on shared clock 2026-03-18 11:18:33 +01:00
compression.c MINOR: compression: prefix compression oriented functions with "comp_" 2026-04-17 08:26:56 +02:00
connection.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
counters.c BUG/MINOR: counters: fix unexpected 127 char GUID truncation for shm-stats-file objects 2026-04-04 02:14:50 +02:00
cpu_topo.c CLEANUP: Reapply strcmp.cocci (3) 2026-04-29 04:39:12 +02:00
cpuset.c BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET() 2025-09-06 11:05:52 +02:00
debug.c MINOR: stream: Add flags to identify the stream tansaction when allocated 2026-04-22 15:19:12 +02:00
dgram.c MINOR: cfgparse: parse tune.{rcvbuf,sndbuf}.{frontend,backend} as sizes 2024-11-18 18:50:02 +01:00
dict.c
dns.c BUG/MINOR: dns: always validate the source address in responses 2026-05-04 16:27:26 +02:00
dns_ring.c
dynbuf.c MINOR: buffers: Move small buffers management from quic to dynbuf part 2026-03-23 14:02:42 +01:00
eb32sctree.c
eb32tree.c IMPORT: ebtree: only use __builtin_prefetch() when supported 2025-09-17 14:30:32 +02:00
eb64tree.c IMPORT: ebtree: only use __builtin_prefetch() when supported 2025-09-17 14:30:32 +02:00
ebimtree.c
ebistree.c
ebmbtree.c
ebsttree.c
ebtree.c
ech.c BUG/MINOR: ech: permission checks on the CLI 2026-03-25 18:37:06 +01:00
errors.c MEDIUM: errors: get rid of shm_open() 2025-01-07 16:42:38 +01:00
ev_epoll.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_evports.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_kqueue.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_poll.c
ev_select.c
event_hdl.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
extcheck.c BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration 2024-11-15 15:39:00 +01:00
fcgi-app.c MEDIUM: http-htx: Make authority update optional when adding a header 2026-04-29 10:03:39 +02:00
fcgi.c BUG/MAJOR: fcgi: Fix param decoding by properly checking its size 2026-03-05 15:35:21 +01:00
fd.c CLEANUP: fd: make use of ha_aligned_alloc() for the fdtab 2025-08-11 19:55:30 +02:00
filters.c CLEANUP: Reapply strcmp.cocci (3) 2026-04-29 04:39:12 +02:00
fix.c
flt_bwlim.c BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period 2025-11-24 14:10:13 +01:00
flt_http_comp.c MEDIUM: http-htx: Make authority update optional when adding a header 2026-04-29 10:03:39 +02:00
flt_spoe.c BUG/MINOR: http-ana: Only consider client abort for abortonclose 2026-03-27 11:18:40 +01:00
flt_trace.c CLEANUP: tree-wide: drop a few useless null-checks before free() 2026-02-26 08:24:03 +01:00
freq_ctr.c BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period 2025-11-24 14:10:13 +01:00
frontend.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
guid.c MEDIUM: guid: switch guid to more compact cebuis_tree 2025-09-16 09:23:46 +02:00
h1.c BUG/MEDIUM: h1: Enforce the authority validation during H1 request parsing 2026-04-29 10:03:39 +02:00
h1_htx.c BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/" 2026-03-05 15:34:46 +01:00
h2.c CLEANUP: tree-wide: fix around 20 mistakes in comments in h2,tools,peers 2026-04-27 14:47:39 +02:00
h3.c MINOR: h3/hq_interop: implement stream reset on shut abort/kill-conn 2026-04-30 17:18:20 +02:00
h3_stats.c MEDIUM: counters: return aggregate extra counters in ->fill_stats() 2026-02-26 17:03:53 +01:00
haproxy.c MEDIUM: cli: Add support for dynamically allocated payloads 2026-04-22 15:19:12 +02:00
hash.c
haterm.c CLEANUP: Reapply ist.cocci (4) 2026-04-29 04:39:12 +02:00
haterm_init.c CLEANUP: Reapply ha_free.cocci (2) 2026-04-29 04:39:12 +02:00
hlua.c MEDIUM: http-htx: Make authority update optional when adding a header 2026-04-29 10:03:39 +02:00
hlua_fcn.c BUG/MINOR: hlua: fix format-string vulnerability in Patref error path 2026-04-07 14:18:13 +02:00
hpack-dec.c BUG/MEDIUM: hpack: correctly deal with too large decoded numbers 2026-03-05 14:33:21 +01:00
hpack-enc.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
hpack-huff.c
hpack-tbl.c
hq_interop.c MINOR: h3/hq_interop: implement stream reset on shut abort/kill-conn 2026-04-30 17:18:20 +02:00
