Philipp Schafft authored 8 years ago and Philipp Schafft committed 8 years ago

This fixes the regression introduced by r19250 (461a5375).
The fix checks if the source client is actually known before printing it's IP-Address.

See also: #2016

This is a backport of d739c65e.

This patch fixes the output generating for XML. It will ensure all
strings are escaped correctly by using text node creation function
not the normal raw XML subnode function.

See #2255

Mostly just bumping the version number.
Fixed up changes file to match ChangeLog.

This works around the problem that windows ignores tailing dots.
This way you could trick Icecast2 to send a XSLT file as plain text.

Please test.

Closes: #2247

So that I don't have to carry it over from the 2.4.1 packaging.

This fixes a crash (NULL reference) in case URL Auth is used
and stream_auth is trigged with no credentials passed by the client.
Username and password is now set to empty strings and transmited to
the backend server this way.

See #2191 for more details and to keep track of the problem.

Closes: #2191, DEB#782120

This let util_url_escape() handle NULL passed as parameter.
In case the parameter is NULL it will also return NULL.

This patch also does some cleanup of the code such as migration
away from int and thus avoiding future failtures.

This is going to be a strict security release

17a3e5932cde41df7c4c1d0f42919c9ddfb99274

svn path=/icecast/trunk/icecast/; revision=19326

svn path=/icecast/trunk/icecast/; revision=19325

svn path=/icecast/trunk/icecast/; revision=19324

svn path=/icecast/trunk/icecast/; revision=19323

svn path=/icecast/trunk/icecast/; revision=19322

See: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767542

svn path=/icecast/trunk/icecast/; revision=19321

svn path=/icecast/trunk/icecast/; revision=19319

(patch by Andreas Mieke)

svn path=/icecast/trunk/icecast/; revision=19318

svn path=/icecast/trunk/icecast/; revision=19317

svn path=/icecast/trunk/icecast/; revision=19316

Moved the comment out to avoid this bug.
Needs to be checked.

svn path=/icecast/trunk/icecast/; revision=19315

We are now code complete plus an additional security fix.
Some testing remains before final release.

svn path=/icecast/trunk/icecast/; revision=19314

subset of my earlier patch so it can go into 2.4.1: disconnects stdio of <on-[dis]connect> scripts from random filehandles. closes #2087

svn path=/icecast/trunk/icecast/; revision=19313

patch to fix regression on header size with large headers introduced by support of <server-id> and <http-headers>. This should ensure we have at least space for 2kB of extra headers. Depending on function and call we may have much more space.

Please test this very carefully.
Some pointers what should be in the tests (NOT complet list):
- request to 'static' web/ and admin/ pages.
- requests to playlist generation.
- requests to streams.
- requests to admin/ manipulation functions.
- test everything with at least 8kB of extra headers, then reduce in 1kB (or 512B) steps.
- see if response is correct OR 500 is returned.
- run under valgrind or similar to see no buffer overflow or similiar will happen.
- take a cookie!

svn path=/icecast/trunk/icecast/; revision=19300

svn path=/icecast/trunk/icecast/; revision=19299

svn path=/icecast/trunk/icecast/; revision=19298

svn path=/icecast/trunk/icecast/; revision=19297

svn path=/icecast/trunk/icecast/; revision=19296

String taken from:
https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29

svn path=/icecast/trunk/icecast/; revision=19295

svn path=/icecast/trunk/icecast/; revision=19294

svn path=/icecast/trunk/icecast/; revision=19293

svn path=/icecast/trunk/icecast/; revision=19292

In case of SOURCE we are lenient and thus quite some source clients
don't send a proper content-type, especially if they only support mp3.

This was meant to be introduced in 2.4.0 already, sadly we missed it.

All source clients MUST send proper content-type after migrating to 
Icecast HTTP PUT protocol.

closes #2082

svn path=/icecast/trunk/icecast/; revision=19288

Fixed regression introduced in r18356 (CVE-2011-4612): client duration time is now correctly logged. PRIu64 MUST NOT be used with log_write_direct() as depending on platform PRIu64 may be using something not supported by __vsnprintf() of log/log.c. close #2081, see r18356

svn path=/icecast/trunk/icecast/; revision=19287

svn path=/icecast/trunk/icecast/; revision=19286

svn path=/icecast/trunk/net/; revision=19282

svn path=/icecast/trunk/httpp/; revision=19281