-Version 0.58 -- 15 November 2000 <skimo@kotnet.org> Sven Verdoolaege
+Release history for FCGI
+
+Version 0.79 -- 2019-12-14
+
+ - Check socket path length in OS_CreateLocalIpcFd() and OS_FcgiConnect()
+ to avoid buffer overrun (Petr Písař, pull request #5)
+ - Fix a memory leak in ProcessManagementRecord() (Petr Písař, pull request #4)
+
+Version 0.78 -- 2015-03-07
+
+ - make copyright and license information more visible (RT#112535)
+
+Version 0.77 -- 2014-08-05
+
+ - re-release to remove build artifacts that should not have been shipped
+
+Version 0.76 -- 2014-08-05
+
+ - On Android, set TMPDIR before calling configure (RT#97680, Brian Fraser)
+
+Version 0.75 -- 2014-07-17
+
+ - deprecated APIs removed (chansen)
+ - broken PP implementation removed (chansen)
+ - retooled distribution so FCGI.pm and FCGI.xs exist as-is, rather than
+ being generated by FCGI.PL and FCGI.XL (chansen)
+
+Version 0.74 -- 24 Sep 2011 <rafl@debian.org>
+ - Stop leaking information across requests when using the deprecated
+ and undocumented old FCGI interface. This is CVE-2011-2766.
+ - Only discard input stream if FCGI_KEEP_CONN is set in
+ FCGI_BeginRequestBody flags.
+
+Version 0.73 -- 19 May 2011 <rafl@debian.org>
+ - Stop claiming we ship a file called -e in the MANIFEST.
+
+Version 0.72 -- 19 May 2011 <rafl@debian.org>
+ - Clean up Makefile.PL and restore compatibility with recent
+ ExtUtils::MakeMaker versions.
+
+Version 0.71_03 -- 28 Apr 2011 <bobtfish@bobtfish.net>
+ - Remove support for sfio which is an optional (and not enabled by default)
+ compile option to perl that is never used.
+ - Fix FCGI::Stream::READ() to warn() instead of croak() incase of
+ wide characters which cannot be gracefully downgraded.
+ - Fix warnings due to wide characters being mangled to note that accepting
+ them is deprecated and will stop working at some point.
+ - Various fixes to FCGI::Stream::READ() to improve handling of error and
+ edge cases.
+ - croak if called with invalid number of arguments
+ - croak if length is negative
+ - croak if offset is outside string
+ - pad scalar if offset is greater than length
+ - Fix in FCGX_Finish_r to discard any remaining data in input stream
+ which otherwise ends up in next request. This fixes multiple requests
+ being broken if something goes wrong whilst reading the initial request.
+ This discarding is done silently, as RFC 3875 says a script is not
+ obliged to read any of the data.
+ - Fixed indent style and braces to be consistent, swapped tabs for spaces
+ in indenting.
+
+Version 0.71_02 -- 28 Apr 2011 <bobtfish@bobtfish.net>
+ - Change the Request function to pass FAIL_ON_INTR into the XS
+ RequestX function. This prevents the fcgi C client code from
+ looping around their accept() call. This change means that
+ when using CGI::Fast, and the process recieves SIGTERM or
+ SIGHUP, the error statusis correctly passed back up, allowing process
+ managers (such as FCGI::ProcManager) to correctly handle cleanly exiting.
- o fix bug introduced in 0.57
+Version 0.71_01 -- 24 Aug 2010 <bobtfish@bobtfish.net>
+ - Restore old behavior when un-downgradeable uft8 is sent to FCGI.
+ The first time this happens, a warning will be issued, but subsequently
+ the bytes will be sent through raw (causing double encoding etc).
+ If the character string can be downgraded safely, then it will still be.
+ use warnings FATAL => 'utf8'; can be used to make undowngradeable strings
+ throw an exception.
+ - Fix PRINT retval (Closes: RT#57697).
-Version 0.57 -- 12 November 2000 <skimo@kotnet.org> Sven Verdoolaege
+Version 0.71 -- 1 Apr 2010 <rafl@debian.org> Florian Ragwitz
+ - Fix some more defined(%hash) warnings on perl 5.12.
- o don't flush unbound request
+Version 0.70 -- 22 Mar 2010 <bobtfish@bobtfish.net> Tomas Doran
+ - Fix use of defined %hash which becomes deprecated in perl 5.12
-Version 0.56 -- 3 November 2000 <skimo@kotnet.org> Sven Verdoolaege
+Version 0.69 -- 15 Feb 2010 <mst@shadowcat.co.uk> Matt S Trout
+ - No changes since the previous development release.