http.c MINOR: http: fix 405,431,501 default errorfile 2025-10-29 08:47:19 +01:00
http_acl.c
http_act.c MEDIUM: http-htx: Make authority update optional when adding a header 2026-04-29 10:03:39 +02:00
http_ana.c BUG/MAJOR: http-ana: fix private session retrieval on NTLM 2026-05-04 18:57:15 +02:00
http_client.c CLEANUP: http-client: Fix typos in comments 2026-04-23 10:49:21 +02:00
http_conv.c MEDIUM: sample: Get chunks with a size dependent on input data when necessary 2026-02-18 13:26:21 +01:00
http_ext.c MEDIUM: http-htx: Make authority update optional when adding a header 2026-04-29 10:03:39 +02:00
http_fetch.c MINOR: stream: Move the HTTP txn in an union 2026-04-22 15:19:12 +02:00
http_htx.c BUG/MINOR: http-htx: Don't normalize emtpy path for OPTIONS requests 2026-04-29 15:26:13 +02:00
http_rules.c MINOR: actions: store the location of keywords registered via initcalls 2026-03-12 18:06:38 +01:00
httpclient_cli.c MINOR: httpclient-cli: Reset httpclient HTX buffer instead of removing blocks 2025-07-24 12:13:42 +02:00
htx.c CLEANUP: Reapply ist.cocci (4) 2026-04-29 04:39:12 +02:00
init.c MINOR: initcall: record the file and line declaration of an INITCALL 2026-03-12 18:06:38 +01:00
jwe.c BUG/MEDIUM: jwe: fix memory leak in jwt_decrypt_secret with var argument 2026-04-07 11:17:30 +02:00
jws.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
jwt.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
lb_chash.c MINOR: lb: cleanups 2026-04-28 15:31:51 +02:00
lb_fas.c MINOR: lb: cleanups 2026-04-28 15:31:51 +02:00
lb_fwlc.c MINOR: lb: cleanups 2026-04-28 15:31:51 +02:00
lb_fwrr.c MINOR: lb: cleanups 2026-04-28 15:31:51 +02:00
lb_map.c MINOR: lb: cleanups 2026-04-28 15:31:51 +02:00
lb_ss.c MINOR: lb: cleanups 2026-04-28 15:31:51 +02:00
limits.c MINOR: limits: display the computed maxconn using ha_notice() 2025-11-20 18:38:09 +01:00
linuxcap.c MEDIUM: init: always warn when running as root without being asked to 2025-09-05 08:51:07 +02:00
listener.c MAJOR: mux-quic: activate QMux for frontend side 2026-04-02 14:02:05 +02:00
log.c CLEANUP: Reapply strcmp.cocci (3) 2026-04-29 04:39:12 +02:00
lru.c
mailers.c MINOR: mailers: warn if mailers are configured but not actually used 2025-06-27 16:41:18 +02:00
map.c CLEANUP: map/cli: fix some map-related help messages 2026-04-30 17:39:26 +02:00
mjson.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
mpring.c MINOR: add an MPSC ring buffer implementation 2026-04-30 15:33:07 +02:00
mqtt.c
mux_fcgi.c BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record 2026-04-29 15:26:13 +02:00
mux_h1.c BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size 2026-04-29 11:47:37 +02:00
mux_h2.c BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() 2026-05-04 14:33:22 +02:00
mux_pt.c MAJOR: muxes: No longer use app_ops .wake() callback function from muxes 2026-03-10 15:10:34 +01:00
mux_quic.c MEDIUM: mux-quic: extend shut to app proto layer 2026-04-30 17:18:20 +02:00
mux_quic_qstrm.c BUG/MINOR: mux_quic: free frames emitted with QMux 2026-04-28 15:59:28 +02:00
mux_spop.c MEDIUM: muxes: always set conn->owner to the session that owns the connection 2026-04-21 08:45:46 +02:00
mworker.c CLEANUP: mworker: fix tab/space mess in mworker_env_to_proc_list() 2026-03-19 18:01:06 +01:00
namespace.c BUG/MINOR: namespace: handle a possible strdup() failure 2024-12-10 08:05:34 +01:00
ncbmbuf.c MINOR: ncbmbuf: improve itbmap_next() code 2026-02-23 16:28:41 +01:00
ncbuf.c
net_helper.c BUG/MAJOR: net_helper: also fix tcp_options_list for OOB write loop 2026-05-04 17:26:44 +02:00
pattern.c BUG/MINOR: pattern: release the reference on failure to load from file 2026-04-30 17:39:26 +02:00
payload.c BUG/MINOR: payload: prevent integer overflow in distcc token parsing 2026-04-29 15:11:44 +02:00
peers.c CLEANUP: tree-wide: fix around 20 mistakes in comments in h2,tools,peers 2026-04-27 14:47:39 +02:00
pipe.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
pool.c CLEANUP: stats: drop stats.h / stats-t.h where not needed 2026-02-26 08:24:03 +01:00
