aniani/icecast-server
1
0
Fork 0
mirror of https://gitlab.xiph.org/xiph/icecast-server.git synced 2024-12-04 14:46:30 -05:00
Code
1,205 Commits 49 Branches 25 Tags 7.6 MiB
c8791e3c79
Commit Graph

1205 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Thomas B. "dm8tbr" Ruecker
c8791e3c79 Comments in <http-headers> break things ATM 
Moved the comment out to avoid this bug.
Needs to be checked.

svn path=/icecast/trunk/icecast/; revision=19315
 2014-11-18 08:51:03 +00:00
Thomas B. "dm8tbr" Ruecker
9cd2e5c48e Preparing for 2.4.1 release. 
We are now code complete plus an additional security fix.
Some testing remains before final release.

svn path=/icecast/trunk/icecast/; revision=19314
 2014-11-17 22:19:38 +00:00
Philipp Schafft
baee2d0c7f subset of my earlier patch so it can go into 2.4.1: disconnects stdio of <on-[dis]connect> scripts from random filehandles. closes #2087 
svn path=/icecast/trunk/icecast/; revision=19313
 2014-11-17 19:20:57 +00:00
Philipp Schafft
d06b6b1846 patch to fix regression on header size with large headers introduced by support of <server-id> and <http-headers>. This should ensure we have at least space for 2kB of extra headers. Depending on function and call we may have much more space. 
Please test this very carefully.
Some pointers what should be in the tests (NOT complet list):
- request to 'static' web/ and admin/ pages.
- requests to playlist generation.
- requests to streams.
- requests to admin/ manipulation functions.
- test everything with at least 8kB of extra headers, then reduce in 1kB (or 512B) steps.
- see if response is correct OR 500 is returned.
- run under valgrind or similar to see no buffer overflow or similiar will happen.
- take a cookie!

svn path=/icecast/trunk/icecast/; revision=19300
 2014-11-10 10:46:55 +00:00
Thomas B. "dm8tbr" Ruecker
ad1f7bca2e Update minimal config to contain ACAO * header 
svn path=/icecast/trunk/icecast/; revision=19299
 2014-11-10 08:23:34 +00:00
Thomas B. "dm8tbr" Ruecker
35fce69c4a convert TABstops to spaces for consistency 
svn path=/icecast/trunk/icecast/; revision=19298
 2014-11-10 08:20:30 +00:00
Thomas B. "dm8tbr" Ruecker
58fdef4856 Update default config, SSL, headers, default-mount 
svn path=/icecast/trunk/icecast/; revision=19297
 2014-11-10 06:25:15 +00:00
Thomas B. "dm8tbr" Ruecker
7ecf0b04da small email fix 
svn path=/icecast/trunk/icecast/; revision=19296
 2014-11-09 11:47:46 +00:00
Thomas B. "dm8tbr" Ruecker
298b1ac79a Once more updated string, same Qualys results. 
String taken from:
https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29

svn path=/icecast/trunk/icecast/; revision=19295
 2014-11-09 10:55:29 +00:00
Thomas B. "dm8tbr" Ruecker
d767b9e7f2 Clean up some things in the default config file. 
svn path=/icecast/trunk/icecast/; revision=19294
 2014-11-09 09:13:59 +00:00
Thomas B. "dm8tbr" Ruecker
68fbfcbf87 updated changelog 
svn path=/icecast/trunk/icecast/; revision=19293
 2014-11-08 20:39:31 +00:00
Thomas B. "dm8tbr" Ruecker
574274d22e Make sure email address is up to date. 
svn path=/icecast/trunk/icecast/; revision=19292
 2014-11-08 17:13:48 +00:00
Thomas B. "dm8tbr" Ruecker
24b7825adb Applying patch, HTTP PUT requires content-type 
In case of SOURCE we are lenient and thus quite some source clients
don't send a proper content-type, especially if they only support mp3.

This was meant to be introduced in 2.4.0 already, sadly we missed it.

