1 Polipo 1.0.5 (unreleased)
3 * Fixed a bug that could cause incorrect logging to syslog (thanks
5 * Proper va_list handling for AMD64 and other RISC-like
6 architectures on non-GNU platforms.
7 * Implemented work-around for broken Content-Range headers.
8 * Use 1024 instead of 32 as the length of the listen queue.
9 * Implemented the ability to control the permissions set on the log file.
10 * Implemented the ability to scrub private information from logs.
11 * Tweaked the portable version of mktime_gmt. This will hopefully
12 fix the time issues on Windows. Thanks to MaxWell and Greg.
13 * Changed chunk allocator to use larger arenas on 64-bit arches.
14 * Fixed a bug that could prevent saving objects on disk. Thanks to
16 * Fixed an issue that could cause crash messages to go into the disk
18 * Fixed a bug that could cause the default chunk memory to be incorrect
19 on FreeBSD machines. Thanks to Frank Behrens.
20 * Fixed a number of bugs in the validation of Range requests. Thanks to
22 * Fixed an integer overflow that may lead to a crash
23 (http://secunia.com/advisories/37607/). Discovered by Jeremy Brown.
25 * Inhibited range requests for non-200 instances, as this breaks some
26 client software. Thanks to Ken Brazier.
27 * Added GCC stack smashing protection compiler flags to the Makefile.
28 Thanks to Jake Appelbaum.
29 * Added numerous code fixes by Fabian Keil resulting from his use of
30 the Clang static analyzer.
31 * Fixed a crash that occurs when a server sends a malformed
32 Cache-Control: header (CVE-2009-3305). Patch from Stefan Fritsch.
33 * added dontIdentifyToClients, which attempts to mitigate privacy issues
34 due to running untrusted scripts on the client side.
35 * Made locking more paranoid, this might solve the issue of Polipo being
36 unable to serve large objects when running without a disk cache.
37 * Changed the default value of diskCacheWriteoutOnClose to 64kB.
38 * Prevent an infinite loop when a bodyless 204 or 1xx response is encountered.
39 * Don't crash when we get an error while waiting for 100 continue status.
41 31 January 2010: Polipo 1.0.4.1:
43 * Fixed an integer overflow that may lead to a crash
44 (http://secunia.com/advisories/37607/). Discovered by Jeremy Brown.
46 * Fixed a crash that occurs when a server sends a malformed
47 Cache-Control: header (CVE-2009-3305). Patch from Stefan Fritsch.
48 * Prevent an infinite loop when a bodyless 204 or 1xx response is encountered.
49 * Don't crash when we get an error while waiting for 100 continue status.
51 8 January 2008: Polipo 1.0.4:
53 * Fixed the handling of tunnels with a parent proxy (thanks to
55 * Fixed a bug that could cause connections to be shut down when
56 a server used the old (RFC 2068) semantics of ``100 Continue''
57 (thanks to Thomas Wiesel).
58 * Fixed a crash when a request URL was larger than 10 kB (thanks to
60 * Fixed a possible failure to read client requests larger than one
63 6 October 2007: Polipo 1.0.3
65 * Changed the default for chunkMemory: it is now 24 MB or
66 one-quarter of physical memory, whichever is smaller.
67 * Support for logging to syslog (thanks to Nix).
68 * Made atom reference counts 32-bit longs; this should fix
69 problems that people were seeing when running Polipo with
70 humongous in-memory caches.
71 * Added Git, Jabber and CVS to default tunnelAllowedPorts.
72 * Fixed a bug that could cause URL matching to fail when using
73 anchored regular expressions (thanks to phuel).
75 26 August 2007: Polipo 1.0.2:
77 * Fixed a crash that could happen with entities more than 2GB in
78 size. Such entities are still not supported, but Polipo
79 should no longer crash.
80 * Minor HTTP compliance fixes, due to testing with Co-Advisor.
