1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
|
<html>
<head>
<link rel="stylesheet" type="text/css" href="dox.css" />
<title>libapreq2-2.04-dev: libapreq2: CHANGES</title>
</head>
<body>
<div id="page-header">
<p class="menu">
<a href="http://www.apache.org/">Apache Software Foundation</a> > <a href="http://httpd.apache.org">HTTP Server Project</a> >
<a href="http://httpd.apache.org/apreq/">Request Library Subproject</a></p>
<p class="apache">Apache HTTP Server Request Library</p>
<img alt="" src="feather.gif" /></div>
<!-- Generated by Doxygen 1.3.8 -->
<div class="qindex"><a class="qindex" href="index.html">Main Page</a> | <a class="qindex" href="modules.html">Modules</a> | <a class="qindex" href="annotated.html">Data Structures</a> | <a class="qindex" href="files.html">File List</a> | <a class="qindex" href="functions.html">Data Fields</a> | <a class="qindex" href="globals.html">Globals</a> | <a class="qindex" href="pages.html">Related Pages</a></div>
<h1><a class="anchor" name="apreq_changes">CHANGES</a></h1>List of major changes.<h2><a class="anchor" name="v2_04_dev">
Changes with libapreq2-2.04-dev (released August 30, 2004)</a></h2>
<ul>
<li>Perl API [joes] Add TAINT checks, marking all parsed data as tainted.</li></ul>
<p>
<ul>
<li>C API [joes] Add body_status attribute to <a class="el" href="structapreq__request__t.html">apreq_request_t</a>, to allow the both environment and the parser to report any errors encountered.</li></ul>
<p>
<ul>
<li>C API [randyk, joes] Cookie parser was locking up on non-alphanumeric chars in cookie names. Also RFC Cookie attributes are always checked for quotes during bake(2), and the quotes are now stripped from incoming RFC cookies during parsing (but they are never stripped from the actual cookie value).</li></ul>
<p>
<ul>
<li>Perl API [joes] Apache::Cookie::Jar->new accepts a VALUE_CLASS argument, which effectively blesses all the jar's cookies into that class, which simplifies subclassing Apache::Cookie. Accordingly Apache::Cookie->freeze($value) no longer accepts a freeze()-able object in $value.</li></ul>
<p>
<ul>
<li>C API [Markus Wichitill, randyk, joes] Drop APR_DELONCLOSE from apreq_file_mktemp implementation and install apreq_file_cleanup. When passed to apr_file_open on Win32, APR_DELONCLOSE sets the FILE_SHARED_DELETE flag, which is, unfortunately, a property that is preserved across NTFS "hard" links. This breaks apps that link() the temp file to a permanent location, and subsequently expect to open it without FILE_SHARED_DELETE before the original tempfile is closed+deleted. In fact, even Apache::Upload does this, so it is a common enough event that the apreq_file_cleanup workaround is necessary.</li></ul>
<p>
<ul>
<li>C API [Ken Burcham, joes] Fix bug in url parser that occurs when a XX-encoded sequence is split across multiple buckets. Added apreq_decode_decodev to make this problem less inconvenient.</li></ul>
<p>
<ul>
<li>Perl API [joes] Exception objects inherit from the object which raised it, which allows $@ to invoke its methods with impunity (exceptions are disabled for objects which derive from an exception class).</li></ul>
<p>
<ul>
<li>Perl API [joes] Implement HOOK_DATA and UPLOAD_HOOK.</li></ul>
<p>
<ul>
<li>Perl API [joes] Add safe XS wrappers for $table->add, $table->set, $table->STORE, and $table_class->new.</li></ul>
<p>
<ul>
<li>Perl API [joes] Add exceptions to $upload->link, $upload->tempname, $upload->slurp, and $cookie->set_attr. Return value of $upload->slurp is now the upload length. Also document new $upload->io.</li></ul>
<p>
<ul>
<li>C API [joes] Restrict all apr_status_t codes to APR_SUCCESS, APR_INCOMPLETE, APR_EGENERAL, APR_EINIT, APR_ENOTIMPL, since any others will generate confusing error messages from apr_strerror.</li></ul>
<p>
<ul>
