immunio 1.2.1 → 2.0.2

data/lib/immunio/plugins/action_view/template_rendering.rb

@@ -0,0 +1,45 @@
+module Immunio
+  # Hook for the `ActionView::TemplateRenderer`. These are called for root
+  # templates.
+  module TemplateRendererHooks
+    extend ActiveSupport::Concern
+
+    included do
+      Immunio::Utils.alias_method_chain self, :render_template, :immunio
+    end
+
+    def render_template_with_immunio(template, *args)
+      Request.time "plugin", "#{Module.nesting[0]}::#{__method__}" do
+        renderer = Template.new(template)
+
+        renderer.render @view do
+          Request.pause "plugin", "#{Module.nesting[0]}::#{__method__}" do
+            render_template_without_immunio(template, *args)
+          end
+        end
+      end
+    end
+  end
+
+  # Hook for the `ActionView::Template`. These are called for non-root
+  # templates.
+  module TemplateHooks
+    extend ActiveSupport::Concern
+
+    included do
+      Immunio::Utils.alias_method_chain self, :render, :immunio
+    end
+
+    def render_with_immunio(context, *args, &block)
+      Request.time "plugin", "#{Module.nesting[0]}::#{__method__}" do
+        renderer = Template.new(self)
+
+        renderer.render context do
+          Request.pause "plugin", "#{Module.nesting[0]}::#{__method__}" do
+            render_without_immunio(context, *args, &block)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/immunio/plugins/http_tracker.rb

@@ -1,3 +1,5 @@
+require 'digest/sha1'
+
 require_relative "../blocked_app"
 require_relative "../errors"
 

data/lib/immunio/plugins/io.rb

@@ -1,5 +1,11 @@
 require_relative '../context'
 
+begin
+  require 'open4'
+rescue LoadError # rubocop:disable Lint/HandleExceptions
+  # Ignore
+end
+
 module Immunio
   module IOHooks
 
@@ -64,6 +70,18 @@ module Immunio
   end
   Immunio.logger.debug { "IO: IOClassHooks created: #{IOClassHooks}" }
 
+  module ProcessClassHooks
+    IOHooks.inject self, "Process.", %w( spawn )
+  end
+  Immunio.logger.debug { "Shell: ProcessClassHooks created: #{ProcessClassHooks}" }
+
+  if defined? Open4
+    module Open4ClassHooks
+      IOHooks.inject self, "Open4.", %w( popen4 open4 )
+    end
+    Immunio.logger.debug { "Shell: Open4ClassHooks created: #{Open4ClassHooks}" }
+  end
+
   module KernelModuleHooks
     # exec() is not included currently as it replaces the running process
     # and would never get primed correctly
@@ -107,6 +125,22 @@ Immunio::Plugin.load 'IO', feature: 'file_io', hooks: %w( file_io ) do |plugin|
   plugin.loaded! RUBY_VERSION
 end
 
+#Add Process hooks if enabled
+Immunio::Plugin.load 'Process', feature: 'shell_command', hooks: %w( shell_io ) do |plugin|
+
+  Process.extend Immunio::ProcessClassHooks
+  plugin.loaded! RUBY_VERSION
+end
+
+if defined? Open4
+  #Add Open4 hooks if enabled
+  Immunio::Plugin.load 'Open4', feature: 'shell_command', hooks: %w( shell_io ) do |plugin|
+
+    Open4.extend Immunio::Open4ClassHooks
+    plugin.loaded! Open4::VERSION
+  end
+end
+
 # Add Kernel hooks if enabled
 Immunio::Plugin.load 'Kernel (shell_command)',
                      feature: 'shell_command',

data/lib/immunio/version.rb

@@ -1,5 +1,5 @@
 module Immunio
   AGENT_TYPE = "agent-ruby"
-  VERSION = "1.2.1"
+  VERSION = "2.0.2"
   VM_VERSION = "2.2.0"
 end

data/lua-hooks/Makefile

@@ -1,11 +1,15 @@
 MODULES := lib ext
 
+include options.mk
+
 # Source of extensions compiled w/ Lua's source.
 # Only include .c files that can't be directly included in ext/all.c.
 