- o add example remote.fpl
- o provide access to the Request parameters
- o add IsFastCGI method
- o fix warn handler (Andrew Pimlott <pimlott@idiomtech.com>)
+Version 0.68_02 -- 13 Jan 2010 <mst@shadowcat.co.uk> Matt S Trout
+ - Make the PRINT method return a boolean value rather than the
+ number of bytes written, previous patch was incorrect.
-Version 0.55 -- 18 October 2000 <skimo@kotnet.org> Sven Verdoolaege
+Version 0.68_01 -- 10 Jan 2010 <mst@shadowcat.co.uk> Matt S Trout
+ - Force signal handler installation so that we correctly install handlers
+ for SIGPIPE. Fixes RT#5100 <bobtfish@bobtfish.net>
+ - Make the PRINT method return the number of bytes written rather than
+ undef to be consistent with the IO:: interface. Fixes RT#24347
+ <David Dick>
+ - Fix UTF-8 double encoding when FCGI is passed octets by downgrading
+ them into bytes correctly. Fixes RT#52400 <chansen@cpan.org>
- o small documentation fix
- o compilation issues with older perls fixed
- o library initialization when using sockets fixed
-
-Version 0.54 -- 8 October 2000 <skimo@kotnet.org> Sven Verdoolaege
-
- o library fixes ("Rob Saccoccio" <robs@ipass.net>)
- o compilation issues with newer gcc
- o completely untested OPEN and READLINE methods
+Version 0.68 -- 31 Dec 2009 <mst@shadowcat.co.uk> Matt S Trout
+ - No changes since the previous development release.
-Version 0.53 -- 10 July 2000 <skimo@kotnet.org> Sven Verdoolaege
-
- o sfio version compiles again
+Version 0.67_01 -- 20 Dec 2009 <mst@shadowcat.co.uk> Matt S Trout
+ - Add FILENO method which returns a defined but invalid value to
+ placate things such as IPC::Run which call fileno to check if a
+ filehandle is open.
+ Closes bugs:
+ http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544540
+ http://rt.cpan.org/Public/Bug/Display.html?id=50972
+ Removes need for upstream patch in OpenBSD <bobtfish@bobtfish.net>
+ - Call the fcgi lib's attach/detach <robs@fastcgi.com>
+
+Version 0.67 -- 22 December 2002 <skimo@kotnet.org> Sven Verdoolaege
+
+ - Fixes for pure perl version based on report and patch
+ from "Kurtis D. Rader" <kdrader@us.ibm.com>
+ - FCGI_UndoBinding perl 5.8.0 compatibility
+ Reported by Marko Asplund <aspa@kronodoc.fi>
+ - Fix problem with fcgi_config.h on win32.
+ Reported by Igor Franchuk <softdep@rol.ru>
+ - Add minimal tests
+
+Version 0.66 -- 5 September 2002 <skimo@kotnet.org> Sven Verdoolaege
+
+ - perl 5.8.0 compatibility fix by Autrijus
+ - library fixes from Rob
+
+Version 0.65 -- 19 February 2002 <skimo@kotnet.org> Sven Verdoolaege
+
+ - fix perl 5.005 compatibility problem
+ - fix strict warning
+
+Version 0.64 -- 25 September 2001 <skimo@kotnet.org> Sven Verdoolaege
+Version 0.63 -- 24 September 2001 <skimo@kotnet.org> Sven Verdoolaege
+
+ - Update build process
+
+Version 0.62 -- 21 September 2001 <skimo@kotnet.org> Sven Verdoolaege
+
+ - Move version number to separate file
+
+Version 0.61 -- 20 September 2001 <skimo@kotnet.org> Sven Verdoolaege
+
+ - Fix refcounting bug
+ - Add GetEnvironment for pure version
+ - Add LastCall method
+ - Allow filehandle for Request's socket parameter
+ - library fixes ("Rob Saccoccio" <robs@chelsea.net>)
+
+Version 0.60 -- 8 July 2001 <skimo@kotnet.org> Sven Verdoolaege
+
+ - Allow specification of purity on command line
+ (suggested by Rob Brown <rbrown@about-inc.com>)
+ - Fix bug in pure perl implementation
+ - Don't try to compile anything on pure perl build
+ - Add BINMODE method
+ - Add comment on socket permissions
+
+Version 0.59 -- 31 December 2000 <skimo@kotnet.org> Sven Verdoolaege
