passenger 6.1.7 → 6.2.0

data/build/support/vendor/cxx_hinted_parser/lib/cxx_hinted_parser/parser.rb

@@ -25,6 +25,7 @@
 require 'strscan'
 
 module CxxHintedParser
+
   class Parser
     STRUCT_BEGIN_HINT = /- ?begin hinted parseable (struct|class) ?-/
     STRUCT_END_HINT = /- ?end hinted parseable (struct|class) ?-/
@@ -236,4 +237,5 @@ module CxxHintedParser
       @errors << Error.new(line, column, message)
     end
   end
+
 end

data/build/support/vendor/cxxcodebuilder/lib/cxxcodebuilder/builder.rb

@@ -25,6 +25,7 @@
 require File.expand_path(File.dirname(__FILE__) + '/initializer_builder')
 
 module CxxCodeBuilder
+
   # Builds C/C++ code. Use it as follows:
   #
   #  1. Create a CxxCodeBuilder::Builder object.
@@ -627,4 +628,5 @@ module CxxCodeBuilder
       str
     end
   end
+
 end

data/build/support/vendor/cxxcodebuilder/lib/cxxcodebuilder/initializer_builder.rb

@@ -23,6 +23,7 @@
 #  THE SOFTWARE.
 
 module CxxCodeBuilder
+
   # Builds array and struct initialization code.
   class InitializerBuilder
     def initialize(builder, start_character, end_character)
@@ -163,4 +164,5 @@ module CxxCodeBuilder
       @builder.add_code_without_newline(@end_character)
     end
   end
+
 end

data/dev/index_cxx_dependencies.rb

@@ -221,6 +221,6 @@ def generate_full_map(basic_map)
 end
 
 result = generate_full_map(generate_basic_map)
-puts "# Autogenerated by dev/index_cxx_dependencies.rb"
+puts "# Autogenerated by dev/index_cxx_dependencies.rb (update with `rake dependency_map`)"
 puts "CXX_DEPENDENCY_MAP ="
 PP.pp(result, STDOUT, 1)

data/dev/runner

@@ -29,5 +29,7 @@ while true
 end
 
 module PhusionPassenger
+
   p eval(ARGV.join(" "))
+
 end

data/doc/DeveloperQuickstart.md

@@ -1,6 +1,6 @@
 # Phusion Passenger Developer QuickStart
 
-<a href="https://vimeo.com/phusionnl/review/97427161/15cb4cc59a"><img src="http://blog.phusion.nl/wp-content/uploads/2014/06/passenger_developer_quickstart.png"></a>
+<a href="https://youtu.be/CSpk9mfKdbc"><img src="http://blog.phusion.nl/wp-content/uploads/2014/06/passenger_developer_quickstart.png"></a>
 
 _Watch the Developer QuickStart screencast_
 

data/src/README.md

@@ -4,4 +4,4 @@ If you aren't familiar with the Passenger codebase then we encourage you to read
 
  * [Contributors Guide](https://github.com/phusion/passenger/blob/master/CONTRIBUTING.md)
  * [Design & Architecture](https://www.phusionpassenger.com/documentation/Design%20and%20Architecture.html)
- * [Code walkthrough](http://vimeo.com/phusionnl/review/98027409/03ba678684)
+ * [Code walkthrough](https://youtu.be/exugD98pqQc)

data/src/agent/Core/Config.h

@@ -149,7 +149,7 @@ using namespace std;
  *   security_update_checker_interval                                unsigned integer   -          default(86400)
  *   security_update_checker_proxy_url                               string             -          -
  *   security_update_checker_url                                     string             -          default("https://securitycheck.phusionpassenger.com/v1/check.json")
- *   server_software                                                 string             -          default("Phusion_Passenger/6.1.7")
+ *   server_software                                                 string             -          default("Phusion_Passenger/6.2.0")
  *   show_version_in_header                                          boolean            -          default(true)
  *   single_app_mode_app_root                                        string             -          default,read_only
  *   single_app_mode_app_start_command                               string             -          read_only