81 * Fixed a crash that would happen when a POST request was aborted
82 by the server. Reported by Tero Pelander.
83 * Worked around a DNS-related bug that I'm unable to track down,
84 waiting for a proper fix.
86 25 June 2007: Polipo 1.0.1:
88 * Made Polipo slightly more aggressive when speaking to
89 HTTP/1.0 servers (thanks to Fabian Keil for noticing that).
90 * Fixed a crash that would happen when a client used
91 Cache-Control: only-if-cached, and the object was not in cache.
92 (Reported by F. Zappa, A. Patala and V. Ghosal.)
93 * Fixed a descriptor leak when running under Windows.
94 * Made Polipo optionally drop connections after servicing
95 a number of connections (maxConnectionAge and maxConnectionRequests).
97 6 March 2007: Polipo 1.0.0
99 * No changes since 0.9.99.2.
101 7 February 2007: Polipo 0.9.99.2
103 * Fixed a buffer overflow in urlDirname (the 0.9 branch is not
104 vulnerable) (reported by J. P. Larocque).
105 * Implemented use of IPv6 temporary source addresses (Frank Behrens).
106 * Disabled use of unaligned range requests by default. This is
107 controlled by the variable allowUnalignedRangeRequests (reported
109 * Fixed descriptor leaks in SOCKS error handling (reported by
111 * Implemented maxSideBuffering.
113 6 February 2007: Polipo 0.9.12
115 * Fixed incorrect caching of redirects (reported by Lawrence Lu).
116 * Fixed a possible hang when falling back to gethostbyname
117 (reported by Chris Moore).
119 28 December 2006: Polipo 0.9.99.1
121 * Validation improvements and bug fixes.
122 * Don't use cached data when receiving the output from an HTTP/1.0 CGI.
123 * Allowed tunnelling of IMAP and POP traffic by default.
124 * Changed the disk cache expiry and indexing functions to use chunks.
125 * Made the disk cache unreadable by others by default.
126 * Fixed a bug that could cause stale data to be served after
127 a connection failure (reported by Hondza).
128 * Fixed computation of age and rtt for pipelined requests.
129 * Fixed incorrect cachability of redirects (reported by J.-P. Larocque).
130 * Fixed a bug that would cause uncachable objects to become
131 cachable after being reloaded from the on-disk cache (reported
133 * Implemented dontTrustVaryETag.
135 7 December 2006: Polipo 0.9.11
137 * Fixed a crash that could happen when a network interface went down
138 while a DNS query was in progress (reported by Francesco Zappa).
140 20 November 2006: Polipo 0.9.99.0:
142 * Implemented large buffers for headers larger than a chunk's worth.
143 * Made the HTTP parser lax by default (ignores unknown headers).
144 * Implemented the infrastructure for local POST requests and
145 implemented a real configuration interface (thanks to Theo Honohan).
146 * Made timeouts user-configurable and enforced an invariant between
148 * Made logging configurable at runtime (thanks to Frank Behrens).
149 * Implemented the infrastructure for asynchronous handling of
151 * Implemented the ability to redirect instead of returning an
152 error for forbidden URLs.
153 * Implemented support for Squid-style redirectors.
154 * Implemented User-configurable uncacheable URLs, analogous to
155 forbidden URLs (thanks to Joachim Haga).
156 * Implemented the ability to avoid caching pages with cookies
158 * Implemented maxPipelineTrain, which can be used to moderate
159 * Polipo's eagerness to pipeline.
160 * Unified parentHost and parentPort into parentProxy.
161 * Ported Polipo to native Windows (thanks to Dan Kennedy).
162 * Implemented disableVia.
163 * Implemented SOCKS support.
164 * Made disableVia and cacheIsShared to be true by default.
165 * Increased the default value of serverMaxSlots to 8.
166 * Made the disk cache code quote all characters except for a
167 small number of ``known safe'' ones. This is an incompatible
168 change to the on-disk format.