proto_quic.c OPTIM: quic: rework the QUIC RX code 2026-04-30 15:33:07 +02:00
proto_rhttp.c MINOR: connection: track mux calls to report their allocation context 2026-03-12 18:06:38 +01:00
proto_sockpair.c BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS 2026-03-16 16:31:58 +01:00
proto_tcp.c MINOR: startup: Add HAVE_WORKING_TCP_MD5SIG in haproxy -vv 2026-02-12 18:02:19 +01:00
proto_udp.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
proto_uxdg.c MINOR: protocol: create abnsz socket address family 2024-10-29 12:14:50 +01:00
proto_uxst.c MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket() 2025-06-11 18:37:34 +02:00
protocol.c MINOR: quic: rename "no-quic" to "tune.quic.listen" 2025-10-23 16:47:58 +02:00
proxy.c MEDIUM: lb: use the LB ops tables 2026-04-28 15:31:51 +02:00
qmux_http.c MEDIUM: tree-wide: Rely on htx_xfer() instead of htx_xfer_blks() 2026-03-23 14:02:43 +01:00
qmux_trace.c MINOR: mux_quic/h3: report termination events at stream layer 2026-04-27 15:02:58 +02:00
qpack-dec.c MINOR: mux_quic/h3: report termination events at connection level 2026-04-27 15:02:58 +02:00
qpack-enc.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
qpack-tbl.c
queue.c MEDIUM: lb: use the LB ops tables 2026-04-28 15:31:51 +02:00
quic_ack.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_cc.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cc_bbr.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_cc_cubic.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_cc_drs.c BUG/MINOR: quic: remove max_bw filter from delivery rate sampling 2024-12-13 14:42:43 +01:00
quic_cc_newreno.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cc_nocc.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cid.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_cli.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_conn.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_enc.c TESTS: quic: useless param for b_quic_dec_int() 2025-10-15 09:58:03 +02:00
quic_fctl.c
quic_frame.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_loss.c MINOR: quic: split congestion controler options for FE/BE usage 2025-10-23 16:49:20 +02:00
quic_openssl_compat.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_pacing.c MINOR: quic: adapt credit based pacing to BBR 2025-01-23 17:41:07 +01:00
quic_retransmit.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_retry.c OPTIM: quic: reduce the size of struct quic_dgram 2026-04-30 15:33:07 +02:00
quic_rules.c OPTIM: quic: reduce the size of struct quic_dgram 2026-04-30 15:33:07 +02:00
quic_rx.c BUG/MINOR: quic: fix buffer overflow with sockaddr_in46 2026-05-04 10:49:49 +02:00
quic_sock.c BUG/MINOR: quic: fix trace crash on datagram receive 2026-05-04 11:18:35 +02:00
quic_ssl.c CLEANUP: fix typos and spelling in comments and documentation 2026-03-30 09:24:19 +02:00
quic_stats.c MEDIUM: counters: return aggregate extra counters in ->fill_stats() 2026-02-26 17:03:53 +01:00
quic_stream.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
quic_tls.c BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling 2025-10-22 15:04:41 +02:00
quic_token.c OPTIM: quic: reduce the size of struct quic_dgram 2026-04-30 15:33:07 +02:00
quic_tp.c OPTIM: quic: rework the QUIC RX code 2026-04-30 15:33:07 +02:00
quic_trace.c MINOR: quic: fix trace spacing when datagram is displayed 2026-05-04 11:18:47 +02:00
quic_tx.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
raw_sock.c MINOR: rawsock: introduce CO_RFL_TRY_HARDER to detect closures on complete reads 2025-10-01 10:23:01 +02:00
regex.c MINOR: regex: use a thread-local match pointer for pcre2 2025-10-13 16:56:43 +02:00
resolvers.c BUG/MINOR: resolvers: Free opts on parse error in resolv_parse_do_resolve() 2026-05-04 16:33:56 +02:00
ring.c OPTIM: ring: avoid reloading the tail_ofs value before the CAS in ring_write() 2025-09-18 15:27:32 +02:00
sample.c BUG/MINOR: sample: fix NULL strm dereference in sample_conv_when 2026-04-27 14:44:29 +02:00
server.c MEDIUM: lb: use the LB ops tables 2026-04-28 15:31:51 +02:00