All source clients MUST send proper content-type after migrating to 
Icecast HTTP PUT protocol.

closes #2082

svn path=/icecast/trunk/icecast/; revision=19288
 2014-11-08 16:23:26 +00:00
Philipp Schafft
06977d788c Fixed regression introduced in r18356 (CVE-2011-4612): client duration time is now correctly logged. PRIu64 MUST NOT be used with log_write_direct() as depending on platform PRIu64 may be using something not supported by __vsnprintf() of log/log.c. close #2081, see r18356 
svn path=/icecast/trunk/icecast/; revision=19287
 2014-11-08 13:34:45 +00:00
Philipp Schafft
d959c20f11 make use of sizeof() not explicit magic numbers 
svn path=/icecast/trunk/icecast/; revision=19286
 2014-11-08 12:28:17 +00:00
Philipp Schafft
ab0ac755be fixing some compiler warnings 
svn path=/icecast/trunk/net/; revision=19282
 2014-11-07 23:14:29 +00:00
Philipp Schafft
9353b5e448 fixing some compiler warnings 
svn path=/icecast/trunk/httpp/; revision=19281
 2014-11-07 23:14:00 +00:00
Philipp Schafft
fc63b67b87 fixing some compiler warnings 
svn path=/icecast/trunk/icecast/; revision=19280
 2014-11-07 23:10:43 +00:00
Philipp Schafft
78ca9bd2ba updated some copyright headers 
svn path=/icecast/trunk/icecast/; revision=19278
 2014-11-07 22:06:06 +00:00
Philipp Schafft
29d9778c09 fix for %z on win*. hope it doesn't breaky anything else. 
svn path=/icecast/trunk/icecast/; revision=19277
 2014-11-07 20:56:04 +00:00
Philipp Schafft
70f8d14d1c added warnings on empty and default values of <fileserve>, <hostname>, <location>, <admin> and <server-id> 
svn path=/icecast/trunk/icecast/; revision=19276
 2014-11-07 19:14:28 +00:00
Philipp Schafft
0b7e65c3c9 send errorlog (loglevel WARN) to stderr prior to opening the real logfiles. closes #1886 
svn path=/icecast/trunk/icecast/; revision=19271
 2014-11-07 11:18:54 +00:00
Philipp Schafft
1d56769648 added support for type="" and status="" in <header> (subelement of <http-headers>). 
svn path=/icecast/trunk/icecast/; revision=19270
 2014-11-07 10:12:24 +00:00
Philipp Schafft
9597e2eadd Added support for <http-headers> within <mount>. Also support merging of headers (normal mount + default mount). See #1885 
svn path=/icecast/trunk/icecast/; revision=19269
 2014-11-07 02:55:57 +00:00
Philipp Schafft
aa869033e2 handle empty strings in config file better. Now empty strings are handled in: accesslog, errorlog, logdir, webroot, adminroot and hopefully all kinds of port. Feal free to reopen ticket if there are more that needs to be fixed. closes #1963 
svn path=/icecast/trunk/icecast/; revision=19268
 2014-11-07 01:40:28 +00:00
Philipp Schafft
df9d738b6e initial patch to allow adding user defined headers, closes #1885 
svn path=/icecast/trunk/icecast/; revision=19267
 2014-11-07 00:56:02 +00:00
Philipp Schafft
97454060eb coding style and typo correcion 
svn path=/icecast/trunk/icecast/; revision=19266
 2014-11-06 23:55:58 +00:00
Thomas B. "dm8tbr" Ruecker
859c761cb6 Be more verbose in case of fileserve off. 
svn path=/icecast/trunk/icecast/; revision=19265
 2014-11-06 12:02:00 +00:00
Thomas B. "dm8tbr" Ruecker
0eff9a91e9 applied patch to update the default ciphers to be more secure (close #2072) 
This was taken from: https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/#fnref2 (scroll up 2 lines)

I've tested this successfully against https://www.ssllabs.com/ssltest/ in combination with the patch for #2071. The only OS/Browser combination failing is: IE 6 / XP

svn path=/icecast/trunk/icecast/; revision=19264
 2014-11-05 10:09:07 +00:00
Philipp Schafft
a3b50beabd applied patch to disable SSLv3 and SSL compression explicitly (close #2071) 
svn path=/icecast/trunk/icecast/; revision=19263
 2014-11-03 19:34:10 +00:00
Thomas B. "dm8tbr" Ruecker
c4d9eaa066 Put the last item check into every filtered tag. 
This way we shouldn't run into problems of this type anymore.
Also it should be easier to customize this way,
if someone wants to filter differently.

