Pike-devel

pike-devel@lists.lysator.liu.se

3041 discussions

CERT C
by Martin Nilsson (Coppermist) ＠ Pike (-) developers forum 22 Nov '17

22 Nov '17

I found some interesting recommendations from CERT on secure C coding that perhaps would be interesting to apply. https://www.securecoding.cert.org/confluence/display/c/3+Recommendations

1 0

Garbage i Pike core?
by Jonas Walld�n ＠ Pike developers forum 22 Nov '17

22 Nov '17

Vi pratar en del om GC-körningar i CMS/EP i Slack, och på en i stort sett obelastad EP hos Kvällsstunden stack detta ut i manuell GC-körning: src/pike_search.c:197 _static_modules.Builtin()->Sear... 22 9 -24 148464 Är det någon intern optimering av (sträng?)sökning som läcker garbage vid normal användning?

1 1

Proposal: Create Stdio.Port from systemd-provided socket
by Chris Angelico 22 Nov '17

22 Nov '17

Branch: rosuav/systemd-sockets Currently, you can create a Stdio.Port("stdin") as a means of accepting a socket handed to you as FD 0. However, there's no way to accept a socket given as any other FD, making it impossible to use this for systemd's sockets. Example: $ cat /etc/systemd/system/listendemo.service [Unit] Description=Listen Demo Requires=listendemo.socket [Service] User=rosuav ExecStart=/usr/local/bin/pike /home/rosuav/listendemo.pike WorkingDirectory=/home/rosuav $ cat /etc/systemd/system/listendemo.socket [Socket] ListenStream=123 $ cat listendemo.pike object mainsock = Stdio.Port("systemd", acceptloop); void acceptloop() { while (object sock=mainsock->accept()) { write("Accepted sock: %O\n", sock); sock->write("Stub\n"); sock->close(); } } int main() { write("Main sock: %O\n", mainsock); return -1; } Note that the "User=rosuav" directive means that Pike is run as a non-root user. This spares the application the hassle of managing privileges securely, as it never gets root privileges (assuming, of course, that the only reason it needed root was to bind to a privileged port, which is true for a lot of programs). As with "stdin" mode, the second parameter is optional (blocking vs nonblocking). This won't break on non-systemd systems for two reasons: firstly, all it ever does is query environment variables, and secondly, it does this only if the application requests it explicitly, so you have to actually ask for it. Is this something that would be useful? Feel free to bikeshed the API - it's not in 8.1 yet, so anything can change. ChrisA

3 6

PostgreSQL pgsql driver: the dust has settled
by Stephen R. van den Berg 22 Nov '17

22 Nov '17

After some extreme hacking and debugging, the dust around the pgsql driver has finally settled. The fixes mostly concern rare conditions when the driver is being (ab)used while under heavy error rates from the database, cancelling random queries, dropping and/or destructing objects willy-nilly. It passes all tests that I have with flying colours now, no exceptions. People using PostgreSQL are invited to test the improved driver (both in Pike 8.0 and in Pike 8.1). -- Stephen.

1 0

Pike 8.0 verify fails
by Stephen R. van den Berg 15 Nov '17

15 Nov '17

For ages already, the standard "make verify" in xenofarm on devel2.cuci.nl fails consistently (segfaults, basically). I decided to investigate, only to notice that it crashes running "test_pike testsuite" in encode.c trying to execute inline assembly that has not been relocated because it has no relocation information (but it *does* contain at least two references that need to be relocated). This occurs really early in the startup process. This happens using -O3, without RTL-debug. Then I tried running without C-optimisation; and it seems that still goes wrong. Trying to trace that code in gdb is a !@#$%^&*() nightmare due to the multiple include macros being used as templates in that file. When running that with RTL-debug turned on, the problem goes away (but you get back other problems, see recent verify runs). I gave up for the moment. -- Stephen.