data/src/agent/Core/Controller/Config.h

@@ -118,7 +118,7 @@ parseControllerBenchmarkMode(const StaticString &mode) {
  *   old_routing                                         boolean            -          default(false),read_only
  *   request_freelist_limit                              unsigned integer   -          default(1024)
  *   response_buffer_high_watermark                      unsigned integer   -          default(134217728)
- *   server_software                                     string             -          default("Phusion_Passenger/6.1.7")
+ *   server_software                                     string             -          default("Phusion_Passenger/6.2.0")
  *   show_version_in_header                              boolean            -          default(true)
  *   start_reading_after_accept                          boolean            -          default(true)
  *   stat_throttle_rate                                  unsigned integer   -          default(10)

data/src/agent/Shared/ApiServerUtils.h

@@ -167,14 +167,17 @@ authorize(ApiServer *server, Client *client, Request *req) {
 	}
 
 	if (server->getApiAccountDatabase().empty()) {
-		SKC_INFO_FROM_STATIC(server, client,
-			"Authenticated as administrator because API account database is empty");
-		auth.apiKey = ApplicationPool2::ApiKey::makeSuper();
-		auth.canReadPool = true;
-		auth.canModifyPool = true;
-		auth.canInspectState = true;
-		auth.canAdminister = true;
-	} else if (parseBasicAuthHeader(req, username, password)) {
+		/*
+		 * Deliberately DEBUG, not WARN or INFO. This branch is evaluated on every
+		 * request before authentication, and the API socket is world-writable, so
+		 * anything emitted at the default log level lets any local client flood a
+		 * root-owned log file. The condition is a persistent configuration state
+		 * rather than a per-request event, so it belongs in a one-time startup
+		 * diagnostic, not here.
+		 */
+		SKC_DEBUG_FROM_STATIC(server, client,
+			"API account database is empty; refusing unauthenticated access");
+	} else 	if (parseBasicAuthHeader(req, username, password)) {
 		SKC_DEBUG_FROM_STATIC(server, client,
 			"HTTP basic authentication supplied: " << username);
 		if (username == "api") {
@@ -189,7 +192,9 @@ authorize(ApiServer *server, Client *client, Request *req) {
 		} else {
 			const typename ApiServer::ApiAccount *account =
 				server->getApiAccountDatabase().lookup(username);
-			if (account != NULL && constantTimeCompare(password, account->password)) {
+			if (account != NULL && !account->password.empty()
+			 && constantTimeCompare(password, account->password))
+			{
 				SKC_INFO_FROM_STATIC(server, client,
 					"Authenticated with administrator account: " << username);
 				auth.apiKey = ApplicationPool2::ApiKey::makeSuper();

data/src/agent/Watchdog/{AgentWatcher.cpp → AgentWatcher.h}

@@ -1,6 +1,6 @@
 /*
  *  Phusion Passenger - https://www.phusionpassenger.com/
- *  Copyright (c) 2010-2025 Asynchronous B.V.
+ *  Copyright (c) 2010-2026 Asynchronous B.V.
  *
  *  "Passenger", "Phusion Passenger" and "Union Station" are registered
  *  trademarks of Asynchronous B.V.
@@ -23,6 +23,27 @@
  *  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  *  THE SOFTWARE.
  */
+#ifndef _PASSENGER_WATCHDOG_AGENT_WATCHER_H_
+#define _PASSENGER_WATCHDOG_AGENT_WATCHER_H_
+
+#include <boost/enable_shared_from_this.hpp>
+#include <oxt/thread.hpp>
+#include <oxt/system_calls.hpp>
+#include <string>
+
+#include <LoggingKit/Logging.h>
+#include <FileDescriptor.h>
+#include <ProcessManagement/Utils.h>
+#include <Utils.h>
+#include <Utils/Timer.h>
+
+#include <Watchdog/WorkingObjects.h>
+
+namespace Passenger {
+namespace Watchdog {
+
+using namespace oxt;
+
 
 /**
  * Abstract base class for watching agent processes.
@@ -535,3 +556,9 @@ public:
 };
 
 typedef boost::shared_ptr<AgentWatcher> AgentWatcherPtr;
+
+
+} // namespace Watchdog
+} // namespace Passenger
+
+#endif /* _PASSENGER_WATCHDOG_AGENT_WATCHER_H_ */

data/src/agent/Watchdog/ApiServer.h

@@ -92,6 +92,29 @@ public:
 	}
 };
 
+/**
+ * Builds the config that WatchdogMain.cpp passes to the ApiServer constructor.
+ *
+ * Must assign `authorizations` to the OUTER key "watchdog_api_server_authorizations",
+ * not to the inner "authorizations" key. `watchdogConfig.inspectEffectiveValues()`
+ * already contains "watchdog_api_server_authorizations", defaulting to an empty
+ * array, and the ApiServer schema translator maps that outer name onto the inner
+ * "authorizations". Assigning the inner name here leaves both keys present in the
+ * same document; ConfigKit's translator assigns while iterating, jsoncpp iterates
+ * keys in sorted order, so the outer key gets applied last and silently overwrites
+ * these entries with the empty default, always emptying the API account database.
+ */
+inline Json::Value
+buildConfig(const ConfigKit::Store &watchdogConfig, const Json::Value &authorizations,
+	const StaticString &fdPassingPassword)
+{
+	Json::Value config = watchdogConfig.inspectEffectiveValues();
+	config["fd_passing_password"] = fdPassingPassword.toString();
+	config.removeMember("watchdog_api_server_authorizations"); // Replace with scoped auth
+	config["authorizations"] = authorizations;
+	return config;
+}
+
 struct ConfigChangeRequest {
 	ServerKit::HttpServerConfigChangeRequest forParent;
 	boost::scoped_ptr<ApiAccountUtils::ApiAccountDatabase> apiAccountDatabase;
@@ -160,12 +183,12 @@ private:
 		if (req->method == HTTP_GET) {
 			if (!authorizeStateInspectionOperation(this, client, req)) {
 				apiServerRespondWith401(this, client, req);
+			} else {
+				HeaderTable headers;
+				Json::Value doc = LoggingKit::context->getConfig().inspect();
+				headers.insert(req->pool, "Content-Type", "application/json");
+				writeSimpleResponse(client, 200, &headers, doc.toStyledString());
 			}
-
-			HeaderTable headers;
-			Json::Value doc = LoggingKit::context->getConfig().inspect();
-			headers.insert(req->pool, "Content-Type", "application/json");
-			writeSimpleResponse(client, 200, &headers, doc.toStyledString());
 			if (!req->ended()) {
 				endRequest(&client, &req);
 			}

data/src/agent/Watchdog/Config.h

@@ -139,7 +139,7 @@ using namespace std;
  *   security_update_checker_interval                                         unsigned integer   -          default(86400)
  *   security_update_checker_proxy_url                                        string             -          -
  *   security_update_checker_url                                              string             -          default("https://securitycheck.phusionpassenger.com/v1/check.json")
- *   server_software                                                          string             -          default("Phusion_Passenger/6.1.7")
+ *   server_software                                                          string             -          default("Phusion_Passenger/6.2.0")
  *   setsid                                                                   boolean            -          default(false)
  *   show_version_in_header                                                   boolean            -          default(true)
  *   single_app_mode_app_root                                                 string             -          default,read_only

data/src/agent/Watchdog/{CoreWatcher.cpp → CoreWatcher.h}

@@ -1,6 +1,6 @@
 /*
  *  Phusion Passenger - https://www.phusionpassenger.com/
- *  Copyright (c) 2010-2025 Asynchronous B.V.
+ *  Copyright (c) 2010-2026 Asynchronous B.V.
  *
  *  "Passenger", "Phusion Passenger" and "Union Station" are registered
  *  trademarks of Asynchronous B.V.
@@ -23,9 +23,19 @@
  *  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  *  THE SOFTWARE.
  */
+#ifndef _PASSENGER_WATCHDOG_CORE_WATCHER_H_
+#define _PASSENGER_WATCHDOG_CORE_WATCHER_H_
 
+#include <Shared/Fundamentals/Initialization.h>
 #include <Shared/Fundamentals/Utils.h>
 #include <IOTools/MessageIO.h>
+#include <Watchdog/AgentWatcher.h>
+
+namespace Passenger {
+namespace Watchdog {
+
+using namespace Passenger::Agent::Fundamentals;
+
 
 class CoreWatcher: public AgentWatcher {
 protected:
@@ -93,3 +103,10 @@ public:
 		report["core_password"] = watchdogConfig->get("controller_secure_headers_password").asString();
 	}
 };
+
+
+} // namespace Watchdog
+} // namespace Passenger
+
+#endif /* _PASSENGER_WATCHDOG_CORE_WATCHER_H_ */
+

data/src/agent/Watchdog/{InstanceDirToucher.cpp → InstanceDirToucher.h}

@@ -1,6 +1,6 @@
 /*
  *  Phusion Passenger - https://www.phusionpassenger.com/
- *  Copyright (c) 2010-2025 Asynchronous B.V.
+ *  Copyright (c) 2010-2026 Asynchronous B.V.
  *
  *  "Passenger", "Phusion Passenger" and "Union Station" are registered
  *  trademarks of Asynchronous B.V.
@@ -23,11 +23,24 @@
  *  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  *  THE SOFTWARE.
  */
+#ifndef _PASSENGER_WATCHDOG_INSTANCE_DIR_TOUCHER_H_
+#define _PASSENGER_WATCHDOG_INSTANCE_DIR_TOUCHER_H_
 
 #include <boost/bind/bind.hpp>
+#include <oxt/thread.hpp>
+
 #include <Shared/Fundamentals/Utils.h>
 #include <Utils/AsyncSignalSafeUtils.h>
 
+#include <Watchdog/WorkingObjects.h>
+
+namespace Passenger {
+namespace Watchdog {
+
+using namespace oxt;
+using namespace Passenger::Agent::Fundamentals;
+
+
 /**
  * Touch all files in the server instance dir every 6 hours in order to prevent /tmp
  * cleaners from weaking havoc:
@@ -153,3 +166,9 @@ public:
 };
 
 typedef boost::shared_ptr<InstanceDirToucher> InstanceDirToucherPtr;
+
+
+} // namespace Watchdog
+} // namespace Passenger
+
+#endif /* _PASSENGER_WATCHDOG_INSTANCE_DIR_TOUCHER_H_ */

data/src/agent/Watchdog/WatchdogMain.cpp

@@ -1,6 +1,6 @@
 /*
  *  Phusion Passenger - https://www.phusionpassenger.com/
- *  Copyright (c) 2010-2025 Asynchronous B.V.
+ *  Copyright (c) 2010-2026 Asynchronous B.V.
  *
  *  "Passenger", "Phusion Passenger" and "Union Station" are registered
  *  trademarks of Asynchronous B.V.
@@ -66,6 +66,7 @@
 #include <Core/OptionParser.h>
 #include <Watchdog/Config.h>
 #include <Watchdog/ApiServer.h>
+#include <Watchdog/WorkingObjects.h>
 #include <JsonTools/Autocast.h>
 #include <Constants.h>
 #include <InstanceDirectory.h>
@@ -93,6 +94,7 @@ using namespace std;
 using namespace boost;
 using namespace oxt;
 using namespace Passenger;
+using namespace Passenger::Watchdog;
 using namespace Passenger::Agent::Fundamentals;
 
 
@@ -101,83 +103,16 @@ enum OomFileType {
 	OOM_SCORE_ADJ
 };
 
-class InstanceDirToucher;
-class AgentWatcher;
-
-/***** Working objects *****/
-
-namespace Passenger {
-namespace Watchdog {
-	struct WorkingObjects {
-		RandomGenerator randomGenerator;
-		EventFd errorEvent;
-		EventFd exitEvent;
-		uid_t defaultUid;
-		gid_t defaultGid;
-		InstanceDirectoryPtr instanceDir;
-		int startupReportFile;
-		int lockFile;
-		vector<string> cleanupPidfiles;
-		bool pidsCleanedUp;
-		bool pidFileCleanedUp;
-		string corePidFile;
-		string fdPassingPassword;
-		Json::Value extraConfigToPassToSubAgents;
-		Json::Value controllerAddresses;
-		Json::Value coreApiServerAddresses;
-		Json::Value coreApiServerAuthorizations;
-		Json::Value watchdogApiServerAddresses;
-		Json::Value watchdogApiServerAuthorizations;
-
-		int apiServerFds[SERVER_KIT_MAX_SERVER_ENDPOINTS];
-		BackgroundEventLoop *bgloop;
-		ServerKit::Context *serverKitContext;
-		ServerKit::Schema serverKitSchema;
-		ApiServer::ApiServer *apiServer;
-
-		WorkingObjects()
-			: errorEvent(__FILE__, __LINE__, "WorkingObjects: errorEvent"),
-			  exitEvent(__FILE__, __LINE__, "WorkingObjects: exitEvent"),
-			  startupReportFile(-1),
-			  pidsCleanedUp(false),
-			  pidFileCleanedUp(false),
-			  extraConfigToPassToSubAgents(Json::objectValue),
-			  controllerAddresses(Json::arrayValue),
-			  coreApiServerAddresses(Json::arrayValue),
-			  coreApiServerAuthorizations(Json::arrayValue),
-			  watchdogApiServerAddresses(Json::arrayValue),
-			  watchdogApiServerAuthorizations(Json::arrayValue),
-			  bgloop(NULL),
-			  serverKitContext(NULL),
-			  apiServer(NULL)
-		{
-			for (unsigned int i = 0; i < SERVER_KIT_MAX_SERVER_ENDPOINTS; i++) {
-				apiServerFds[i] = -1;
-			}
-		}
-	};
-
-	typedef boost::shared_ptr<WorkingObjects> WorkingObjectsPtr;
-} // namespace Watchdog
-} // namespace Passenger
-
-using namespace Passenger::Watchdog;
-
-static WrapperRegistry::Registry *watchdogWrapperRegistry;
-static Schema *watchdogSchema;
-static ConfigKit::Store *watchdogConfig;
-static WorkingObjects *workingObjects;
-
 static void cleanup(const WorkingObjectsPtr &wo);
 
-#include "AgentWatcher.cpp"
-#include "InstanceDirToucher.cpp"
-#include "CoreWatcher.cpp"
+#include <Watchdog/AgentWatcher.h>
+#include <Watchdog/InstanceDirToucher.h>
+#include <Watchdog/CoreWatcher.h>
 
 
 /***** Functions *****/
 
-#if !BOOST_OS_MACOS
+#if BOOST_OS_LINUX
 
 struct WatchdogOomAdjustResult {
 	struct Message {
@@ -860,7 +795,7 @@ initializeBareEssentials(int argc, char *argv[], WorkingObjectsPtr &wo) {
 	 * for this watchdog. Note that the OOM score is inherited by child processes
 	 * so we need to restore it after each fork().
 	 */
-#if !BOOST_OS_MACOS
+#if BOOST_OS_LINUX
 	WatchdogOomAdjustResult oomAdjustResult = setOomScoreNeverKill();
 #endif
 
@@ -877,7 +812,7 @@ initializeBareEssentials(int argc, char *argv[], WorkingObjectsPtr &wo) {
 
 	wo = boost::make_shared<WorkingObjects>();
 	workingObjects = wo.get();
-#if !BOOST_OS_MACOS
+#if BOOST_OS_LINUX
 	printOomAdjustResultMessages(oomAdjustResult);
 	wo->extraConfigToPassToSubAgents["oom_score"] = oomAdjustResult.oldScore;
 #endif
@@ -1242,9 +1177,8 @@ initializeApiServer(const WorkingObjectsPtr &wo) {
 	wo->serverKitContext->initialize();
 
 	UPDATE_TRACE_POINT();
-	Json::Value apiServerConfig = watchdogConfig->inspectEffectiveValues();
-	apiServerConfig["fd_passing_password"] = wo->fdPassingPassword;
-	apiServerConfig["authorizations"] = wo->watchdogApiServerAuthorizations;
+	Json::Value apiServerConfig = ApiServer::buildConfig(*watchdogConfig,
+		wo->watchdogApiServerAuthorizations, wo->fdPassingPassword);
 	wo->apiServer = new ApiServer::ApiServer(
 		wo->serverKitContext,
 		watchdogSchema->apiServer.schema,

data/src/agent/Watchdog/WorkingObjects.h

@@ -0,0 +1,108 @@
+/*
+ *  Phusion Passenger - https://www.phusionpassenger.com/
+ *  Copyright (c) 2010-2026 Asynchronous B.V.
+ *
+ *  "Passenger", "Phusion Passenger" and "Union Station" are registered
+ *  trademarks of Asynchronous B.V.
+ *
+ *  Permission is hereby granted, free of charge, to any person obtaining a copy
+ *  of this software and associated documentation files (the "Software"), to deal
+ *  in the Software without restriction, including without limitation the rights
+ *  to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ *  copies of the Software, and to permit persons to whom the Software is
+ *  furnished to do so, subject to the following conditions:
+ *
+ *  The above copyright notice and this permission notice shall be included in
+ *  all copies or substantial portions of the Software.
+ *
+ *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ *  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ *  FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ *  AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ *  LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ *  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ *  THE SOFTWARE.
+ */
+#ifndef _PASSENGER_WATCHDOG_WORKING_OBJECTS_H_
+#define _PASSENGER_WATCHDOG_WORKING_OBJECTS_H_
+
+#include <vector>
+#include <string>
+#include <jsoncpp/json.h>
+
+#include <RandomGenerator.h>
+#include <InstanceDirectory.h>
+#include <BackgroundEventLoop.h>
+#include <WrapperRegistry/Registry.h>
+#include <ServerKit/Context.h>
+
+#include <Watchdog/Config.h>
+#include <Watchdog/ApiServer.h>
+
+namespace Passenger {
+namespace Watchdog {
+
+using namespace std;
+
+
+struct WorkingObjects {
+	RandomGenerator randomGenerator;
+	EventFd errorEvent;
+	EventFd exitEvent;
+	uid_t defaultUid;
+	gid_t defaultGid;
+	InstanceDirectoryPtr instanceDir;
+	int startupReportFile;
+	int lockFile;
+	vector<string> cleanupPidfiles;
+	bool pidsCleanedUp;
+	bool pidFileCleanedUp;
+	string corePidFile;
+	string fdPassingPassword;
+	Json::Value extraConfigToPassToSubAgents;
+	Json::Value controllerAddresses;
+	Json::Value coreApiServerAddresses;
+	Json::Value coreApiServerAuthorizations;
+	Json::Value watchdogApiServerAddresses;
+	Json::Value watchdogApiServerAuthorizations;
+
+	int apiServerFds[SERVER_KIT_MAX_SERVER_ENDPOINTS];
+	BackgroundEventLoop *bgloop;
+	ServerKit::Context *serverKitContext;
+	ServerKit::Schema serverKitSchema;
+	ApiServer::ApiServer *apiServer;
+
+	WorkingObjects()
+		: errorEvent(__FILE__, __LINE__, "WorkingObjects: errorEvent"),
+			exitEvent(__FILE__, __LINE__, "WorkingObjects: exitEvent"),
+			startupReportFile(-1),
+			pidsCleanedUp(false),
+			pidFileCleanedUp(false),
+			extraConfigToPassToSubAgents(Json::objectValue),
+			controllerAddresses(Json::arrayValue),
+			coreApiServerAddresses(Json::arrayValue),
+			coreApiServerAuthorizations(Json::arrayValue),
+			watchdogApiServerAddresses(Json::arrayValue),
+			watchdogApiServerAuthorizations(Json::arrayValue),
+			bgloop(NULL),
+			serverKitContext(NULL),
+			apiServer(NULL)
+	{
+		for (unsigned int i = 0; i < SERVER_KIT_MAX_SERVER_ENDPOINTS; i++) {
+			apiServerFds[i] = -1;
+		}
+	}
+};
+
+typedef boost::shared_ptr<WorkingObjects> WorkingObjectsPtr;
+
+static WrapperRegistry::Registry *watchdogWrapperRegistry;
+static Schema *watchdogSchema;
+static ConfigKit::Store *watchdogConfig;
+static WorkingObjects *workingObjects;
+
+
+} // namespace Watchdog
+} // namespace Passenger
+
+#endif /* _PASSENGER_WATCHDOG_WORKING_OBJECTS_H_ */

