iodine 0.7.44 → 0.7.45

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a212aecebe63d7033c5c1e985d4e2f90588dc604c8aa6a25965735aeef79ec72
-  data.tar.gz: 299ef31e1f2209cb11c0c49f2d4851d8c779a2744ebc08f42fb430ffaf3d76cc
+  metadata.gz: 33f22236ecbf1c2166c056476bbefb6ab80b709cdb6cc16c0ec144926cf3fdc0
+  data.tar.gz: 6b0c70cc71431eb3611d34af45c80f679c0177141843a5e03b1cdb6b242d4f19
 SHA512:
-  metadata.gz: a6f12dfcff4eced37d98f627be0cb6a9662c8bac98365a5080ea0c47f9c3ae3919e315836ec33989be098c52c826707e0f22fa746f95a3847b354d6d0efa4f79
-  data.tar.gz: 1b5541f8c952f6b61feeb183cc6d7587ca200b4295afec9c9e540c69699f065c03724b46b464c929cc0aa800b594a0cdb83ec7b9a1b57c7501ba5633cb270124
+  metadata.gz: 3506324c77f3de50b9dda515922c3468bbb49c63cd58831d2f7711e02b28209ba7fb5d15e076e860092be4d783cf595fd69b2483bf7ee59b873040005468161f
+  data.tar.gz: 7c4b0ffb76c749c11f18d66faaad5494e6ab7c675b0d887721de3c7494a7b764886bb8b7b4f5fc369e606e0f3b2e30172818dae27faa4c3cfffa73d094012cf9

data/.github/ISSUE_TEMPLATE/bug_report.md

@@ -21,7 +21,7 @@ A clear and concise description of what the bug is.
 ### Rack App to Reproduce
 
 ```ruby
-APP = {|env| [200, {}, "Hello World"] }
+APP = proc {|env| [200, {}, ["Hello World"]] }
 run APP
 ```
 

data/.gitignore

@@ -10,6 +10,7 @@
 /old_stuff/
 *.bundle
 *.so
+*.gem
 
 .ruby-version
 .clang_complete

data/CHANGELOG.md

@@ -6,6 +6,12 @@ Please notice that this change log contains changes for upcoming releases as wel
 
 ## Changes:
 
+#### Change log v.0.7.45 (2021-11-26)
+
+**Security**: Fixes a number of issues with the HTTP parser that could have been leveraged in potential exploit attempts such as request smuggling. Credit to @dcepelik (David Čepelík).
+
+**Compatibility**: This release adds experimental Windows support (I don't have Windows, nor Intel, I cannot test this). Credit for a lot of work by @janbiedermann (Jan Biedermann).
+
 #### Change log v.0.7.44 (2021-02-28)
 
 **Fix**: Fixes issue #103 where an empty String response would result in the word "null" being returned (no String object was created, which routed the NULL object to facil.io's JSON interpreter). Credit to @waghanza (Marwan Rabbâa) for exposing the issue.

data/ext/iodine/extconf.rb

@@ -36,7 +36,10 @@ int main(void) {
 EOS
 
   # Test for manual selection and then TRY_COMPILE with each polling engine
-  if ENV['FIO_POLL']
+  if Gem.win_platform?
+    puts "skipping polling tests, using WSAPOLL on Windows"
+    $defs << "-DFIO_ENGINE_WSAPOLL"
+  elsif ENV['FIO_POLL']
     puts "skipping polling tests, enforcing manual selection of: poll"
     $defs << "-DFIO_ENGINE_POLL"
   elsif ENV['FIO_FORCE_POLL']
@@ -64,9 +67,10 @@ end
 
 iodine_test_polling_support()
 
-# Test for OpenSSL version equal to 1.0.0 or greater.
-unless ENV['NO_SSL'] || ENV['NO_TLS'] || ENV["DISABLE_SSL"]
-  OPENSSL_TEST_CODE = <<EOS
+unless Gem.win_platform?
+  # Test for OpenSSL version equal to 1.0.0 or greater.
+  unless ENV['NO_SSL'] || ENV['NO_TLS'] || ENV["DISABLE_SSL"]
+    OPENSSL_TEST_CODE = <<EOS
 \#include <openssl/bio.h>
 \#include <openssl/err.h>
 \#include <openssl/ssl.h>
@@ -84,18 +88,19 @@ int main(void) {
 }
 EOS
 
-  dir_config("openssl")
-  begin
-    require 'openssl'
-  rescue LoadError
-  else
-    if have_library('crypto') && have_library('ssl')
-      puts "detected OpenSSL library, testing for version and required functions."
-      if try_compile(OPENSSL_TEST_CODE)
-        $defs << "-DHAVE_OPENSSL"
-        puts "confirmed OpenSSL to be version 1.1.0 or above (#{OpenSSL::OPENSSL_LIBRARY_VERSION})...\n* compiling with HAVE_OPENSSL."
-      else
-        puts "FAILED: OpenSSL version not supported (#{OpenSSL::OPENSSL_LIBRARY_VERSION} is too old)."
+    dir_config("openssl")
+    begin
+      require 'openssl'
+    rescue LoadError
+    else
+      if have_library('crypto') && have_library('ssl')
+        puts "detected OpenSSL library, testing for version and required functions."
+        if try_compile(OPENSSL_TEST_CODE)
+          $defs << "-DHAVE_OPENSSL"
+          puts "confirmed OpenSSL to be version 1.1.0 or above (#{OpenSSL::OPENSSL_LIBRARY_VERSION})...\n* compiling with HAVE_OPENSSL."
+        else
+          puts "FAILED: OpenSSL version not supported (#{OpenSSL::OPENSSL_LIBRARY_VERSION} is too old)."
+        end
       end
     end
   end