William Lallemand 45fba1db27 BUG/MINOR: acme: avoid overflow when diff > notAfter ...

Avoid an overflow or a negative value if notAfter < diff.

This is unlikely to provoke any problem.

Fixes issue #3138.

Must be backported to 3.2.

2025-10-07 10:54:58 +02:00

..

_ceb_addr.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

_ceb_blk.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

_ceb_int.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

_ceb_str.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

acl.c

…

acme.c

BUG/MINOR: acme: avoid overflow when diff > notAfter

2025-10-07 10:54:58 +02:00

action.c

…

activity.c

MINOR: activity/memory: count allocations performed under a lock

2025-09-11 16:32:34 +02:00

applet.c

…

arg.c

…

auth.c

…

backend.c

BUG/MEDIUM: connections: Only avoid creating a mux if we have one

2025-10-03 13:13:10 +02:00

base64.c

…

buf.c

…

cache.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

calltrace.c

…

ceb32_tree.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

ceb64_tree.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

ceba_tree.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

cebb_tree.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

cebib_tree.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

cebis_tree.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

cebl_tree.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

cebs_tree.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

cebtree-dbg.c

IMPORT: cebtree: import version 0.5.0 to support duplicates

2025-09-16 09:23:46 +02:00

cebtree-prv.h

…

cfgcond.c

…

cfgdiag.c

…

cfgparse-global.c

…

cfgparse-listen.c

MEDIUM: proxy: index proxy ID using compact trees

2025-09-16 09:23:46 +02:00

cfgparse-quic.c

…

cfgparse-ssl.c

…

cfgparse-tcp.c

MINOR: server: add the "cc" keyword to set the TCP congestion controller

2025-09-17 17:19:33 +02:00

cfgparse-unix.c

…

cfgparse.c

MEDIUM: server: index server ID using compact trees

2025-09-16 09:23:46 +02:00

channel.c

…

check.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

chunk.c

…

cli.c

MEDIUM: proxy: index proxy ID using compact trees

2025-09-16 09:23:46 +02:00

clock.c

…

compression.c

…

connection.c

MEDIUM: connection: reintegrate conn_hash_node into connection

2025-09-16 09:23:46 +02:00

counters.c

MEDIUM: guid: switch guid to more compact cebuis_tree

2025-09-16 09:23:46 +02:00

cpu_topo.c

…

cpuset.c

…

debug.c

MINOR: thread: add a lock level information in the thread_ctx

2025-09-11 16:32:34 +02:00

dgram.c

…

dict.c

…

dns_ring.c

…

dns.c

…

dynbuf.c

…

eb32sctree.c

…

eb32tree.c

IMPORT: ebtree: only use __builtin_prefetch() when supported

2025-09-17 14:30:32 +02:00

eb64tree.c

IMPORT: ebtree: only use __builtin_prefetch() when supported

2025-09-17 14:30:32 +02:00

ebimtree.c

…

ebistree.c

…

ebmbtree.c

…

ebsttree.c

…

ebtree.c

…

errors.c

…

ev_epoll.c

…

ev_evports.c

…

ev_kqueue.c

…

ev_poll.c

…

ev_select.c

…

event_hdl.c

…

extcheck.c

…

fcgi-app.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

fcgi.c

…

fd.c

…

filters.c

…

fix.c

…

flt_bwlim.c

…

flt_http_comp.c

BUG/MINOR: compression: Test payload size only if content-length is specified

2025-09-25 10:16:53 +02:00

flt_spoe.c

…

flt_trace.c

…

freq_ctr.c

…

frontend.c

…

guid.c

MEDIUM: guid: switch guid to more compact cebuis_tree

2025-09-16 09:23:46 +02:00

h1_htx.c

…

h1.c

…

h2.c

BUG/MINOR: h2: forbid 'Z' as well in header field names checks

2025-10-02 15:29:58 +02:00

h3_stats.c

…

h3.c

BUG/MINOR: h3: forbid 'Z' as well in header field names checks

2025-10-02 15:30:02 +02:00

haproxy.c

…

hash.c

…

hlua_fcn.c

…

hlua.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

hpack-dec.c

…

hpack-enc.c

…

hpack-huff.c

…

hpack-tbl.c

…

hq_interop.c

…

http_acl.c

…

http_act.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

http_ana.c

BUG/MINOR: http-ana: Reset analyse_exp date after 'wait-for-body' action

2025-10-03 17:09:16 +02:00

http_client.c

BUG/MEDIUM: http-client: Fix the test on the response start-line

2025-09-19 14:59:28 +02:00

http_conv.c

…

http_ext.c

…

http_fetch.c

…

http_htx.c

…

http_rules.c

…

http.c

…

httpclient_cli.c

…

htx.c

…

init.c

…

jws.c

…

jwt.c

…

lb_chash.c

…

lb_fas.c

…

lb_fwlc.c

BUG/MEDIUM: fwlc: Handle memory allocation failures.