+
+ - preliminary pure perl implementation
+ - copy win32 configuration file instead of moving it
+ - convert echo.fpl to new interface
+
+Version 0.58 -- 15 November 2000 <skimo@kotnet.org> Sven Verdoolaege
+
+ - fix bug introduced in 0.57
+
+Version 0.57 -- 12 November 2000 <skimo@kotnet.org> Sven Verdoolaege
+
+ - don't flush unbound request
+
+Version 0.56 -- 3 November 2000 <skimo@kotnet.org> Sven Verdoolaege
+
+ - add example remote.fpl
+ - provide access to the Request parameters
+ - add IsFastCGI method
+ - fix warn handler (Andrew Pimlott <pimlott@idiomtech.com>)
+
+Version 0.55 -- 18 October 2000 <skimo@kotnet.org> Sven Verdoolaege
+
+ - small documentation fix
+ - compilation issues with older perls fixed
+ - library initialization when using sockets fixed
+
+Version 0.54 -- 8 October 2000 <skimo@kotnet.org> Sven Verdoolaege
+
+ - library fixes ("Rob Saccoccio" <robs@ipass.net>)
+ - compilation issues with newer gcc
+ - completely untested OPEN and READLINE methods
+
+Version 0.53 -- 10 July 2000 <skimo@kotnet.org> Sven Verdoolaege
+
+ - sfio version compiles again
Version 0.52 -- 12 April 2000 <skimo@kotnet.org> Sven Verdoolaege
Version 0.49 -- 9 April 2000 <skimo@kotnet.org> Sven Verdoolaege
- o General clean-ups
- o Allow attaching/detaching
- o Changed DESTROY behaviour
- o Fixed default warn/die handler of old interface
- o Document new interface
+ - General clean-ups
+ - Allow attaching/detaching
+ - Changed DESTROY behaviour
+ - Fixed default warn/die handler of old interface
+ - Document new interface
Version 0.48 -- 27 August 1999 <skimo@kotnet.org> Sven Verdoolaege
- o perl 5.005_60 compatibility
- o locking on platforms that need it
- o support for remote connections
+ - perl 5.005_60 compatibility
+ - locking on platforms that need it
+ - support for remote connections
Version 0.47 -- 31 July 1999 <skimo@kotnet.org> Sven Verdoolaege
- o move PRINTF into correct package
- o deprecated set_exit_status
- o general cleanup, moving old non thread safe interface
- from xs to perl
+ - move PRINTF into correct package
+ - deprecated set_exit_status
+ - general cleanup, moving old non thread safe interface
+ from xs to perl
Version 0.46 -- 30 July 1999 <skimo@kotnet.org> Sven Verdoolaege
- o new thread safe interface
- o new threaded example program
+ - new thread safe interface
+ - new threaded example program
Version 0.45 -- 8 March 1999 <skimo@kotnet.org> Sven Verdoolaege
- o FCGI.pm now part of the devel kit
- o library fixes ("Rob Saccoccio" <robs@ipass.net>)
- o allow bypassing of installation of handlers
- o ActivePerl compatibility (Murray Nesbitt <murray@ActiveState.com>)
+ - FCGI.pm now part of the devel kit
+ - library fixes ("Rob Saccoccio" <robs@ipass.net>)
+ - allow bypassing of installation of handlers
+ - ActivePerl compatibility (Murray Nesbitt <murray@ActiveState.com>)
Version 0.43 -- 22 December 1998 <skimo@kotnet.org> Sven Verdoolaege
- o POST on bigendians (Paul GABORIT <gaborit@enstimac.fr>)
- o Some win32 changes (Monty <xiphmont@fastserv.com>)
- o library fixes ("Rob Saccoccio" <robs@ipass.net>)
+ - POST on bigendians (Paul GABORIT <gaborit@enstimac.fr>)
+ - Some win32 changes (Monty <xiphmont@fastserv.com>)
+ - library fixes ("Rob Saccoccio" <robs@ipass.net>)
Version 0.42 -- 28 August 1998 <skimo@kotnet.org> Sven Verdoolaege
- o environ fixes ?
- o print NULLs (Ken Alexander <kalex@eecs.umich.edu>)
- o PRINTF support
- o set version in FCGI.pm
- o library fixes ("Rob Saccoccio" <robs@ipass.net>)
+ - environ fixes ?
