1
0
mirror of https://gitlab.xiph.org/xiph/icecast-server.git synced 2024-11-03 04:17:17 -05:00
Commit Graph

1223 Commits

Author SHA1 Message Date
Thomas B. Ruecker
a82356461e Bump version to 2.4.3 2015-12-27 17:14:58 +00:00
Philipp Schafft
95516eb0b9 Fix: remove tailing dots in URI.
This works around the problem that windows ignores tailing dots.
This way you could trick Icecast2 to send a XSLT file as plain text.

Please test.

Closes: #2247
2015-12-24 00:48:47 +00:00
Thomas Ruecker
ceec48201a Applying docdir fix (needed by distro packaging)
So that I don't have to carry it over from the 2.4.1 packaging.
2015-04-08 13:08:45 +03:00
Thomas Ruecker
270a9628de Updated ChangeLog 2015-04-08 13:07:16 +03:00
Philipp Schafft
27abfbbd68 Fix: Do not crash URL Auth is used with stream_auth and no credentials are given
This fixes a crash (NULL reference) in case URL Auth is used
and stream_auth is trigged with no credentials passed by the client.
Username and password is now set to empty strings and transmited to
the backend server this way.

See #2191 for more details and to keep track of the problem.

Closes: #2191, DEB#782120
2015-04-08 09:09:26 +00:00
Philipp Schafft
3baa4e46aa Fix: Let util_url_escape() handle NULL parameter.
This let util_url_escape() handle NULL passed as parameter.
In case the parameter is NULL it will also return NULL.

This patch also does some cleanup of the code such as migration
away from int and thus avoiding future failtures.
2015-04-08 09:02:20 +00:00
Thomas Ruecker
170b75b31b Updated version number to 2.4.2, prep for release
This is going to be a strict security release
2015-04-08 11:32:27 +03:00
Thomas Ruecker
9f43bf78f9 applying curl fix for win32 from master
17a3e5932cde41df7c4c1d0f42919c9ddfb99274
2015-04-08 11:18:40 +03:00
Thomas B. "dm8tbr" Ruecker
1a3fd18cd4 meh, one more fix, remove spec from Makefile
svn path=/icecast/trunk/icecast/; revision=19326
2014-11-19 13:59:27 +00:00
Thomas B. "dm8tbr" Ruecker
d1ee618e10 This is Spaaarrr^w Icecast 2.4.1!
svn path=/icecast/trunk/icecast/; revision=19325
2014-11-19 13:55:58 +00:00
Thomas B. "dm8tbr" Ruecker
92dfbc5be5 Makefile.am and configure.in for new docs
svn path=/icecast/trunk/icecast/; revision=19324
2014-11-19 13:41:09 +00:00
Thomas B. "dm8tbr" Ruecker
b465436a24 deleting files that erroneously ended up in SVN
svn path=/icecast/trunk/icecast/; revision=19323
2014-11-19 12:28:30 +00:00
Thomas B. "dm8tbr" Ruecker
75994eeb5e Removing unmaintained RPM spec file
svn path=/icecast/trunk/icecast/; revision=19322
2014-11-19 12:18:49 +00:00
ePirat
95e7e42b49 Set PATH_MAX to 4096 if not defined (patch by Svante Signell <svante.signell@gmail.com>)
See: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767542

svn path=/icecast/trunk/icecast/; revision=19321
2014-11-19 11:30:58 +00:00
ePirat
abc75687dc Docs: 2.4.1 docs added
svn path=/icecast/trunk/icecast/; revision=19319
2014-11-18 19:57:21 +00:00
ePirat
e7d68fd3b0 Move declarations to begin of block
(patch by Andreas Mieke)

svn path=/icecast/trunk/icecast/; revision=19318
2014-11-18 17:43:34 +00:00
Thomas B. "dm8tbr" Ruecker
dbab3fd07b corrected email address
svn path=/icecast/trunk/icecast/; revision=19317
2014-11-18 16:18:08 +00:00
ePirat
42f763bf37 Experimental fix for memory errors when using a lot of headers, see #1885
svn path=/icecast/trunk/icecast/; revision=19316
2014-11-18 10:17:16 +00:00
Thomas B. "dm8tbr" Ruecker
c8791e3c79 Comments in <http-headers> break things ATM
Moved the comment out to avoid this bug.
Needs to be checked.