 # All these source variables are filled in by the module.mk files
 SRC :=
 
+EXT_SRC :=
+
 CXX_SRC :=
 
 SPECIAL_SRC :=
@@ -26,6 +30,9 @@ include ext/module.mk
 OBJ := \
 	$(patsubst %.c,%.o,$(filter %.c,$(SRC))) \
 
+EXT_OBJ := \
+	$(patsubst %.c,%.o,$(filter %.c,$(EXT_SRC)))
+
 SPECIAL_OBJ := \
 	$(patsubst %.c,%.o,$(filter %.c,$(SPECIAL_SRC))) \
 
@@ -43,8 +50,6 @@ CLI = ./lua
 SO_OUT = libimmunio.so
 A_OUT = libimmunio.a
 
-include options.mk
-
 INIT_HOOK = hooks/__init__.lua
 INIT_NOPROTECT_HOOK = hooks/__init__noprotect.lua
 HOOK_SRCS := $(wildcard hooks/*.lua) hooks/__init__.lua hooks/__init__noprotect.lua
@@ -55,13 +60,19 @@ HOOKS_SRCS_TARBALL = hooks_srcs.tgz
 LUAJIT_OUT = libluajit.a
 LUAJIT_OBJ = ext/luajit/src/${LUAJIT_OUT}
 
+GSP_OUT = libgspcore.a
+GSP_OBJ = ext/lua-sqlparser/general_sql_parser/lib/${GSP_OUT}
+GSP_COLLECTION_OUT = libgspcollection.a
+GSP_COLLECTION_OBJ = ext/lua-sqlparser/general_sql_parser/lib/${GSP_COLLECTION_OUT}
+
+
 # Build lua, run tests, and create hooks archive
 all: ${CLI} ${INIT_HOOK} ${INIT_NOPROTECT_HOOK} ${HOOKS_TARBALL} ${HOOKS_SRCS_TARBALL}
 
-${SO_OUT}: ${OBJ} ${SPECIAL_OBJ} ${LUAJIT_OBJ}
+${SO_OUT}: ${OBJ} ${EXT_OBJ} ${SPECIAL_OBJ} ${LUAJIT_OBJ}
 	${CC} -shared ${CFLAGS} ${LIBS} -o $@ -lc $^
 
-${A_OUT}: ${OBJ} ${SPECIAL_OBJ}
+${A_OUT}: ${OBJ} ${EXT_OBJ} ${SPECIAL_OBJ}
 	${AR} -rcus $@ $^
 
 ${LUAJIT_OUT}: ${LUAJIT_OBJ}
@@ -74,13 +85,26 @@ else
 	cd ext/luajit/src && make XCFLAGS="${LUAJIT_XCFLAGS}" ${LUAJIT_OUT}
 endif
 
+${GSP_OUT}: ${GSP_OBJ}
+	cp $^ $@
+
+${GSP_OBJ}:
+	cd ext/lua-sqlparser/general_sql_parser && make
+
+${GSP_COLLECTION_OUT}: ${GSP_COLLECTION_OBJ}
+	cp $^ $@
+
+${GSP_COLLECTION_OBJ}:
+	cd ext/lua-sqlparser/general_sql_parser && make
+
 # Build lua executable for testing and compilation
 # Seperate compilation as we need the LUA_UNSAFE_MODE flag set...
 ${CLI}: CFLAGS += ${UNSAFE_FLAG}
 ${CLI}: CXXFLAGS += ${UNSAFE_FLAG}
-${CLI}: ${CLI_SRC} ${SRC} ${SPECIAL_OBJ} ${CXX_OBJ} ${LUAJIT_OBJ}
+${CLI}: ${CLI_SRC} ${SRC} ${EXT_OBJ} ${SPECIAL_OBJ} ${CXX_OBJ} ${LUAJIT_OBJ} ${GSP_OBJ} ${GSP_COLLECTION_OBJ}
 	${CC} ${CFLAGS} ${LDFLAGS} -o $@ $^ ${LIBS}
 
+
 # Concatenate init hooks into one __init__.lua
 ${INIT_NOPROTECT_HOOK}: ${LUA_BASE_SRC} ${CLI}
 	rm -f hooks/__init__noprotect.lua
@@ -100,11 +124,13 @@ ${HOOKS_TARBALL}: ${MIN_SRCS}
 	tar -czf $@ -C build .
 