1 0

Crypto.SCRAM New proposed module
by Stephen R. van den Berg 13 Nov '17

13 Nov '17

A proposed new class, currently in 8.1. It implements the SCRAM protocol. The implementation has already been battle-tested in pgsql in 8.1. Any suggestions related to functionality, interface and/or naming? Because I like to keep the implementation of pgsql in 8.0 and 8.1 mostly in sync, I would like this class to be backported to 8.0 as well. -- Stephen.

1 2

Pike conference 2017
by Tobias S. Josefowitz 09 Oct '17

09 Oct '17

Hi, we invite you to this year's Pike developer conference on the weekend of the 3th, 4th and 5th of November 2017. Opera Software will host the conference in its offices in Linköping on the 4th and 5th. Everyone who is already around on late-afternoon of the 3rd is invited for fika at the Roxen offices starting from 15:00. On saturday and sunday we meet at the Opera offices (Repslagaregatan 21) starting from 10:00. Just call "Opera Software" using the fancy door-bell-replacement technology available at the entrance. If you intend to join, please consider dropping me an email to let me know, but you are most welcome even if you do not. Also you are most welcome to send me an email if you have any other questions, like "Ok, where is this Roxen office anyway?", or really anything. If there is something you would like to put on the agenda for the conference, please also just send me an email. On behalf of the 2017 conference committee, Tobi

1 0

Pike 8.0.498 release candidate
by Peter Bortas 06 Oct '17

06 Oct '17

Pike 8.0.498 release candidate: https://pike.lysator.liu.se/pub/pike/beta/8.0.498/Pike-v8.0.498.tar.gz Other builds: https://pike.lysator.liu.se/pub/pike/beta/8.0.498/Pike-v8.0.498-Darwin-15.4… https://pike.lysator.liu.se/pub/pike/beta/8.0.498/Pike-v8.0.498-win32-oldli… Relevant changes since yesterdays release candidate, fix of documentation in CHANGES: - - Crypto.ECC.Curve.Point objects can now be compared with _equal(). + - Crypto.ECC.Curve.Point objects can now be compared with equal(). Regards, -- Peter Bortas

1 0

Pike 8.0.496 release candidate
by Peter Bortas 05 Oct '17

05 Oct '17

Pike 8.0.496 release candidate: https://pike.lysator.liu.se/pub/pike/beta/8.0.496/Pike-v8.0.496.tar.gz Other builds: https://pike.lysator.liu.se/pub/pike/beta/8.0.496/Pike-v8.0.496-Darwin-15.4… https://pike.lysator.liu.se/pub/pike/beta/8.0.496/Pike-v8.0.496-win32-oldli… Changes since last beta is some WhiteFish cleanup and a signal handler fix. Changes since Pike 8.0.466 (release 10) ---------------------------------------------------------------------- New Features ------------ o Crypto.ECC - Added get_point() to Crypto.ECC.Curve. - Crypto.ECC.Curve.Point objects can now be compared with _equal(). o JWK - Added Web.encode_jwk(). - Added jwk() to signatures (Nettle.Sign, Crypo.RSA, Crypto.ECC.Curve.ECDSA) - Added jwk() to Crypto.Hash.HMAC. - decode_jwk() on a ECC private key now returns an ECDSA object (and a Point object for an ECC public key). o Standards.PKCS Support for decoding PKCS #10 public keys through Standard.PKCS.parse_public_key. Bug fixes --------- o Protocols.DNS Added hooks for controlling error handling in Protocols.DNS.server. o Protocols.HTTP Fixed a memory leak in the HTTP header parser upon receiving malformed HTTP headers. o Protocols.WebSocket Fixed a case where the onopen callback would get the wrong argument. o Search Fixes some broken SQL queries causing data corruption. o Sql.sqlite list_fields() now throws an error when used on a non-existent table. o Stdio.Buffer - Some methods (add_int*, input_from, add_padding) did not trigger a call to the fd output function. When using an Stdio.Buffer instance in Stdio.File buffer mode, this could result in new data not being written. - Due to an error in the realloc strategy, in some cases unread() did not succeed after reading or writing data to a fd. o Threads Fixed a race condition when creating a new thread while threads are disabled. o WhiteFish - Fixed issues with merging of empty sets. - Fixed rank calculation on intersection of sets. - Fixed multiple memory leaks. - Improved behavior when provided with corrupted input. - The module is now tested by the normal testsuite. Compiler -------- o Improved syntax error recovery, including eliminating some fatal conditions. o Fixed a memory leak in the preprocessor. Runtime ------- o Fixed NULL-dereference by the gc when running count_memory() --with-dmalloc. o Fixed fatal "Didn't find gc marker as expected" at exit --with-cleanup-on-exit. o Signal handling Fixed an error where processes would share the same queue for pending signals after using fork(). As a result, a signal sent to one process could trigger a signal handler in the other process. Building & Tools ---------------- o Configuration Fixes to the detection of MariaDB, MySQL and Inotify. o mkpackage Fixed issue where the error code from extra platform tests wasn't propagated all the way to exit from the install script.