169 * Changed HTTP parser to pass all Pragma headers to the next
170 hop; this should make some media players work through Polipo.
171 * Changed the connection scheduler to avoid pipelining when
172 there are idle connections to a given server.
173 * Made Polipo obey parentProxy when tunnelling (proxying https).
174 * Changed the default value of allowedPorts to be slightly more
176 * Implemented tweakables for selectively disabling parts of the
177 configuration interface. Indexing and listing known servers
178 are now disabled by default.
179 * Hide variables containing passwords.
180 * Fixed a bug that could cause incorrect validation when speaking
181 to an HTTP/1.0 server.
182 * Fixed a bug that could cause incorrect validation of Vary objects.
183 * Fixed a crash in the redirector code.
184 * Made disableVia the default, and changed the default value of idleTime.
185 * Made polipo delay serving of partial objects until after a
186 a successful validation. This should fix Mozilla's prefetching.
187 * On 64-bit platforms, made CHUNK_SIZE default to 8kB.
189 2 September 2006: Polipo 0.9.10:
191 * Fixed a crash when a client closes a connection at just the
193 * Fixed a crash that could happen when a server returned incorrect
194 headers and closed the connection at just the wrong time.
195 * Fixed restarting of connections on a server-side read error;
196 this should avoid the ``connection reset by peer'' problem.
197 * Corrected work-around for DNS servers that export both AAAA and CNAME.
198 * Fix incorrect error handling when overflowing the buffer when saving
200 * IPv6 tweaks for OpenBSD (thanks to Jun-ichiro itojun Hagino).
201 * Fixed incorrect error-handling on failure to parse a date.
202 * Fixed a deadlock when a tunnel is shut down and the buffer is
204 * Fixed an incorrect use of va_start (guaranteed crash on AMD64).
205 * Fixed a possible race condition with a heavily pipelining client.
206 * Fixed a crash due to incorrect handling of write errors in POST.
208 23 September 2005: Polipo 0.9.9:
210 * Fixed a bug that could cause objects to be incorrectly
211 determined to be dynamic (thanks to Joachim B. Haga).
212 * Fixed a bug that could cause the local web server to expose
213 files that are not under the local root (thanks to Wessel
215 * Fixed an off-by-one bug when parsing NL-terminated headers.
216 * Made Polipo forget about failures when finishing on the client side.
217 * Polipo now sends Host headers even when speaking to an upstream
218 proxy. Some proxies take RFC 2616 literally, and require that
219 (thanks to Zoltan Ivanfi).
220 * Fixed some bugs in staleness computation, and implemented
221 server-side max-age directives (oops!) (thanks to Charley Chu).
223 24 January 2005: Polipo 0.9.8:
225 * Backported the lax HTTP parser from the head branch.
226 * Fixed a race condition that could cause a crash if a single
227 object was being superseded twice at the same time.
228 * Fixed an incorrect test that caused Polipo to pipeline to all
229 HTTP/1.1 servers, even when they were determined as broken (thanks
231 * Implemented maxPipelineTrain.
232 * Tweaked for uclibc (thanks to Detlef Riekenberg).
234 27 December 2004: Polipo 0.9.7:
236 * Fixed a possible crash when tunnelling.
237 * Fixed spurious updates of object sizes when connection is dropped
239 * Fixed parsing of URLs with explicit port number (thanks to
241 * Fixed a possible crash when exiting POST in error.
242 * Fixed a protocol violation when an empty object is not superseded.
244 31 October 2004: Polipo 0.9.6:
245 * Fixed a possible crash in ServeObject.
246 * Fixed two possible crashes when relaxTransparency is not false.
247 * Modified the config file parser to make it possible to have
248 backslashes in atoms.
249 * Fixed a violated invariant (leading to a crash) when superseding
251 * Fixed a possible crash in ClientFinish when a pipelined request
253 * Fixed a bug in handling of client-side Expect: 100-continue
254 (reported by Charley Chu).