svn path=/icecast/trunk/icecast/; revision=19315
2014-11-18 08:51:03 +00:00
Thomas B. "dm8tbr" Ruecker
9cd2e5c48e Preparing for 2.4.1 release.
We are now code complete plus an additional security fix.
Some testing remains before final release.

svn path=/icecast/trunk/icecast/; revision=19314
2014-11-17 22:19:38 +00:00
Philipp Schafft
baee2d0c7f subset of my earlier patch so it can go into 2.4.1: disconnects stdio of <on-[dis]connect> scripts from random filehandles. closes #2087
svn path=/icecast/trunk/icecast/; revision=19313
2014-11-17 19:20:57 +00:00
Philipp Schafft
d06b6b1846 patch to fix regression on header size with large headers introduced by support of <server-id> and <http-headers>. This should ensure we have at least space for 2kB of extra headers. Depending on function and call we may have much more space.
Please test this very carefully.
Some pointers what should be in the tests (NOT complet list):
- request to 'static' web/ and admin/ pages.
- requests to playlist generation.
- requests to streams.
- requests to admin/ manipulation functions.
- test everything with at least 8kB of extra headers, then reduce in 1kB (or 512B) steps.
- see if response is correct OR 500 is returned.
- run under valgrind or similar to see no buffer overflow or similiar will happen.
- take a cookie!

svn path=/icecast/trunk/icecast/; revision=19300
2014-11-10 10:46:55 +00:00
Thomas B. "dm8tbr" Ruecker
ad1f7bca2e Update minimal config to contain ACAO * header
svn path=/icecast/trunk/icecast/; revision=19299
2014-11-10 08:23:34 +00:00
Thomas B. "dm8tbr" Ruecker
35fce69c4a convert TABstops to spaces for consistency
svn path=/icecast/trunk/icecast/; revision=19298
2014-11-10 08:20:30 +00:00
Thomas B. "dm8tbr" Ruecker
58fdef4856 Update default config, SSL, headers, default-mount
svn path=/icecast/trunk/icecast/; revision=19297
2014-11-10 06:25:15 +00:00
Thomas B. "dm8tbr" Ruecker
7ecf0b04da small email fix
svn path=/icecast/trunk/icecast/; revision=19296
2014-11-09 11:47:46 +00:00
Thomas B. "dm8tbr" Ruecker
298b1ac79a Once more updated string, same Qualys results.
String taken from:
https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29

svn path=/icecast/trunk/icecast/; revision=19295
2014-11-09 10:55:29 +00:00
Thomas B. "dm8tbr" Ruecker
d767b9e7f2 Clean up some things in the default config file.
svn path=/icecast/trunk/icecast/; revision=19294
2014-11-09 09:13:59 +00:00
Thomas B. "dm8tbr" Ruecker
68fbfcbf87 updated changelog
svn path=/icecast/trunk/icecast/; revision=19293
2014-11-08 20:39:31 +00:00
Thomas B. "dm8tbr" Ruecker
574274d22e Make sure email address is up to date.
svn path=/icecast/trunk/icecast/; revision=19292
2014-11-08 17:13:48 +00:00
Thomas B. "dm8tbr" Ruecker
24b7825adb Applying patch, HTTP PUT requires content-type
In case of SOURCE we are lenient and thus quite some source clients
don't send a proper content-type, especially if they only support mp3.

This was meant to be introduced in 2.4.0 already, sadly we missed it.

All source clients MUST send proper content-type after migrating to 
Icecast HTTP PUT protocol.