 ${HOOKS_SRCS_TARBALL}: ${HOOK_SRCS}
-	tar -czf $@ -C hooks . --exclude="init"
+	tar -czf $@ --exclude "init" -C hooks .
 
-${SPECIAL_OBJ}: CFLAGS += ${OPTIMIZE_NONE}
+${SPECIAL_OBJ}: CFLAGS += ${OPTIMIZE_NONE} -Wall
 
-${CLI_OBJ} ${OBJ} ${CXX_OBJ} ${LUAJIT_OBJ}: CFLAGS += ${OPTIMIZE_FULL}
+# XXX cast warning disabled for antiSqlInjection.c code written for 32 bit that's using void * as a wildcard type.
+${EXT_OBJ}: CFLAGS += -Wno-pointer-to-int-cast -Wno-int-to-pointer-cast
+${CLI_OBJ} ${OBJ} ${CXX_OBJ} ${LUAJIT_OBJ}: CFLAGS += ${OPTIMIZE_FULL} -Wall
 
 %.o: %.c
 	${CC} ${CFLAGS} -c ${INCS} -o $@ $<
@@ -118,8 +144,9 @@ cleanhooks:
 	rm -f build/*.lua
 
 clean: cleanhooks
-	rm -f ${CLI} ${CLI_OBJ} ${OBJ} ${CXX_OBJ} ${SPECIAL_OBJ} ${SO_OUT} ${A_OUT} ${LUAJIT_OUT}
+	rm -f ${CLI} ${CLI_OBJ} ${OBJ} ${CXX_OBJ} ${EXT_OBJ} ${SPECIAL_OBJ} ${SO_OUT} ${A_OUT} ${LUAJIT_OUT} ${GSP_OBJ}
 	cd ext/luajit && make clean
+	cd ext/lua-sqlparser/general_sql_parser && make clean
 	rm -f test_failed
 	rm -rf build
 	find . -name \*.o -delete

data/lua-hooks/ext/luajit/COPYRIGHT

@@ -1,7 +1,7 @@
 ===============================================================================
 LuaJIT -- a Just-In-Time Compiler for Lua. http://luajit.org/
 
-Copyright (C) 2005-2016 Mike Pall. All rights reserved.
+Copyright (C) 2005-2017 Mike Pall. All rights reserved.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/lua-hooks/ext/luajit/Makefile

@@ -10,13 +10,13 @@
 # For MSVC, please follow the instructions given in src/msvcbuild.bat.
 # For MinGW and Cygwin, cd to src and run make with the Makefile there.
 #
-# Copyright (C) 2005-2016 Mike Pall. See Copyright Notice in luajit.h
+# Copyright (C) 2005-2017 Mike Pall. See Copyright Notice in luajit.h
 ##############################################################################
 
 MAJVER=  2
 MINVER=  1
 RELVER=  0
-PREREL=  -beta2
+PREREL=  -beta3
 VERSION= $(MAJVER).$(MINVER).$(RELVER)$(PREREL)
 ABIVER=  5.1
 
@@ -47,17 +47,18 @@ INSTALL_PKGCONFIG= $(INSTALL_LIB)/pkgconfig
 INSTALL_TNAME= luajit-$(VERSION)
 INSTALL_TSYMNAME= luajit
 INSTALL_ANAME= libluajit-$(ABIVER).a
-INSTALL_SONAME= libluajit-$(ABIVER).so.$(MAJVER).$(MINVER).$(RELVER)
-INSTALL_SOSHORT= libluajit-$(ABIVER).so
-INSTALL_DYLIBNAME= libluajit-$(ABIVER).$(MAJVER).$(MINVER).$(RELVER).dylib
+INSTALL_SOSHORT1= libluajit-$(ABIVER).so
+INSTALL_SOSHORT2= libluajit-$(ABIVER).so.$(MAJVER)
+INSTALL_SONAME= $(INSTALL_SOSHORT2).$(MINVER).$(RELVER)
 INSTALL_DYLIBSHORT1= libluajit-$(ABIVER).dylib
 INSTALL_DYLIBSHORT2= libluajit-$(ABIVER).$(MAJVER).dylib
+INSTALL_DYLIBNAME= libluajit-$(ABIVER).$(MAJVER).$(MINVER).$(RELVER).dylib
 INSTALL_PCNAME= luajit.pc
 
