diff options
author | Stefan Bühler <stbuehler@web.de> | 2012-02-24 18:34:20 +0000 |
---|---|---|
committer | Stefan Bühler <stbuehler@web.de> | 2012-02-24 18:34:20 +0000 |
commit | f4c3a99eea1edbcb6b6d084b30f568db64419620 (patch) | |
tree | 4fa5c2666980b0b9de904ac0f25f0e399a5f2e7d /NEWS | |
parent | 33f1ec6d28d02878f824469ac46a4f5a05db8c65 (diff) | |
download | lighttpd-git-f4c3a99eea1edbcb6b6d084b30f568db64419620.tar.gz |
Disable mmap by default (fixes #2391)
* if a user truncates a file we are mmapping, reading the truncated
area leads to SIGBUS
* mod_cgi and mod_webdav still use mmap for reading the tmp files
created for large request bodies.
as no other user should have write access for those this isn't
a (security) problem.
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2827 152afb58-edef-0310-8abb-c4023f1b3aa9
Diffstat (limited to 'NEWS')
-rw-r--r-- | NEWS | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -7,6 +7,7 @@ NEWS * [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI * Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373) * [mod_compress] fix handling if etags are disabled but cache-dir is set - may lead to double response + * disable mmap by default (fixes #2391) - 1.4.30 - 2011-12-18 * Always use our 'own' md5 implementation, fixes linking issues on MacOS (fixes #2331) |