server_state.c MEDIUM: counters: Dynamically allocate per-thread group counters 2026-01-13 11:12:34 +01:00
session.c MEDIUM: muxes: always set conn->owner to the session that owns the connection 2026-04-21 08:45:46 +02:00
sha1.c
shctx.c BUG/MEDIUM: shctx: Use the next block when data exactly filled a block 2026-02-18 09:44:15 +01:00
signal.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
sink.c BUG/MINOR: sink: do not free existing sinks on allocation error 2026-04-30 08:01:24 +02:00
slz.c BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals 2026-04-08 19:14:25 +02:00
sock.c BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM 2026-03-20 16:51:47 +01:00
sock_inet.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
sock_unix.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
ssl_ckch.c CLEANUP: Reapply strcmp.cocci (3) 2026-04-29 04:39:12 +02:00
ssl_clienthello.c CLEANUP: tree-wide: fix comment typos all over the tree (~68) 2026-04-29 15:11:44 +02:00
ssl_crtlist.c BUG/MINOR: ssl: error with ssl-f-use when no "crt" 2026-02-16 18:41:40 +01:00
ssl_gencert.c BUG/MINOR: fix various typos and spelling mistakes in user-visible messages 2026-04-29 15:11:44 +02:00
ssl_ocsp.c BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks 2026-03-31 12:18:26 +02:00
ssl_sample.c BUG/MEDIUM: ssl/sample: check output buffer size in aes_cbc_enc converter 2026-05-04 17:38:15 +02:00
ssl_sock.c BUG/MINOR: fix various typos and spelling mistakes in user-visible messages 2026-04-29 15:11:44 +02:00
ssl_trace.c BUILD: ssl: make X509_NAME usage OpenSSL 4.0 ready 2026-03-11 17:00:59 +01:00
ssl_utils.c BUILD: ssl: make X509_NAME usage OpenSSL 4.0 ready 2026-03-11 17:00:59 +01:00
stats-file.c MEDIUM: stats-file/clock: automatically update now_offset based on shared clock 2026-03-18 11:18:33 +01:00
stats-html.c MEDIUM: stats: Hide the version by default and add stats-showversion 2026-04-01 14:39:28 +02:00
stats-json.c BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer 2025-02-06 17:19:49 +01:00
stats-proxy.c MINOR: stats: protect proxy iteration via watcher 2026-02-27 10:28:24 +01:00
stats.c BUG/MINOR: tree-wide: fix a few user-visible spelling mistakes from dev7 2026-04-27 10:49:51 +02:00
stconn.c MINOR: stream: Add flags to identify the stream tansaction when allocated 2026-04-22 15:19:12 +02:00
stick_table.c CLEANUP: fix typos and spelling in comments and documentation 2026-03-30 09:24:19 +02:00
stream.c MEDIUM: lb: use the LB ops tables 2026-04-28 15:31:51 +02:00
systemd.c BUILD: systemd: fix usage of reserved name "sun" in the address field 2024-11-25 08:09:09 +01:00
task.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
tcp_act.c MEDIUM: stats: consider that shared stats pointers may be NULL 2025-09-18 16:49:51 +02:00
tcp_rules.c BUG/MINOR: config: Properly test warnif_misplaced_* return values 2026-03-27 07:35:25 +01:00
tcp_sample.c MINOR: tcp-sample: permit retrieving tcp_info from the connection/session stage 2026-01-11 15:48:20 +01:00
tcpcheck.c BUG/MINOR: tcpcheck: Properly report error for http health-checks 2026-05-04 16:33:56 +02:00
thread.c BUG/MINOR: threads: properly set the number of tgroups when non using policy 2026-04-15 17:47:26 +02:00
time.c
tools.c CLEANUP: Reapply ha_free.cocci (2) 2026-04-29 04:39:12 +02:00
trace.c MINOR: traces: defer processing of "-dt" options 2026-03-13 09:13:24 +01:00
uri_auth.c CLEANUP: stats: drop stats.h / stats-t.h where not needed 2026-02-26 08:24:03 +01:00
uri_normalizer.c
vars.c BUG/MINOR: vars: only print first invalid char in fill_desc() 2026-04-30 09:19:53 +02:00
version.c REORG: version: move the remaining BUILD_* stuff from haproxy.c to version.c 2025-01-20 17:53:55 +01:00
wdt.c BUG/MEDIUM: wdt: improve stuck task detection accuracy 2025-10-01 10:18:53 +02:00
xprt_handshake.c MINOR: connection: track mux calls to report their allocation context 2026-03-12 18:06:38 +01:00
xprt_qstrm.c CLEANUP: tree-wide: address various spelling mistakes in comments from -dev7 2026-04-27 10:50:12 +02:00
xprt_quic.c MINOR: quic: use server cache for ALPN on BE side 2026-03-03 16:23:03 +01:00