255 * Fixed a scheduling bug that caused server-side requests to be
256 issued in the order opposite to a client-side pipeline (many
257 thanks to Joachim Haga).
258 * Abort when the config file couldn't be parsed (thanks to
260 * Fixed error handling in POST and PUT requests, which could
261 cause a crash on an I/O error.
263 17 June 2004: Polipo 0.9.5:
264 * Implemented upstream proxy authentication (HTTP Basic only).
265 * Fixed a possible crash when unable to schedule servicing a request.
266 * Fixed a possible crash when tunnelling (proxying https).
267 * Fixed signedness issues to make allowedClients work on PPC
270 10 May 2004: Polipo 0.9.4:
271 * Fixed a bug (introduced in 0.9.3) that could cause a crash when
272 the download of an object was interrupted and then immediately restarted.
273 * Fixed a bug that could cause stale non-200 replies to be served.
274 * Fixed compilation on FreeBSD 5.2.1 (from Samuel Tardieu).
275 * Fixed definition of *_ROOT in diskcache.c
277 6 April 2004: Polipo 0.9.3:
278 * Fix incorrect handling of EPIPE when tunnelling; this could cause
279 crashes if a peer closed a connection when we're writing.
280 * Fix a race condition that could cause ``error message lost in transit''
281 errors if a request was cancelled during connect.
282 * Check for exitFlag in workToDo: faster reaction to signals.
284 28 March 2004: Polipo 0.9.2:
285 * Fixed a bug that could cause crashes when writing out small
286 objects (thanks to Frank Behrens).
287 * Made buffer allocation in httpParseHeaders dynamic.
288 * Fixed the declaration of pipelineAdditionalRequests.
289 * Fixed a bug that could cause empty directories to be missed
290 when expiring the disk cache.
291 * Switched the forbidden file to use extended regexps, the
292 previous usage was non-portable (thanks to Frank Behrens).
294 9 March 2004: Polipo 0.9.1:
295 * Fixed a bug that could cause chunked encoding failures when
296 going from a 1.0 server to a 1.1 client.
297 * Fixed a bug that prevented comments after some config lines
298 (thanks to Tom Huckstep).
299 * Fixed a possible buffer overflow in dnsDecodeReply.
300 * Fixed portability to systems where rmdir returns EEXIST
301 instead of ENOTEMPTY.
302 * Fixed error handling on fork failures in fillSpecialObject.
303 * Fixed handling of EINTR in wait in specialRequestHandler.
304 * Fixed a bug that caused objects with no headers to fail.
305 * Fixed a minor memory leak in the config file parser.
306 * Minor build fixes for NetBSD.
307 * Added the 68020 and later to the list of architectures that
308 support unaligned access.
310 18 February 2004: Polipo 0.9:
311 * Reworked the DNS code to parse ids even when a reply's qdcount
312 is 0. No longer falls back to gethostbyname when DNS server
314 * Made the DNS code parse resolv.conf.
316 11 Feburary 2004: Polipo 0.8.99.3:
317 * Minor changes to work around Cygwin mis-design.
318 * Fixed printing of n-state variables.
319 * Fixed proxyOffline handling.
320 * Fixed a bug that would cause errors to be reported with the
322 * Fixed a bug that would cause ``object vanished'' errors when
323 using HEAD for revalidation.
324 * Fixed a bug that could cause failed requests due to ``client
325 reset connection'' errors.
327 24 January 2004: Polipo 0.8.99.2:
328 * Cleaned up authentication.
329 * Made authenticated replies cachable in one of the cases allowed
331 * Fixed a bug that could, under some circumstances, cause a
332 password-protected object to be cached and returned to a
333 non-authorized client.
334 * Implemented 100-continue, controlled by the variable expectContinue.
335 * Implemented tristate, 4- and 5-state variables. Split
336 proxyOffline into proxyOffline and relaxTransparency. This is
337 an incompatible change to the config file format.
