Be the first to post a text review of CoreHTTP. Rate and review a project by clicking thumbs up or thumbs down in the right column.

• File released: /corehttp/corehttp-alpha-0.5.3.1/corehttp-0.5.3.1.tar.gz

  posted 835 days ago

• corehttp corehttp-alpha-0.5.3.1 file released: corehttp-0.5.3.1.tar.gz

  Fixed two flaws in HttpSprockMake. One was sscanf without limiters for string size which could result in a buffer overflow. The other involved shell command injection into the urlencoded variables. For example visiting index.pl?&&ls -l would make corehttp execute `perl index.pl &&ls-l`. Now the popen is escaped for " ' and \, and " is put around the arg in the sh command. Used realpath to further prevent symlink directory traversal. Changed license from AFL to GPL. Recommended _against_ usage of CGI until I get that more reliable. Added break;'s after sprocket->state changes in corehttp.c for good measure. Fixed a bug involving removesprocking a non-linked sprocket causing firstsprock to be null. Did general spring cleaning. Fixed parsing bug for urlencoded vars, and fixed bug in HttpSprockMake causing FIRSTSPROCK to be set to NULL. Added support for editing content-types in config file.

  posted 835 days ago

• CoreHTTP buffer overflow in NIST database

  http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-4060 Since the government considers the buffer overflow important enough to mention, I'll fix it. Serious bug fix coming soon.

  posted by ntlchy 839 days ago

• corehttp corehttp-alpha-0.5.3 file released: corehttp-alpha-0.5.3.tar.gz

  under the hood changes, fixed 20 second max transfer timeout problem. now we can send big files. added better http support - head request, 303 redirect

  posted 1198 days ago

• File released: /corehttp/corehttp-alpha-0.5.3/corehttp-alpha-0.5.3.tar.gz

  posted 1198 days ago

• corehttp corehttp-alpha-0.5.2 file released: corehttp-alpha-0.5.2.tar.gz

  Added proper directory listing. Implemented clean exit. Made forking more robust.

  posted 1205 days ago

• File released: /corehttp/corehttp-alpha-0.5.2/corehttp-alpha-0.5.2.tar.gz

  posted 1205 days ago

• corehttp corehttp-alpha-0.5.1 file released: corehttp-alpha-0.5.1.tar.gz

  fixed server null loop, client termination problems. added cgi config.

  posted 1227 days ago

• File released: /corehttp/corehttp-alpha-0.5.1/corehttp-alpha-0.5.1.tar.gz

  posted 1227 days ago

• File released: /corehttp/corehttp-alpha-0.5.0/corehttp-alpha-0.5.0.tar.gz

  posted 1229 days ago