Re: [libmicrohttpd] [PATCH] Check response existence on upgrade

2017-05-05 Thread José Bollo
On Thu, 4 May 2017 23:36:23 +0300 Evgeny Grin wrote: > Thanks! Applied. > Hello Evgeny, After thinking about the issue, I guess that it is a serious vulnerability. I guess that a simple curl request to a server running 0.52 or 0.53 can raise the SEGV. IMHO if curl http://www.myserver.org/

Re: [libmicrohttpd] How to close all upgraded connections when shutting down MHD_Daemon?

2017-05-05 Thread silvioprog
One of the good things of MHD is its small size, so I totally agree with you. :-) On Thu, May 4, 2017 at 11:20 AM, Christian Grothoff wrote: > You forgot to update doc/libmicrohttpd.texi, otherwise looks OK even > though I'm not convinced SHUTDOWN/QUESTCED are useful: an application > can trivia

[libmicrohttpd] issue with suspend/resume

2017-05-05 Thread José Bollo
Hi Was there a change in how suspend/resume works? I observe that responses are no more send after resuming. Best regards José Bollo

Re: [libmicrohttpd] How to close all upgraded connections when shutting down MHD_Daemon?

2017-05-05 Thread silvioprog
Dude, thanks for the explanation regarding union + bool/char, I did some tests and noticed this issue. Please ignore the sent patch. :-) On Thu, May 4, 2017 at 11:29 AM, Evgeny Grin wrote: > Same for "pending data". > Moreover MHD_DAEMON_INFO_PENDING_DATA is confusing and not correct. > Zero in

Re: [libmicrohttpd] issue with suspend/resume

2017-05-05 Thread Evgeny Grin
Hi José, Shouldn't be any change. Could you provide minimal example? -- Best Wishes, Evgeny Grin On 05.05.2017 17:06, José Bollo wrote: > Hi > > Was there a change in how suspend/resume works? > > I observe that responses are no more send after resuming. > > Best regards > José Bollo > s