 INSTALL_STATIC= $(INSTALL_LIB)/$(INSTALL_ANAME)
 INSTALL_DYN= $(INSTALL_LIB)/$(INSTALL_SONAME)
-INSTALL_SHORT1= $(INSTALL_LIB)/$(INSTALL_SOSHORT)
-INSTALL_SHORT2= $(INSTALL_LIB)/$(INSTALL_SOSHORT)
+INSTALL_SHORT1= $(INSTALL_LIB)/$(INSTALL_SOSHORT1)
+INSTALL_SHORT2= $(INSTALL_LIB)/$(INSTALL_SOSHORT2)
 INSTALL_T= $(INSTALL_BIN)/$(INSTALL_TNAME)
 INSTALL_TSYM= $(INSTALL_BIN)/$(INSTALL_TSYMNAME)
 INSTALL_PC= $(INSTALL_PKGCONFIG)/$(INSTALL_PCNAME)
@@ -85,16 +86,22 @@ FILE_MAN= luajit.1
 FILE_PC= luajit.pc
 FILES_INC= lua.h lualib.h lauxlib.h luaconf.h lua.hpp luajit.h
 FILES_JITLIB= bc.lua bcsave.lua dump.lua p.lua v.lua zone.lua \
-	      dis_x86.lua dis_x64.lua dis_arm.lua dis_ppc.lua \
-	      dis_mips.lua dis_mipsel.lua vmdef.lua
+	      dis_x86.lua dis_x64.lua dis_arm.lua dis_arm64.lua \
+	      dis_arm64be.lua dis_ppc.lua dis_mips.lua dis_mipsel.lua \
+	      dis_mips64.lua dis_mips64el.lua vmdef.lua
 
 ifeq (,$(findstring Windows,$(OS)))
-  ifeq (Darwin,$(shell uname -s))
-    INSTALL_SONAME= $(INSTALL_DYLIBNAME)
-    INSTALL_SHORT1= $(INSTALL_LIB)/$(INSTALL_DYLIBSHORT1)
-    INSTALL_SHORT2= $(INSTALL_LIB)/$(INSTALL_DYLIBSHORT2)
-    LDCONFIG= :
-  endif
+  HOST_SYS:= $(shell uname -s)
+else
+  HOST_SYS= Windows
+endif
+TARGET_SYS?= $(HOST_SYS)
+
+ifeq (Darwin,$(TARGET_SYS))
+  INSTALL_SONAME= $(INSTALL_DYLIBNAME)
+  INSTALL_SOSHORT1= $(INSTALL_DYLIBSHORT1)
+  INSTALL_SOSHORT2= $(INSTALL_DYLIBSHORT2)
+  LDCONFIG= :
 endif
 
 ##############################################################################

data/lua-hooks/ext/luajit/README

@@ -1,11 +1,11 @@
-README for LuaJIT 2.1.0-beta2
+README for LuaJIT 2.1.0-beta3
 -----------------------------
 
 LuaJIT is a Just-In-Time (JIT) compiler for the Lua programming language.
 
 Project Homepage: http://luajit.org/
 
-LuaJIT is Copyright (C) 2005-2016 Mike Pall.
+LuaJIT is Copyright (C) 2005-2017 Mike Pall.
 LuaJIT is free software, released under the MIT license.
 See full Copyright Notice in the COPYRIGHT file or in luajit.h.
 

data/lua-hooks/ext/luajit/doc/bluequad-print.css

@@ -1,4 +1,4 @@
-/* Copyright (C) 2004-2016 Mike Pall.
+/* Copyright (C) 2004-2017 Mike Pall.
  *
  * You are welcome to use the general ideas of this design for your own sites.
  * But please do not steal the stylesheet, the layout or the color scheme.

data/lua-hooks/ext/luajit/doc/bluequad.css

@@ -1,4 +1,4 @@
-/* Copyright (C) 2004-2016 Mike Pall.
+/* Copyright (C) 2004-2017 Mike Pall.
  *
  * You are welcome to use the general ideas of this design for your own sites.
  * But please do not steal the stylesheet, the layout or the color scheme.