closes #2082

svn path=/icecast/trunk/icecast/; revision=19288
2014-11-08 16:23:26 +00:00
Philipp Schafft
06977d788c Fixed regression introduced in r18356 (CVE-2011-4612): client duration time is now correctly logged. PRIu64 MUST NOT be used with log_write_direct() as depending on platform PRIu64 may be using something not supported by __vsnprintf() of log/log.c. close #2081, see r18356
svn path=/icecast/trunk/icecast/; revision=19287
2014-11-08 13:34:45 +00:00
Philipp Schafft
d959c20f11 make use of sizeof() not explicit magic numbers
svn path=/icecast/trunk/icecast/; revision=19286
2014-11-08 12:28:17 +00:00
Philipp Schafft
ab0ac755be fixing some compiler warnings
svn path=/icecast/trunk/net/; revision=19282
2014-11-07 23:14:29 +00:00
Philipp Schafft
9353b5e448 fixing some compiler warnings
svn path=/icecast/trunk/httpp/; revision=19281
2014-11-07 23:14:00 +00:00
Philipp Schafft
fc63b67b87 fixing some compiler warnings
svn path=/icecast/trunk/icecast/; revision=19280
2014-11-07 23:10:43 +00:00
Philipp Schafft
78ca9bd2ba updated some copyright headers
svn path=/icecast/trunk/icecast/; revision=19278
2014-11-07 22:06:06 +00:00
Philipp Schafft
29d9778c09 fix for %z on win*. hope it doesn't breaky anything else.
svn path=/icecast/trunk/icecast/; revision=19277
2014-11-07 20:56:04 +00:00
Philipp Schafft
70f8d14d1c added warnings on empty and default values of <fileserve>, <hostname>, <location>, <admin> and <server-id>
svn path=/icecast/trunk/icecast/; revision=19276
2014-11-07 19:14:28 +00:00
Philipp Schafft
0b7e65c3c9 send errorlog (loglevel WARN) to stderr prior to opening the real logfiles. closes #1886
svn path=/icecast/trunk/icecast/; revision=19271
2014-11-07 11:18:54 +00:00
Philipp Schafft
1d56769648 added support for type="" and status="" in <header> (subelement of <http-headers>).
svn path=/icecast/trunk/icecast/; revision=19270
2014-11-07 10:12:24 +00:00
Philipp Schafft
9597e2eadd Added support for <http-headers> within <mount>. Also support merging of headers (normal mount + default mount). See #1885
svn path=/icecast/trunk/icecast/; revision=19269
2014-11-07 02:55:57 +00:00
Philipp Schafft
aa869033e2 handle empty strings in config file better. Now empty strings are handled in: accesslog, errorlog, logdir, webroot, adminroot and hopefully all kinds of port. Feal free to reopen ticket if there are more that needs to be fixed. closes #1963
svn path=/icecast/trunk/icecast/; revision=19268
2014-11-07 01:40:28 +00:00
Philipp Schafft
df9d738b6e initial patch to allow adding user defined headers, closes #1885
svn path=/icecast/trunk/icecast/; revision=19267
2014-11-07 00:56:02 +00:00
Philipp Schafft
97454060eb coding style and typo correcion
svn path=/icecast/trunk/icecast/; revision=19266
2014-11-06 23:55:58 +00:00
Thomas B. "dm8tbr" Ruecker
859c761cb6 Be more verbose in case of fileserve off.
svn path=/icecast/trunk/icecast/; revision=19265
2014-11-06 12:02:00 +00:00
Thomas B. "dm8tbr" Ruecker
0eff9a91e9 applied patch to update the default ciphers to be more secure (close #2072)
This was taken from: https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/#fnref2 (scroll up 2 lines)

I've tested this successfully against https://www.ssllabs.com/ssltest/ in combination with the patch for #2071. The only OS/Browser combination failing is: IE 6 / XP

svn path=/icecast/trunk/icecast/; revision=19264
2014-11-05 10:09:07 +00:00
Philipp Schafft
a3b50beabd applied patch to disable SSLv3 and SSL compression explicitly (close #2071)
svn path=/icecast/trunk/icecast/; revision=19263
2014-11-03 19:34:10 +00:00
Thomas B. "dm8tbr" Ruecker
c4d9eaa066 Put the last item check into every filtered tag.
This way we shouldn't run into problems of this type anymore.
Also it should be easier to customize this way,
if someone wants to filter differently.

svn path=/icecast/trunk/icecast/; revision=19262
2014-11-02 20:19:29 +00:00
Philipp Schafft
e6ce60e630 rename ICE_LISTEN_QUEUE, ICE_RUNNING and ICE_HALTING so they have a prefix of ICECAST_
svn path=/icecast/trunk/icecast/; revision=19258
2014-10-31 09:00:45 +00:00