lp:~measurement-factory/squid/bag6s

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

12745. By Alex Rousskov on 2013-06-06

Do not log bogus ERRORs when url_rewrite_access bypasses url_rewriter.

Same as trunk r12896.

12744. By Alex Rousskov on 2013-06-05

Do not use functions that kill Squid for parsing incoming messages.

This change prevents Squid quitting with very misleading messages such as
    FATAL: Bungled (null) line 3: sslproxy_cert_sign signTrusted all
upon receiving a malformed HTTP request.

TODO: The code should probably remember the parsing failure and use that
information during validation checks (if they are enabled) instead of
relying on zero port to fail those checks.

TODO: Squid's SECURITY ALERTs do not contain relevant information when port
parsing fails. They should do a better job of describing the failure.

12743. By Alex Rousskov on 2013-05-28

Support forwarding intercepted but not bumped connections to cache_peers.

When talking to a cache_peer (i.e., sending a CONNECT request before tunneling
the transaction), tunnel code is using a clever hack: Squid does not parse
the CONNECT response from peer but blindly forwards it to the client. This
works great and simplifies code a lot, except when the client connection
was intercepted and, hence, the client did not send a CONNECT request and
is not expecting a CONNECT response.

In those situations, we now accumulate, parse, and strip the peer CONNECT
response (or close connection on errors).

The existing tunnel I/O code is too simple to accommodate that task -- it
cannot accumulate read data (its I/O buffers work in lockstep fashion, writing
everything it reads before reading again). Instead of rewriting the entire
tunnel code to use more complex buffers, I added a temporary accumulation
buffer for the CONNECT response. That buffer is not allocated unless it is
needed and does not grow beyond SQUID_TCP_SO_RCVBUF size, just like the
simple buffers.

12742. By Alex Rousskov on 2013-05-24

Avoid segfaults on seriously malformed requests when ICAP logging is enabled.

same as trunk r12850.

12741. By Alex Rousskov on 2013-05-23

Do not quote annotation values in NotePairs::find() output
because it leads to double over-quoting when logging %{name}note.

This and other annotation quoting code may need more work.
We need to understand when it is appropriate to quote annotations
and how to quote them (especially since many annotations may have commas).

12740. By Alex Rousskov on 2013-05-22

Honor zero-padded logformat codes again, avoiding extra spaces in access log records.

Same as trunk r12844.

12739. By Alex Rousskov on 2013-05-20

Merged from trunk r12839
to fix --enable-log-daemon-helpers auto-detection, primarily.

12738. By Alex Rousskov on 2013-05-17

Merged from trunk r12832.

12737. By Alex Rousskov on 2013-05-17

note ACL

Proposed for trunk inclusion on 2013/05/16 as a part of "note" ACL group of patches.

12736. By Alex Rousskov on 2013-05-17

Merge AccessLogEntry 'helperNotes' and 'configNotes' members to 'notes' member

Proposed for trunk inclusion on 2013/05/16 as a part of "note" ACL group of patches.