Releases: OISF/libhtp
Releases · OISF/libhtp
0.5.15
0.5.14
0.5.13
0.5.12
0.5.11
0.5.10
This is a minor maintenance release.
- Fixed [#63] Final response body data callback missing on compressed responses.
- Do not consume the byte that comes after an invalid UTF-8 character.
- Use case insensitive comparison for content-coding values. Warn if unknown
response content encoding is encountered. - Small fixes. [#66, #69] [Victor Julien]
0.5.9
0.5.8
This release fixes the faulty base64 code that was failing on PowerPC, ARM, and S390 architectures. If you are running any of these architectures you are advised to upgrade. If you are not, then this is only a minor update that fixes an incorrect warning message.
0.5.7
This is a minor patch release that fixes several small issues that are unlikely to manifest in practice:
- Use umask() with mkstemp() to ensure that temporary files are created with correct permissions. This addresses the potential security problem, but creates another, because umask() is not thread safe. For this and other reasons (see #52), file extraction will be removed in a future release.
- Fix copying hook_response_complete instead of hook_transaction_complete.
- Fix several small memory leaks that occur when memory allocation fails.
0.5.6
This is the first release in the 0.5.x branch, which is now feature-complete, considered beta, and ready for wider testing.
The following are the changes since the previous version:
- Fix memory leaks in htp_tx_t::request_auth_username and htp_tx_t::request_auth_password.
- [#43] When processing the response line, treat stream closure as the end of line.
- Fix normalization when the URL begins with "./".
- Do not fail a stream with an incorrectly formed digest username.
- Do not stop processing request headers on PUT requests.