1 0

Pike 8.0.492 beta/release candidate
by Peter Bortas 03 Oct '17

03 Oct '17

Pike 8.0.492 beta/release candidate: https://pike.lysator.liu.se/pub/pike/beta/8.0.492/Pike-v8.0.492.tar.gz Other builds: https://pike.lysator.liu.se/pub/pike/beta/8.0.492/Pike-v8.0.492-Darwin-15.4… https://pike.lysator.liu.se/pub/pike/beta/8.0.492/Pike-v8.0.492-win32-oldli… I think grubba might want to add something to the CHANGELOG for Search/WhiteFish before we make this a release build? So Bill can maybe hold off on the Mac build until that is cleared up. Changes since Pike 8.0.466 (release 10) ---------------------------------------------------------------------- New Features ------------ o Crypto.ECC - Added get_point() to Crypto.ECC.Curve. - Crypto.ECC.Curve.Point objects can now be compared with _equal(). o JWK - Added Web.encode_jwk(). - Added jwk() to signatures (Nettle.Sign, Crypo.RSA, Crypto.ECC.Curve.ECDSA) - Added jwk() to Crypto.Hash.HMAC. - decode_jwk() on a ECC private key now returns an ECDSA object (and a Point object for an ECC public key). o Standards.PKCS Support for decoding PKCS #10 public keys through Standard.PKCS.parse_public_key. Bug fixes --------- o Protocols.DNS Added hooks for controlling error handling in Protocols.DNS.server. o Protocols.HTTP Fixed a memory leak in the HTTP header parser upon receiving malformed HTTP headers. o Protocols.WebSocket Fixed a case where the onopen callback would get the wrong argument. o Search Fixes some broken SQL queries causing data corruption. o Sql.sqlite list_fields() now throws an error when used on a non-existent table. o Stdio.Buffer - Some methods (add_int*, input_from, add_padding) did not trigger a call to the fd output function. When using an Stdio.Buffer instance in Stdio.File buffer mode, this could result in new data not being written. - Due to an error in the realloc strategy, in some cases unread() did not succeed after reading or writing data to a fd. o Threads Fixed a race condition when creating a new thread while threads are disabled. Compiler -------- o Improved syntax error recovery, including eliminating some fatal conditions. o Fixed a memory leak in the preprocessor. Runtime ------- o Fixed NULL-dereference by the gc when running count_memory() --with-dmalloc. o Fixed fatal "Didn't find gc marker as expected" at exit --with-cleanup-on-exit. Building & Tools ---------------- o Configuration Fixes to the detection of MariaDB, MySQL and Inotify. o mkpackage Fixed issue where the error code from extra platform tests wasn't propagated all the way to exit from the install script. -- Peter Bortas

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Pike-devel