338 * Cleaned up the handling of allowed port ranges. New
339 configuration variable allowedPorts (and new type intlist).
340 * Implemented tunnelling through the CONNECT method (https proxying).
341 * Will now read a request body on error (avoids a deadlock).
342 * Reworked the PUT/POST code to read the reply eagerly rather
343 than waiting for the write to finish (avoids writing the full
344 body on error and avoids the same deadlock as above).
345 * Made server addresses sticky: will now remember which of a
346 servers addresses worked last time, and use that address first.
348 16 january 2004: Polipo 0.8.99.1:
349 * Fixed an expiry bug that caused DNS queries to be repeated on
351 * Added the variable ``preciseExpiry'' that prevents trusting
352 the mtime during expiry.
354 14 January 2004: Polipo 0.8.99.0:
355 * Implemented IP address-based authentication.
356 * Implemented HTTP ``basic'' authentication.
357 * Implemented variable body offsets for the on-disk cache; this
358 makes the on-disk cache format incompatible with previous versions.
359 * Made the number of server slots configurable.
360 * Partially rewrote the disk cache code.
361 * Fixed a file descriptor leak in the early error handling code.
362 * Fixed a bug in the base64 encoder; this makes the on-disk cache
363 format incompatible with previous versions.
364 * Implemented proper reporting for 100-Continue replies
365 (100-Continue is not implemented yet).
366 * Made the number of server slots configurable at runtime.
368 9 January 2004: Polipo 0.8.4:
369 * Log file is now line buffered.
370 * Will reopen the log file on SIGUSR1 and SIGUSR2.
371 * censoredHeaders now defaults to none, and censorReferer to 0.
372 * Fixed a memory allocation bug that could cause a crash.
374 21 December 2003: Polipo 0.8.3:
375 * Fixed a potential buffer overflow on C89 systems in snnprintf.
376 * Fixed checking of Via headers.
377 * Added configurable log file.
378 * Added code to run as a daemon.
379 * Made the resolver grok names ending in a ``.''.
380 * Changed Makefile to fit Debian better.
382 7 December 2003: Polipo 0.8.2:
383 * Implemented a version of fts for SVR4 systems.
384 * Implemented a version of mktime_gmt that doesn't use setenv.
385 * Fixed code used to determine FQDN.
386 * More unaligned access fixes.
387 * Disabled queryIPv6 when there is no IPv6 support in kernel.
388 * Enabled IPv6 support by default on FreeBSD and NetBSD.
390 2 December 2003: Polipo 0.8.1:
392 * Fix a possible crash when doing a POST on a busy server.
393 * Fix a possible crash when socket(2) fails; implement switching
394 to a different address when socket(2) fails (e.g. when
395 accessing a double-stack host from an IPv4-only client).
396 * Fix a problem with servers stuck in the ``probing'' state.
397 * Work around a bug in Konqueror that strips question marks from
399 * Fix incorrect error handling when dealing with connection
401 * Fix a compile problem in dns.c.
402 * Remove dependency on SSL, include MD5 code instead.
403 * Fix signedness of s_maxage.
405 23 November 2003: Polipo 0.8:
407 * IPv6 support, on both the client and server side, including
408 DNS support and RFC 2732.
409 * Reworked the DNS code.
410 * Made it possible to compile without any particular resolver
411 and without the on-disk cache.
412 * Fixed a problem with the chunking encoder.
413 * Made the config file parser grok octal and hex values, allowed
414 colons and tildes in unquoted strings.
415 * Implemented tilde expansion in some config variables.
416 * Made Polipo slightly less eager to honour range requests for
417 dynamic instances. Marked generated objects as dynamic. These
418 changes should solve some of the problems with PMM.
419 * Implemented the If-Range header (on both the client and server side).
420 * Implemented support for range requests smaller than one chunk
421 (and hence for pmmSize being smaller than CHUNK_SIZE).
422 * Fixed a bug that caused a deadlock (until a server timeout)
423 when doing a POST/PUT request with no free connection slots.