data/src/cxx_supportlib/Constants.h

@@ -84,7 +84,7 @@
 #define PASSENGER_API_VERSION_MAJOR 0
 #define PASSENGER_API_VERSION_MINOR 3
 #define PASSENGER_DEFAULT_USER "nobody"
-#define PASSENGER_VERSION "6.1.7"
+#define PASSENGER_VERSION "6.2.0"
 #define POOL_HELPER_THREAD_STACK_SIZE 262144
 #define PROCESS_SHUTDOWN_TIMEOUT 60
 #define PROCESS_SHUTDOWN_TIMEOUT_DISPLAY "1 minute"

data/src/cxx_supportlib/IOTools/IOUtils.cpp

@@ -66,6 +66,7 @@
 
 #include <Exceptions.h>
 #include <Constants.h>
+#include <Utils/Socket.h>
 #include <Utils/Timer.h>
 #include <IOTools/IOUtils.h>
 #include <StrIntTools/StrIntUtils.h>
@@ -1301,29 +1302,13 @@ writeFileDescriptor(int fd, int fdToSend, unsigned long long *timeout) {
 
 void
 readPeerCredentials(int sock, uid_t *uid, gid_t *gid) {
-	union {
-		struct sockaddr genericAddress;
-		struct sockaddr_un unixAddress;
-		struct sockaddr_in inetAddress;
-		struct sockaddr_in6 inetAddress6;
-	} addr;
-	socklen_t len = sizeof(addr);
-	int ret;
-
 	/*
 	 * The functions for receiving the peer credentials are not guaranteed to
 	 * fail if the socket is not a Unix domain socket. For example, OS X getpeereid()
 	 * just returns garbage when invoked on a TCP socket. So we check here
 	 * whether 'sock' is a Unix domain socket.
 	 */
-	do {
-		ret = getsockname(sock, &addr.genericAddress, &len);
-	} while (ret == -1 && errno == EINTR);
-	if (ret == -1) {
-		int e = errno;
-		throw SystemException("Unable to autodetect socket type (getsockname() failed)", e);
-	}
-	if (addr.genericAddress.sa_family != AF_LOCAL) {
+	if (!fdIsUnixDomainSocket(sock)) {
 		throw SystemException("Cannot receive process credentials: the connection is not a Unix domain socket",
 			EPROTONOSUPPORT);
 	}

data/src/cxx_supportlib/ServerKit/AcceptLoadBalancer.h

@@ -46,6 +46,7 @@
 #include <ServerKit/Context.h>
 #include <ServerKit/Errors.h>
 #include <Utils.h>
+#include <Utils/Socket.h>
 #include <IOTools/IOUtils.h>
 
 namespace Passenger {
@@ -287,6 +288,7 @@ public:
 		assert(nEndpoints < SERVER_KIT_MAX_SERVER_ENDPOINTS);
 		setNonBlocking(fd);
 		int flag = 1;
+		if (!fdIsUnixDomainSocket(fd)) {
 		if (setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &flag, sizeof(int)) == -1
 		 && errno != ENOPROTOOPT
 		 && errno != ENOTSUP
@@ -296,6 +298,7 @@ public:
 			P_WARN("Cannot disable Nagle's algorithm on a TCP socket: " <<
 				strerror(e) << " (errno=" << e << ")");
 		}
+		}
 		endpoints[nEndpoints] = fd;
 		nEndpoints++;