data/lua-hooks/ext/luajit/doc/changes.html

@@ -4,7 +4,7 @@
 <title>LuaJIT Change History</title>
 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
 <meta name="Author" content="Mike Pall">
-<meta name="Copyright" content="Copyright (C) 2005-2016, Mike Pall">
+<meta name="Copyright" content="Copyright (C) 2005-2017, Mike Pall">
 <meta name="Language" content="en">
 <link rel="stylesheet" type="text/css" href="bluequad.css" media="screen">
 <link rel="stylesheet" type="text/css" href="bluequad-print.css" media="print">
@@ -65,7 +65,7 @@ div.major { max-width: 600px; padding: 1em; margin: 1em 0 1em 0; }
 <div id="main">
 <p>
 This is a list of changes between the released versions of LuaJIT.<br>
-The current <span style="color: #0000c0;">stable version</span> is <strong>LuaJIT&nbsp;2.0.4</strong>.<br>
+The current <span style="color: #0000c0;">stable version</span> is <strong>LuaJIT&nbsp;2.0.5</strong>.<br>
 </p>
 <p>
 Please check the
@@ -74,6 +74,30 @@ to see whether newer versions are available.
 </p>
 
 <div class="major" style="background: #d0d0ff;">
+<h2 id="LuaJIT-2.1.0-beta3">LuaJIT 2.1.0-beta3 &mdash; 2017-05-01</h2>
+<ul>
+<li>Rewrite memory block allocator.</li>
+<li>Add various extension from Lua 5.2/5.3.</li>
+<li>Remove old Lua 5.0 compatibility defines.</li>
+<li>Set arg table before evaluating <tt>LUA_INIT</tt> and <tt>-e</tt> chunks.</li>
+<li>Fix FOLD rules for <tt>math.abs()</tt> and FP negation.</li>
+<li>Fix soft-float <tt>math.abs()</tt> and negation.</li>
+<li>Fix formatting of some small denormals at low precision.</li>
+<li>LJ_GC64: Add JIT compiler support.</li>
+<li>x64/LJ_GC64: Add JIT compiler backend.</li>
+<li>x86/x64: Generate BMI2 shifts and rotates, if available.</li>
+<li>Windows/x86: Add full exception interoperability.</li>
+<li>ARM64: Add big-endian support.</li>
+<li>ARM64: Add JIT compiler backend.</li>
+<li>MIPS: Fix <tt>TSETR</tt> barrier.</li>
+<li>MIPS: Support MIPS16 interlinking.</li>
+<li>MIPS soft-float: Fix code generation for <tt>HREF</tt>.</li>
+<li>MIPS64: Add MIPS64 hard-float JIT compiler backend.</li>
+<li>MIPS64: Add MIPS64 hard-float/soft-float support to interpreter.</li>
+<li>FFI: Compile bitfield loads/stores.</li>
+<li>Various fixes common with the 2.0 branch.</li>
+</ul>
+
 <h2 id="LuaJIT-2.1.0-beta2">LuaJIT 2.1.0-beta2 &mdash; 2016-03-03</h2>
 <ul>
 <li>Enable trace stitching.</li>
@@ -140,6 +164,48 @@ Please take a look at the commit history for more details.
 </div>
 