424 * Fixed a problem when diskCacheRoot didn't end in `/'.
425 * Fixed a refcounting problem that could cause Polipo to crash
427 * Fixed an alignment problem that could cause crashes on
428 architectures that don't like unaligned memory accesses
429 (thanks to Rob Byrnes).
430 * Fixed a bug with the disk cache that caused spurious ``disk
431 entry changed behind our back'' warnings (and in principle
432 could cause data corruption, although that's very unlikely).
433 * Made opening connections slightly less aggressive -- Polipo
434 would sometimes open two connections where only one was needed.
435 * Modified client-side code to notice client shutdowns earlier
436 and notify the server side straight away.
438 7 October 2003: Polipo 0.7
440 * Made the Request function a method of objects.
441 * Fixed a bug that could sometimes cause data corruption.
442 * Fixed a bug that could cause sending of incorrect data to
443 the client on a range request.
444 * Fixed POST and PUT requests.
445 * Fixed a bug that could sometimes cause a POST request to use a
447 * Included code to do poor man's multiplexing.
448 * Will now open multiple connections to non-persistent servers.
449 * Fixed a bug that could lead to idle connections dying without
451 * Fixed probing for pipelining.
452 * Actually use the new time function introduced in 0.5.
453 * Fixed a bug in strcasecmp_n.
454 * forbiddenFile can now be a directory.
456 26 September 2003: Polipo 0.6
458 * Fixed precondition handling.
459 * Fixed a bug that could lead to lockups when revalidating an object.
461 27 June 2003: Polipo 0.5
463 * Made the presence of a reader or writer explicit on the client side.
464 * Reworked closing client connections.
465 * Reworked reporting of server-side errors.
466 * Made buffer allocation lazy; idle clients and servers no longer
468 * Reworked UTC time handling to use timegm(3) when available.
470 12 March 2003: Polipo 0.4
472 * Implemented expiry of the on-disk cache.
473 * Implemented reliable aborting of connections; Polipo should no
474 * longer deadlock when a server falls into a black hole.
475 * Changed direct reads to be more aggressive by using readv in
477 * Changed serving of chunked data to be more eager about
478 serving a chunk's end marker.
479 * Implemented better reporting of DNS errors.
480 * Fixed a deadlock with pipelining on the client side.
481 * Removed most of the remaining copies when reading on the
483 * Fixed a bug that caused some headers to disappear in transit.
484 * Fixed a possible livelock when reading chunked encoding.
485 * Fixed an overflow when pipelining on the server side.
486 * Fixed generation of indexes from the on-disk cache.
487 * Fixed a DNS crash when falling back on gethostbyname.
489 1 March 2003: Polipo 0.3
491 * Implemented retrying of timed-out DNS requests.
492 * Implemented configuration mechanisms for case-insensitive atoms,
493 time values and atom lists; censoredHeaders can now be configured.
494 * No longer censors User-Agent. Blame Beppe and Alain.
495 * Changed the handling of hop-by-hop HTTP headers to deal with multiple
497 * Made client-side errors and successful revalidation no longer
498 close the connection.
499 * Fixed a bug that caused the allocation of an extraneous 2MB (!)
500 at startup. Polipo can run in 100KB once again.
501 * Fixed a refcounting bug and some incorrect frees that could
502 lead to crashes when recovering from a server-side error.
503 * Fixed a bug with POST/PUT that could trigger a failed assertion.
504 * Made sure that POST/PUT don't get scheduled in multiple pieces.
506 17 February 2003: Polipo 0.2
508 * Fixed an incorrect assertion that could cause crashes when the
510 * Fixed (hopefully) logic for 304 replies.
511 * Minor tweaks to scheduling that cause some speed increase when the
512 client is pipelining and the server is fast.
513 * Minor bug fixes and cleanups.
514 * Macro-ified do_log and friends.
516 3 February 2003: Polipo 0.1
518 * Initial public release.