puma 2.11.2 → 2.11.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 48c8ae38ddb47bb86ee31ba25019f04fb213a9b8
-  data.tar.gz: 8f79fa19e0b4ad06c87030fa6b8a0af7ca978834
+  metadata.gz: 62b8ddbb9917e4501d7b02a0b84a31adac56f5be
+  data.tar.gz: b390e97322dc3d14a51f586985c44fcc3d99b1f8
 SHA512:
-  metadata.gz: 2b4497fdf7dd5233d501666882b8896c75b3b2b095f76ea2ca7b809e123ba39536a2ddf6c2ecf4b9c4fbee2c1faf3acbfd9488b49bbfe524f68cd8185523211e
-  data.tar.gz: f8d976a6b89d03cd6ae561564e56f9d5a6fb5d13c233375186fe0423c875af398cb72aee4cb3b1437e18a0f006457cfda98964e841d74355da07b86bf5b1bbbb
+  metadata.gz: 83f84184db14ac4140e72e65704fdcc97936a4e0adba8bc4e88895819db2e5ab57626e5bd594e74912f3b79bd9c54b900dd25bf61ff60277531f17c4cfdfd7b6
+  data.tar.gz: 015d21282805c0bca821b0381d675edb2356ff4f6975ba97df01612d2aa53476a2c1896d3434ec954ec3aa86c1a243e911333fcbfbf4b9b89c2500baa755bda7

data/History.txt

@@ -1,3 +1,14 @@
+=== 2.11.3 / 2015-05-18
+
+* 5 bug fixes:
+  * Be sure to unlink tempfiles after a request. Fixes #690
+  * Coerce the key to a string before checking. (thar be symbols). Fixes #684
+  * Fix hang on bad SSL handshake
+  * Remove `enable_SSLv3` support from JRuby
+
+* 1 PR merged:
+  * Merge pull request #698 from looker/hang-handshake
+
 === 2.11.2 / 2015-04-11
 
 * 2 minor features:
@@ -483,7 +494,7 @@ RailsConf 2013 edition!
   * Close the binder in the right place. Fixes #192
   * Handle early term in workers. Fixes #206
   * Make sure that the default port is 80 when the request doesn't include HTTP_X_FORWARDED_PROTO.
-  * Prevent Errno::EBADF errors on restart when running ruby 2.0 
+  * Prevent Errno::EBADF errors on restart when running ruby 2.0
   * Record the proper @master_pid
   * Respect the header HTTP_X_FORWARDED_PROTO when the host doesn't include a port number.
   * Retry EAGAIN/EWOULDBLOCK during syswrite

data/ext/puma_http11/mini_ssl.c

@@ -161,7 +161,7 @@ void raise_error(SSL* ssl, int result) {
 VALUE engine_read(VALUE self) {
   ms_conn* conn;
   char buf[512];
-  int bytes, n;
+  int bytes, n, error;
 
   Data_Get_Struct(self, ms_conn, conn);
 
@@ -173,7 +173,8 @@ VALUE engine_read(VALUE self) {
 
   if(SSL_want_read(conn->ssl)) return Qnil;
 
-  if(SSL_get_error(conn->ssl, bytes) == SSL_ERROR_ZERO_RETURN) {
+  error = SSL_get_error(conn->ssl, bytes);
+  if(error == SSL_ERROR_ZERO_RETURN || error == SSL_ERROR_SSL) {
     rb_eof_error();
   }
 

data/ext/puma_http11/org/jruby/puma/MiniSSL.java

@@ -153,13 +153,7 @@ public class MiniSSL extends RubyObject {
     sslCtx.init(kmf.getKeyManagers(), null, null);
     engine = sslCtx.createSSLEngine();
 
-    IRubyObject enableSSLv3 = miniSSLContext.callMethod(threadContext, "enable_SSLv3");
-    String[] protocols;
-    if (enableSSLv3 instanceof RubyBoolean && enableSSLv3.isTrue()) {
-      protocols = new String[] { "SSLv2Hello", "SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2" };
-    } else {
-      protocols = new String[] { "TLSv1", "TLSv1.1", "TLSv1.2" };
-    }
+    String[] protocols = new String[] { "TLSv1", "TLSv1.1", "TLSv1.2" };
     engine.setEnabledProtocols(protocols);
     engine.setUseClientMode(false);
 
@@ -308,8 +302,10 @@ public class MiniSSL extends RubyObject {
       log("read(): end dump of request data   <<<<\n");
       return str;
     } catch (Exception e) {
-      e.printStackTrace();
-      throw new RuntimeException(e);
+      if (DEBUG) {
+        e.printStackTrace();
+      }
+      throw getRuntime().newEOFError(e.getMessage());
     }
   }
 

data/lib/puma/client.rb

@@ -39,6 +39,7 @@ module Puma
 
       @body = nil
       @buffer = nil
+      @tempfile = nil
 
       @timeout_at = nil
 
@@ -46,7 +47,8 @@ module Puma
       @hijacked = false
     end
 
-    attr_reader :env, :to_io, :body, :io, :timeout_at, :ready, :hijacked
+    attr_reader :env, :to_io, :body, :io, :timeout_at, :ready, :hijacked,
+                :tempfile
 
     def inspect
       "#<Puma::Client:0x#{object_id.to_s(16)} @ready=#{@ready.inspect}>"
@@ -72,6 +74,7 @@ module Puma
       @read_header = true
       @env = @proto_env.dup
       @body = nil
+      @tempfile = nil
       @parsed_bytes = 0
       @ready = false
 
@@ -129,6 +132,7 @@ module Puma
       if remain > MAX_BODY
         @body = Tempfile.new(Const::PUMA_TMP_BASE)
         @body.binmode
+        @tempfile = @body
       else
         # The body[0,0] trick is to get an empty string in the same
         # encoding as body.

data/lib/puma/configuration.rb

@@ -103,7 +103,7 @@ module Puma
       @options.merge!(rack_options)
 
       config_ru_binds = rack_options.each_with_object([]) do |(k, v), b|
-        b << v if k.start_with?('bind')
+        b << v if k.to_s[0,4] == "bind"
       end
       @options[:binds] = config_ru_binds unless config_ru_binds.empty?
 

data/lib/puma/const.rb

@@ -28,7 +28,7 @@ module Puma
   # too taxing on performance.
   module Const
 
-    PUMA_VERSION = VERSION = "2.11.2".freeze
+    PUMA_VERSION = VERSION = "2.11.3".freeze
     CODE_NAME = "Intrepid Squirrel".freeze
 
     FAST_TRACK_KA_TIMEOUT = 0.2

data/lib/puma/minissl.rb

@@ -95,11 +95,6 @@ module Puma
         # jruby-specific Context properties: java uses a keystore and password pair rather than a cert/key pair
         attr_reader :keystore
         attr_accessor :keystore_pass
-        attr_accessor :enable_SSLv3
-
-        def initialize
-          @enable_SSLv3 = false
-        end
 
         def keystore=(keystore)
           raise ArgumentError, "No such keystore file '#{keystore}'" unless File.exist? keystore

data/lib/puma/server.rb

@@ -656,6 +656,7 @@ module Puma
         uncork_socket client
 
         body.close
+        req.tempfile.unlink if req.tempfile
         res_body.close if res_body.respond_to? :close
 
         after_reply.each { |o| o.call }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: puma
 version: !ruby/object:Gem::Version
-  version: 2.11.2
+  version: 2.11.3
 platform: ruby
 authors:
 - Evan Phoenix
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-04-11 00:00:00.000000000 Z
+date: 2015-05-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack