Changes since version 2.3.10 : Alex (1): DOC: use the req.ssl_sni in examples Alexandar Lazic (1): DOC/MINOR: move uuid in the configuration to the right alphabetical order Amaury Denoyelle (3): BUG/MINOR: http_fetch: fix possible uninit sockaddr in fetch_url_ip/port BUG/MAJOR: server: prevent deadlock when using 'set maxconn server' BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id Christopher Faulet (23): BUG/MINOR: mux-fcgi: Don't send normalized uri to FCGI application BUG/MINOR: htx: Preserve HTX flags when draining data from an HTX message BUG/MINOR: applet: Notify the other side if data were consumed by an applet BUG/MINOR: hlua: Don't rely on top of the stack when using Lua buffers BUG/MINOR: stream: Decrement server current session counter on L7 retry BUG/MINOR: stream: Reset stream final state and si error type on L7 retry BUG/MINOR: checks: Handle synchronous connect when a tcpcheck is started BUG/MINOR: checks: Reschedule check on observe mode only if fastinter is set MINOR: channel: Rely on HTX version if appropriate in channel_may_recv() BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive MINOR: conn-stream: Force mux to wait for read events if abortonclose is set MEDIUM: mux-h1: Don't block reads when waiting for the other side BUG/MEDIUM: mux-h1: Properly report client close if abortonclose option is set REGTESTS: Add script to test abortonclose option BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry BUG/MEDIUM: compression: Add a flag to know the filter is still processing data BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default DOC: lua: Add a warning about buffers modification in HTTP BUILD: cfgparse-ssl: Remove const from defpx param in keylog parsing function Emeric Brun (10): BUG/MEDIUM: peers: initialize resync timer to get an initial full resync BUG/MEDIUM: peers: register last acked value as origin receiving a resync req BUG/MEDIUM: peers: stop considering ack messages teaching a full resync BUG/MEDIUM: peers: reset starting point if peers appears longly disconnected BUG/MEDIUM: peers: reset commitupdate value in new conns BUG/MEDIUM: peers: re-work updates lookup during the sync on the fly BUG/MEDIUM: peers: reset tables stage flags stages on new conns MINOR: peers: add informative flags about resync process for debugging BUG/MEDIUM: dns: reset file descriptor if send returns an error BUG/MEDIUM: dns: send messages on closed/reused fd if fd was detected broken Remi Tricot-Le Breton (15): BUG/MEDIUM: ebtree: Invalid read when looking for dup entry BUG/MINOR: server: Missing calloc return value check in srv_parse_source BUG/MINOR: peers: Missing calloc return value check in peers_register_table BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list BUG/MINOR: http: Missing calloc return value check while parsing redirect rule BUG/MINOR: http: Missing calloc return value check in make_arg_list BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future William Lallemand (2): BUG/MINOR: ssl/cli: fix a lock leak when no memory available BUILD: make tune.ssl.keylog available again Willy Tarreau (21): REGTESTS: add minimal CLI "add map" tests BUG/MEDIUM: cli: prevent memory leak on write errors MINOR: compat: automatically include malloc.h on glibc MEDIUM: pools: call malloc_trim() from pool_gc() MINOR: pools/debug: slightly relax DEBUG_DONT_SHARE_POOLS MINOR: debug: add a new "debug dev sym" command in expert mode BUG/MINOR: stream: properly clear the previous error mask on L7 retries BUG/MINOR: lua/vars: prevent get_var() from allocating a new name BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush() MINOR: pools: do not maintain the lock during pool_flush() MINOR: pools: call malloc_trim() under thread isolation MEDIUM: pools: use a single pool_gc() function for locked and lockless BUG/MAJOR: pools: fix possible race with free() in the lockless variant CLEANUP: pools: remove now unused seq and pool_free_list BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE BUG/MINOR: ssl: use atomic ops to update global shctx stats BUG/MINOR: mworker: fix typo in chroot error message BUG/MAJOR: queue: set SF_ASSIGNED when setting strm->target on dequeue MINOR: backend: only skip LB when there are actual connections BUG/MINOR: stats: make "show stat typed desc" work again MINOR: mux-h2: obey http-ignore-probes during the preface