+ - print NULLs (Ken Alexander <kalex@eecs.umich.edu>)
+ - PRINTF support
+ - set version in FCGI.pm
+ - library fixes ("Rob Saccoccio" <robs@ipass.net>)
Version 0.41 -- 29 July 1998 <skimo@kotnet.org> Sven Verdoolaege
- o Compiles with perl 5.005
+ - Compiles with perl 5.005
Version 0.40 -- 15 July 1998 <skimo@kotnet.org> Sven Verdoolaege
- o Added default die hook
- o Minimal documentation
+ - Added default die hook
+ - Minimal documentation
Version 0.39 -- 3 July 1998 <skimo@kotnet.org> Sven Verdoolaege
- o Fixed read bug
+ - Fixed read bug
Version 0.38 -- 28 June 1998 <skimo@kotnet.org> Sven Verdoolaege
- o Fixed flush bug
- o Added default warn hook
+ - Fixed flush bug
+ - Added default warn hook
Version 0.37 -- 27 June 1998 <skimo@kotnet.org> Sven Verdoolaege
- o More support for tied handles
- o Added flush function
+ - More support for tied handles
+ - Added flush function
Version 0.36 -- 23 June 1998 <skimo@kotnet.org> Sven Verdoolaege
- o More support for tied handles (GETC and autoflushing)
+ - More support for tied handles (GETC and autoflushing)
Version 0.35 -- 22 June 1998 <skimo@kotnet.org> Sven Verdoolaege
- o Added forgotten typemap
+ - Added forgotten typemap
Version 0.34 -- 17 June 1998 <skimo@kotnet.org> Sven Verdoolaege
-
- o No longer force sfio less compile
- o Update os_unix.c from fcgi2.0b2.1
- o Small documentation changes
+
+ - No longer force sfio less compile
+ - Update os_unix.c from fcgi2.0b2.1
+ - Small documentation changes
Version 0.33 -- 16 June 1998 <skimo@kotnet.org> Sven Verdoolaege
- o More support for tied handles
+ - More support for tied handles
Version 0.32 -- 16 June 1998 <skimo@kotnet.org> Sven Verdoolaege
- o Preliminary support for tied handles (doesn't require sfio)
- o Force sfio less compile
- o Changed protoype of set_exit_status
+ - Preliminary support for tied handles (doesn't require sfio)
+ - Force sfio less compile
+ - Changed protoype of set_exit_status
Version 0.31 -- 13 July 1997 <skimo@breughel.ufsia.ac.be> Sven Verdoolaege
- o Applied solaris accept patch from
- Chip Salzenberg <chip@rio.atlantic.net>
- o Preliminary support glibc's cookie mechanism
+ - Applied solaris accept patch from
+ Chip Salzenberg <chip@rio.atlantic.net>
+ - Preliminary support glibc's cookie mechanism
Version 0.30 -- 24 June 1997 <skimo@dns.ufsia.ac.be> Sven Verdoolaege
- o Added forgotten library files
+ - Added forgotten library files
Version 0.29 -- 10 June 1997 <skimo@dns.ufsia.ac.be> Sven Verdoolaege
- o Updated library files from fastcgi 2.02b
- o Use installed library/include file if found
+ - Updated library files from fastcgi 2.02b
+ - Use installed library/include file if found
Version 0.28 -- 24 February 1997 <skimo@dns.ufsia.ac.be> Sven Verdoolaege
- o Intialization of %ENV did not change environ. Fixed.
- Problem reported by Jan Drehmer <Jan.X.Drehmer@telia.se>
+ - Intialization of %ENV did not change environ. Fixed.
+ Problem reported by Jan Drehmer <Jan.X.Drehmer@telia.se>
Version 0.26 -- 19 February 1997 <skimo@dns.ufsia.ac.be> Sven Verdoolaege
- o Flush output when $| is set to eliminate a problem reported
- by echo@echo.cica.fr
+ - Flush output when $| is set to eliminate a problem reported
+ by echo@echo.cica.fr
Version 0.25 -- 13 October 1996 <skimo@dns.ufsia.ac.be> Sven Verdoolaege
- o Eliminate some warnings
- o Check whether perl is compiled with sfio support
+ - Eliminate some warnings
+ - Check whether perl is compiled with sfio support
Version 0.25 -- 25 September 1996 <skimo@dns.ufsia.ac.be> Sven Verdoolaege
- o First public release
- o Additional bugfixes
+ - First public release
+ - Additional bugfixes
Version 0.21 -- 20 September 1996 <skimo@dns.ufsia.ac.be> Sven Verdoolaege
- o Bugfix
+ - Bugfix
Version 0.2 -- 19 September 1996 <skimo@dns.ufsia.ac.be> Sven Verdoolaege
- o First Version based on sfio
+ - First Version based on sfio
Version 0.1 -- 12 June 1996
- o Original version from Open Market's FastCGI Developer's Kit
+ - Original version from Open Market's FastCGI Developer's Kit
projects / catagits/fcgi2.git / blobdiff