<li>Perl API [joes] Added $upload->io with a TIEHANDLE API layered over APR::Brigade. $upload->fh remains implemented as an APR::PerlIO object, which is seekable but less efficient and currently suffers some portability issues associated with largefile support in perl and apr.</li></ul>
<p>
<ul>
<li>Perl API [joes] Added apreq_xs_croak for throwing APR::Error exceptions and included error-checking on $req->param, $req->args, $req->body, $req->upload, and $jar->get.</li></ul>
<p>
<ul>
<li>Perl API [joes] Added $jar->status, $req->args_status and $req->body_status to report parsing errors. Also add $upload->tempname per user request.</li></ul>
<p>
<ul>
<li>C API [joes] Dropped status attribute of <a class="el" href="structapreq__value__t.html">apreq_value_t</a>. Added status field to <a class="el" href="structapreq__jar__t.html">apreq_jar_t</a> and added args_status field to <a class="el" href="structapreq__request__t.html">apreq_request_t</a>. Parsers also must return their public status code when a NULL brigade is passed. apreq_hook_disable_uploads() is also added. This is an ABI change affecting all versions of libapreq2 prior to 2.0.12.</li></ul>
<p>
<ul>
<li>Perl API [joes] $upload->info returns a proper APR::Table object now. Also implemented $upload->size, $upload->fh, and $upload->type.</li></ul>
<p>
<ul>
<li>C API [Jean-Franois Meesse] mfd parser fails to parse CRLF-terminated files when the terminating boundary string is at the start of a new bucket. This is reportedly a common event for PDF files uploaded with Netscape 7.</li></ul>
<p>
<ul>
<li>Perl API [joes] Add back-compat support for Apache::Cookie->fetch() via Apache->request.</li></ul>
<p>
<ul>
<li>C API [joes] Add MaxBody, MaxBrigade, and TempDir per-dir directives to mod_apreq filter.</li></ul>
<p>
<ul>
<li>C API [joes] Replace free/tempnam dependency in <a class="el" href="apreq_8h.html#a44">apreq_file_mktemp()</a> with <a class="elRef" doxygen="apr.tag:http://apr.apache.org/docs/apr/" href="http://apr.apache.org/docs/apr/group__apr__file__io.html#gga51">apr_temp_dir_get()</a>. Add additional gcc warning flags when --enable-maintainer-mode is set.</li></ul>
<p>
<ul>
<li>C API [joes, Scott Hutton] Replace apreq_brigade_copy with more effective APREQ_BRIGADE_COPY macro. Also introduce APREQ_BRIGADE_SETASIDE to deal with buckets that need to be set aside for use in future function calls. mod_ssl generates transient buckets which tickled this bug.</li></ul>
<p>
<ul>
<li>Perl API [joes] Separate Apache::Upload module from Apache::Request for better organization.</li></ul>
<h2><a class="anchor" name="v2_03_dev">
Changes with libapreq2-2.03-dev (released June 12, 2004)</a></h2>
<ul>
<li>C API [joes] "Objectify" cookie/jar API: s/apreq_(make|serialize)_cookie/apreq_cookie_$1/ and reordering args so the cookie/jar object is always the first argument. Macros added to provide source-compatibility with the old names.</li></ul>
<p>
<ul>
<li>Perl API [joes] Added $upload->slurp($data), which reads the contents of the file upload "$upload" into the scalar "$data".</li></ul>
<p>
<ul>
<li>C API [joes, randyk] apreq_run_(hook|parser) are macros, so they are capitalized now. Fixed <a class="el" href="apreq__params_8h.html#a20">apreq_params_as_string()</a> and added <a class="el" href="apreq__params_8h.html#a19">apreq_params_as_array()</a>. Reworked definitions of APREQ_DECLARE_HOOK, APREQ_DECLARE_PARSER and apreq_(parser|hook)_t, hopefully to be more Win32 friendly. Also updated the documentation.</li></ul>
<p>
<ul>
<li>C API [joes] Compensate for a missing CRLF in empty file upload block, which actually complies with RFC 2046 Section 5.1.1. Konqueror (version unknown) and Mozilla 0.9.7 are known to emit such blocks.</li></ul>
<p>
<ul>
<li>Perl API [joes] $req->upload() in list context failed to filter out non-uploads. Also $req->upload("nonexistent-key-name") segfaults.</li></ul>
<p>
<ul>
<li>Perl test suite t/TEST.PL must run parent class' pre_configure to get the configuration right</li></ul>
<p>