 <div class="major" style="background: #ffffd0;">
+<h2 id="LuaJIT-2.0.5">LuaJIT 2.0.5 &mdash; 2017-05-01</h2>
+<ul>
+<li>Add workaround for MSVC 2015 stdio changes.</li>
+<li>Limit mcode alloc probing, depending on the available pool size.</li>
+<li>Fix overly restrictive range calculation in mcode allocation.</li>
+<li>Fix out-of-scope goto handling in parser.</li>
+<li>Remove internal <tt>__mode = "K"</tt> and replace with safe check.</li>
+<li>Add "proto" field to <tt>jit.util.funcinfo()</tt>.</li>
+<li>Fix GC step size calculation.</li>
+<li>Initialize <tt>uv-&gt;immutable</tt> for upvalues of loaded chunks.</li>
+<li>Fix for cdata vs. non-cdata arithmetics/comparisons.</li>
+<li>Drop leftover regs in 'for' iterator assignment, too.</li>
+<li>Fix PHI remarking in SINK pass.</li>
+<li>Don't try to record outermost <tt>pcall()</tt> return to lower frame.</li>
+<li>Add guard for obscure aliasing between open upvalues and SSA slots.</li>
+<li>Remove assumption that <tt>lj_math_random_step()</tt> doesn't clobber FPRs.</li>
+<li>Fix handling of non-numeric strings in arithmetic coercions.</li>
+<li>Fix recording of <tt>select(n, ...)</tt> with off-trace varargs</li>
+<li>Fix install for cross-builds.</li>
+<li>Don't allocate unused 2nd result register in JIT compiler backend.</li>
+<li>Drop marks from replayed instructions when sinking.</li>
+<li>Fix unsinking check.</li>
+<li>Properly handle OOM in <tt>trace_save()</tt>.</li>
+<li>Limit number of arguments given to <tt>io.lines()</tt> and <tt>fp:lines()</tt>.</li>
+<li>Fix narrowing of <tt>TOBIT</tt>.</li>
+<li>OSX: Fix build with recent XCode.</li>
+<li>x86/x64: Don't spill an explicit <tt>REF_BASE</tt> in the IR.</li>
+<li>x86/x64: Fix instruction length decoder.</li>
+<li>x86/x64: Search for exit jumps with instruction length decoder.</li>
+<li>ARM: Fix <tt>BLX</tt> encoding for Thumb interworking calls.</li>
+<li>MIPS: Don't use <tt>RID_GP</tt> as a scratch register.</li>
+<li>MIPS: Fix emitted code for U32 to float conversion.</li>
+<li>MIPS: Backport workaround for compact unwind tables.</li>
+<li>MIPS: Fix cross-endian jit.bcsave.</li>
+<li>MIPS: Fix <tt>BC_ISNEXT</tt> fallback path.</li>
+<li>MIPS: Fix use of ffgccheck delay slots in interpreter.</li>
+<li>FFI: Fix FOLD rules for <tt>int64_t</tt> comparisons.</li>
+<li>FFI: Fix SPLIT pass for <tt>CONV i64.u64</tt>.</li>
+<li>FFI: Fix <tt>ipairs()</tt> recording.</li>
+<li>FFI: Don't propagate qualifiers into subtypes of complex.</li>
+</ul>
+
 <h2 id="LuaJIT-2.0.4">LuaJIT 2.0.4 &mdash; 2015-05-14</h2>
 <ul>
 <li>Fix stack check in narrowing optimization.</li>
@@ -807,7 +873,7 @@ no point in listing differences over earlier versions.</li>
 </div>
 <div id="foot">
 <hr class="hide">
-Copyright &copy; 2005-2016 Mike Pall
+Copyright &copy; 2005-2017 Mike Pall
 <span class="noprint">
 &middot;
 <a href="contact.html">Contact</a>

data/lua-hooks/ext/luajit/doc/contact.html

@@ -4,7 +4,7 @@
 <title>Contact</title>
 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
 <meta name="Author" content="Mike Pall">
-<meta name="Copyright" content="Copyright (C) 2005-2016, Mike Pall">
+<meta name="Copyright" content="Copyright (C) 2005-2017, Mike Pall">
 <meta name="Language" content="en">
 <link rel="stylesheet" type="text/css" href="bluequad.css" media="screen">
 <link rel="stylesheet" type="text/css" href="bluequad-print.css" media="print">
@@ -61,8 +61,15 @@
 </div>
 <div id="main">
 <p>
+If you want to report bugs, propose fixes or suggest enhancements,
+please use the
+<a href="https://github.com/LuaJIT/LuaJIT/issues">GitHub issue tracker</a>.
+</p>
+<p>
 Please send general questions to the
 <a href="http://luajit.org/list.html"><span class="ext">&raquo;</span>&nbsp;LuaJIT mailing list</a>.
+</p>
+<p>
 You can also send any questions you have directly to me:
 </p>
 
@@ -86,7 +93,7 @@ xD("fyZKB8xv\"FJytmz8.KAB0u52D")
 <h2>Copyright</h2>
 <p>
 All documentation is
-Copyright &copy; 2005-2016 Mike Pall.
+Copyright &copy; 2005-2017 Mike Pall.
 </p>
 
 
@@ -94,7 +101,7 @@ Copyright &copy; 2005-2016 Mike Pall.
 </div>
 <div id="foot">
 <hr class="hide">
-Copyright &copy; 2005-2016 Mike Pall
+Copyright &copy; 2005-2017 Mike Pall
 <span class="noprint">
 &middot;
 <a href="contact.html">Contact</a>