svn path=/icecast/trunk/icecast/; revision=19262
 2014-11-02 20:19:29 +00:00
Philipp Schafft
e6ce60e630 rename ICE_LISTEN_QUEUE, ICE_RUNNING and ICE_HALTING so they have a prefix of ICECAST_ 
svn path=/icecast/trunk/icecast/; revision=19258
 2014-10-31 09:00:45 +00:00
Philipp Schafft
2b7cb1c641 LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 
svn path=/icecast/trunk/icecast/; revision=19257
 2014-10-31 08:46:58 +00:00
Philipp Schafft
cf419cc1df make <auth> in <mount type="default"> work if no <mount-name> is given. 
svn path=/icecast/trunk/icecast/; revision=19251
 2014-10-26 14:03:57 +00:00
ePirat
461a537561 More detailed logging 
Add source IP adress to startup and source exit logging, see #2016
Add mountpoint to some log lines, see #1388


svn path=/icecast/trunk/icecast/; revision=19250
 2014-10-23 20:41:38 +00:00
Philipp Schafft
634ab4ffc2 fix warnings, mostly related to win*-builds 
svn path=/icecast/trunk/icecast/; revision=19246
 2014-10-18 16:25:29 +00:00
Philipp Schafft
7ae4664780 Replace the old logging macros with variadic argument macros. (patch by ePirat) (close #2058) 
svn path=/icecast/trunk/icecast/; revision=19229
 2014-10-09 10:39:13 +00:00
Thomas B. "dm8tbr" Ruecker
093b943902 threadpool is long gone and unused, removing from example config 
svn path=/icecast/trunk/icecast/; revision=19179
 2014-07-23 16:55:57 +00:00
Thomas B. "dm8tbr" Ruecker
536b0b5808 Applying 
svn path=/icecast/trunk/icecast/; revision=19177
 2014-07-23 10:20:47 +00:00
Thomas B. "dm8tbr" Ruecker
a82d5fa396 This is Icecast 2.4.0! 
svn path=/icecast/trunk/icecast/; revision=19138
 2014-05-06 05:24:00 +00:00
Thomas B. "dm8tbr" Ruecker
53e6ee7abb SECURITY FIX - Override supplementary groups 
In case of <changeowner> only UID and GID were changed, 
supplementary groups were left in place.
This is a potential security issue only if <changeowner> is used.
New behaviour is to set UID, GID and set supplementary groups 
based on the UID
Even in case of icecast remaining in supplementary group 0 
this "only" gives it things like access to files that are owned 
by group 0 and according to their umask. This is obviously bad,
but not as bad as UID 0 with all its other special rights.
It's a security issue and we fix immediately and recommend users to update.

PS: Cherry picking this should be fine by distros for fixing older releases.

svn path=/icecast/trunk/icecast/; revision=19137
 2014-05-06 04:53:24 +00:00
Thomas B. "dm8tbr" Ruecker
4c52d8f2a1 Fix old email address 
svn path=/icecast/trunk/icecast/; revision=19136
 2014-05-06 04:32:07 +00:00
Thomas B. "dm8tbr" Ruecker
295acc323b minor cleanup 
svn path=/icecast/trunk/icecast/; revision=19135
 2014-05-05 05:18:39 +00:00
Thomas B. "dm8tbr" Ruecker
29feb25e6b Added <audio> for supported streams. TNX ePirat 
svn path=/icecast/trunk/icecast/; revision=19134
 2014-05-05 05:16:44 +00:00
Thomas B. "dm8tbr" Ruecker
cce17fc5e4 status2.xsl, broken for a decade, now it's gone! 
svn path=/icecast/trunk/icecast/; revision=19133
 2014-05-04 17:36:25 +00:00
Thomas B. "dm8tbr" Ruecker
7050f9be52 Removed win32 files from Makefile 
svn path=/icecast/trunk/icecast/; revision=19132
 2014-05-04 17:09:59 +00:00
Thomas B. "dm8tbr" Ruecker
5438692af6 Reduced win32 documentation to essentials. 
svn path=/icecast/trunk/icecast/; revision=19131
 2014-05-04 17:08:40 +00:00
Thomas B. "dm8tbr" Ruecker
8679f12de8 Updated YP documentation 
svn path=/icecast/trunk/icecast/; revision=19130
 2014-05-04 16:57:39 +00:00
Thomas B. "dm8tbr" Ruecker
dcd4cd4d59 Minor fixes to the config file documentation. 
svn path=/icecast/trunk/icecast/; revision=19129
 2014-05-04 16:53:20 +00:00
Thomas B. "dm8tbr" Ruecker
93838f722c Quick fixup of the basic setup page 
svn path=/icecast/trunk/icecast/; revision=19128
 2014-05-04 16:45:45 +00:00