<ul>
<li>C API [joes] apreq_brigade_concat() wasn't supplying the final EOS bucket to large brigades (>256K), which somtimes caused the prefetch loop in <a class="el" href="mod__apreq_8c.html">mod_apreq.c</a>'s apreq_filter() to hang.</li></ul>
<p>
<ul>
<li>Documentation [joes] CHANGES file reformatted, removing dates & other clutter as Stas suggests.</li></ul>
<p>
<ul>
<li>C API [joes] Rewrote cgi_read() in <a class="el" href="apreq__env_8c.html">apreq_env.c</a> and reworked <a class="el" href="mod__apreq_8c.html">mod_apreq.c</a> to enforce <a class="el" href="apreq__env_8h.html#a31">apreq_env_max_body()</a> settings.</li></ul>
<p>
<ul>
<li>C API [joes] Fixed bug in url_parser code- missing context brigade was needed to track key-value pairs which span multiple buckets.</li></ul>
<p>
<ul>
<li>C API [joes] API modifications: removed struct apreq_cfg_t, adding new apreq_env hooks max_body, max_brigade_len, and temp_dir. Folded apreq_parsers.h into <a class="el" href="apreq__params_8h.html">apreq_params.h</a> and modified the arguments to apreq_run_parser() and apreq_run_hook(). Renamed apreq_parser_t's content_type as enctype and apreq_copy_brigade() as apreq_brigade_copy(). These changes make libapreq2.so.2.0.5 incompatible with earlier versions.</li></ul>
<p>
<ul>
<li>Perl API [stas] Include ppport.h from blead-perl to support older perls. Add a proper support for ithreads.</li></ul>
<p>
<ul>
<li>C API [Swen Schillig, joes] Fixed bug in calculation of Netscape cookie expiration dates. apr_time_t is measured in microseconds, not seconds, which threw off the arithmetic; apr_time_from_sec was needed for the conversion.</li></ul>
<p>
<ul>
<li>C API [Max Kellermann] Fix segfault caused by invalid -escape sequence in query string.</li></ul>
<h2><a class="anchor" name="v2_02_dev">
Changes with libapreq2-2.02-dev (released Nov 15, 2003)</a></h2>
<ul>
<li>Perl API [joes] Fix bogus pool/cookie initializers in Apache::Cookie::set_attr(), which caused Apache::Cookie::new to segfault. Bug first reported to modperl list by Wolfgang Kubens.</li></ul>
<h2><a class="anchor" name="v2_01_dev">
Changes with libapreq2-2.01-dev (released Nov 10, 2003)</a></h2>
<ul>
<li>build system [joes] Skip Apache::Test tests in env/ when Apache::Test is unavailable. This allows the C API to be build and installed without requiring Apache::Test (it is still a requirement for compiling the perl glue).</li></ul>
<p>
<ul>
<li>C API <a class="el" href="mod__apreq_8c.html">mod_apreq.c</a> [joes] Parser errors were creeping into the return value of apreq_filter, which breaks the "transparent tee" paradigm. This caused bogus "400 Bad Request" responses (first reported by Vladimir Dudo) to occur when libapreq2 was used by an output filter during a GET request (handled by apache2's default handler). The test suite has been updated accordingly.</li></ul>
<p>
<ul>
<li>C API [joes] Incorporate libapreq_cgi into libapreq2 as the default environment, and add <a class="el" href="structapreq__env__t.html">apreq_env_t</a> and initializer <a class="el" href="apreq__env_8h.html#a33">apreq_env_module()</a> to manage the environment at runtime (determining the environment at load-time was problematic on non-ELF systems).</li></ul>
<h2><a class="anchor" name="v2_0_0">
Changes with libapreq2-2.00-dev (Oct 25, 2003)</a></h2>
<ul>
<li>C API: libapreq_cgi.c [randyk, joes] CGI environment defined by env/libapreq_cgi.c is functional (with tests added to env/t). This library may soon be incorporated directly into libapreq2 as a default enviroment.</li></ul>
<p>
<ul>
<li>C API: <a class="el" href="mod__apreq_8c.html">mod_apreq.c</a> [joes] Added ctx->saw_eos to ensure we don't read from upstream filters after receiving an eos bucket. Otherwise it was possible for two eos buckets to appear when a prefetch read is involved, which breaks other modules like mod_proxy. This bug was uncovered by Philippe Chiasson. mod_apreq's apreq_env_majic_number bumped to reflect the added fixes.</li></ul>