2025-10-01 18:13:33 +02:00

lb_fwrr.c

…

lb_map.c

…

lb_ss.c

…

limits.c

…

linuxcap.c

…

listener.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

log.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

lru.c

…

mailers.c

…

map.c

…

mjson.c

CLEANUP: mjson: remove unused defines from mjson.h

2025-10-06 09:30:07 +02:00

mqtt.c

…

mux_fcgi.c

MEDIUM: connection: reintegrate conn_hash_node into connection

2025-09-16 09:23:46 +02:00

mux_h1.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

mux_h2.c

MEDIUM: connection: reintegrate conn_hash_node into connection

2025-09-16 09:23:46 +02:00

mux_pt.c

…

mux_quic.c

MEDIUM: connection: reintegrate conn_hash_node into connection

2025-09-16 09:23:46 +02:00

mux_spop.c

MEDIUM: connection: reintegrate conn_hash_node into connection

2025-09-16 09:23:46 +02:00

mworker.c

…

namespace.c

…

ncbuf.c

…

pattern.c

BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix

2025-09-25 15:28:22 +02:00

payload.c

…

peers.c

…

pipe.c

…

pool.c

MINOR: activity/memory: count allocations performed under a lock

2025-09-11 16:32:34 +02:00

proto_quic.c

…

proto_rhttp.c

…

proto_sockpair.c

…

proto_tcp.c

MINOR: server: add the "cc" keyword to set the TCP congestion controller

2025-09-17 17:19:33 +02:00

proto_udp.c

…

proto_uxdg.c

…

proto_uxst.c

…

protocol.c

…

proxy.c

MINOR: listener: add the "cc" bind keyword to set the TCP congestion controller

2025-09-17 17:03:42 +02:00

qmux_http.c

…

qmux_trace.c

…

qpack-dec.c

…

qpack-enc.c

…

qpack-tbl.c

…

queue.c

…

quic_ack.c

…

quic_cc_bbr.c

…

quic_cc_cubic.c

…

quic_cc_drs.c

…

quic_cc_newreno.c

…

quic_cc_nocc.c

…

quic_cc.c

…

quic_cid.c

…

quic_cli.c

…

quic_conn.c

…

quic_enc.c

…

quic_fctl.c

…

quic_frame.c

…

quic_loss.c

…

quic_openssl_compat.c

…

quic_pacing.c

…

quic_retransmit.c

…

quic_retry.c

…

quic_rules.c

…

quic_rx.c

…

quic_sock.c

…

quic_ssl.c

…

quic_stats.c

…

quic_stream.c

…

quic_tls.c

…

quic_token.c

…

quic_tp.c

…

quic_trace.c

…

quic_tx.c

…

raw_sock.c

MINOR: rawsock: introduce CO_RFL_TRY_HARDER to detect closures on complete reads

2025-10-01 10:23:01 +02:00

regex.c

…

resolvers.c

BUG/MEDIUM: resolvers: break an infinite loop in resolv_get_ip_from_response()

2025-10-03 09:08:10 +02:00

ring.c

OPTIM: ring: avoid reloading the tail_ofs value before the CAS in ring_write()

2025-09-18 15:27:32 +02:00

sample.c

…

server_state.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

server.c

MEDIUM: servers: Schedule the server requeue target on creation

2025-10-01 18:13:33 +02:00

session.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

sha1.c

…

shctx.c

…

signal.c

…

sink.c

BUG/MINOR: sink: retry attempt for sft server may never occur

2025-10-03 14:31:05 +02:00

slz.c

…

sock_inet.c

…

sock_unix.c

…

sock.c

…

ssl_ckch.c

BUG/MEDIUM: ssl: ca-file directory mode must read every certificates of a file

2025-09-26 09:36:55 +02:00

ssl_clienthello.c

…

ssl_crtlist.c

…

ssl_gencert.c

…

ssl_ocsp.c

BUG/MINOR: ocsp: Crash when updating CA during ocsp updates

2025-09-15 15:34:36 +02:00

ssl_sample.c

MINOR: ssl: add the ssl_bc_sni sample fetch function to retrieve backend SNI

2025-10-01 10:18:53 +02:00

ssl_sock.c

MEDIUM: ssl: don't always process pending handshakes on closed connections

2025-10-01 10:23:04 +02:00

ssl_trace.c

…

ssl_utils.c

…

stats-file.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

stats-html.c

…

stats-json.c

…

stats-proxy.c

…

stats.c

…

stconn.c

…

stick_table.c

BUG/MEDIUM: stick-tables: Make sure not to free a pending entry

2025-09-30 16:25:07 +02:00

stream.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

systemd.c

…

task.c

MINOR: sched: pass the thread number to is_sched_alive()

2025-10-01 10:18:53 +02:00

tcp_act.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

tcp_rules.c

MEDIUM: stats: consider that shared stats pointers may be NULL

2025-09-18 16:49:51 +02:00

tcp_sample.c

…

tcpcheck.c

…

thread.c

MINOR: thread: add a lock level information in the thread_ctx

2025-09-11 16:32:34 +02:00

time.c

…

tools.c

CLEANUP: tools: use the item API for the file names tree

2025-09-16 10:41:19 +02:00

trace.c

MINOR: trace: don't call strlen() on the function's name

2025-09-18 08:31:57 +02:00

uri_auth.c

…

uri_normalizer.c

…

vars.c

CLEANUP: vars: use the item API for the variables trees

2025-09-16 10:51:23 +02:00

version.c

…

wdt.c

BUG/MEDIUM: wdt: improve stuck task detection accuracy

2025-10-01 10:18:53 +02:00

xprt_handshake.c

…

xprt_quic.c

…