<p>
<ul>
<li>configure: --enable-perl-glue [joes] The --enable-perl-glue option integrates the perl glue into the normal Unix build cycle. It is disabled by default, but is silently reenabled if the user configures the source tree via Makefile.PL.</li></ul>
<p>
<ul>
<li>C API [joes] Added <a class="el" href="apreq_8h.html#a46">apreq_header_attribute()</a> and fixed mfd parser to allow "charset" attribute to appear in the Content-Type header. Sven Geisler points out that Opera 7.20 does generate such headers.</li></ul>
<p>
<ul>
<li>C API [joes] Added versioning API following <a href="http://apr.apache.org/versioning.html">http://apr.apache.org/versioning.html</a> apreq_env renamed apreq_env_name, and apreq_env_magic_number added to provide versioning for environments (modules). The header files are now installed to "include/apreq2", and the library is renamed "libapreq2". Also added an apreq2-config script based on apu-config.</li></ul>
<p>
<ul>
<li>configure: static <a class="el" href="mod__apreq_8c.html">mod_apreq.c</a> [Bojan Smojver, joes] Add --with-apache2-src configure option, along with --with-apr-config and --with-apu-config, and provide support for compiling mod_apreq into httpd as a static apache module.</li></ul>
<p>
<ul>
<li>C API: <a class="el" href="mod__apreq_8c.html">mod_apreq.c</a> [joes] Support for internal redirects added to the mod_apreq filter. This ensures any POST data prefetched in the main request gets passed along to the subrequest handler(s).</li></ul>
<p>
<ul>
<li>C bugfix: apreq_decode [Graham Clark] If the source and destination strings are represented by the same pointer - e.g. if called as apreq_unescape(s) - string s is modified incorrectly in general. Patch includes new unit test.</li></ul>
<p>
<ul>
<li>Perl API [joes] Added $req->parse, $req->status, & "preparse" logic to $req->param & $req->upload.</li></ul>
<p>
<ul>
<li>C API [joes] Added "preparse" logic to apreq_params & apreq_uploads to bring behavior in line with libapreq-1.x.</li></ul>
<p>
<ul>
<li>C API [joes] Dropped param->charset. Make apreq_brigade_concat public, so mod_apreq can use it for its ctx->spool brigade.</li></ul>
<p>
<ul>
<li>Documentation [joes] Updated Cookie_pod to reflect API changes over v1.X.</li></ul>
<p>
<ul>
<li>Documentation [joes] Added doxygen links to Apache::Request and Apache::Cookie perl docs.</li></ul>
<p>
<ul>
<li>C API [joes] Added apreq_copy_brigade(bb) to <a class="el" href="apreq_8h.html">apreq.h</a>.</li></ul>
<p>
<ul>
<li>C API [joes] The new filter-based design required a complete departure from libapreq-1.X codebase. libapreq-2 is based solely on APR, and to be fully functional, requires a supporting environment similar to Apache-2. A person wishing to port libapreq-2 to a new environment needs to provide definitions for the declarations in <a class="el" href="apreq__env_8h.html">apreq_env.h</a>.</li></ul>
<p>
<ul>
<li>Perl API [joes] Aggregates are always collected into an APR::Table-based package. New table packages: Apache::Cookie::Table, Apache::Request::Table, and Apache::Upload::Table.</li></ul>
<p>
<ul>
<li>Perl API [joes] Apache::Cookie->fetch now requires an "environment" argument ($r). Its return value is blessed into the Apache::Cookie::Jar class.</li></ul>
<p>
<ul>
<li>Perl API [joes] Two new request lookup functions:<ol>
<li>$req->args - param lookup using only the query string</li><li>$req->body - param lookup using only the POST data </li></ol>
</li></ul>
<div id="footer">
<p class="apache">
Copyright © 2003-2004 <a href="http://www.apache.org">The Apache Software Foundation</a>.<br/>
See <a href="LICENSE.html">LICENSE</a>.</p>
<p class="menu">
<span style="color:#aaa">page generated by <a href="http://www.doxygen.org/"><code>doxygen</code></a>
version 1.3.8 on 30 Aug 2004</span>
</p>
</div>
</body>
</html>
|
