Changes since version 2.3.10 : Alex (1): DOC: use the req.ssl_sni in examples Alexandar Lazic (1): DOC/MINOR: move uuid in the configuration to the right alphabetical order Amaury Denoyelle (5): BUG/MINOR: http_fetch: fix possible uninit sockaddr in fetch_url_ip/port BUG/MAJOR: server: prevent deadlock when using 'set maxconn server' BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check REGTESTS: fix maxconn update with agent-check Christopher Faulet (28): BUG/MINOR: mux-fcgi: Don't send normalized uri to FCGI application BUG/MINOR: htx: Preserve HTX flags when draining data from an HTX message BUG/MINOR: applet: Notify the other side if data were consumed by an applet BUG/MINOR: hlua: Don't rely on top of the stack when using Lua buffers BUG/MINOR: stream: Decrement server current session counter on L7 retry BUG/MINOR: stream: Reset stream final state and si error type on L7 retry BUG/MINOR: checks: Handle synchronous connect when a tcpcheck is started BUG/MINOR: checks: Reschedule check on observe mode only if fastinter is set MINOR: channel: Rely on HTX version if appropriate in channel_may_recv() BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive MINOR: conn-stream: Force mux to wait for read events if abortonclose is set MEDIUM: mux-h1: Don't block reads when waiting for the other side BUG/MEDIUM: mux-h1: Properly report client close if abortonclose option is set REGTESTS: Add script to test abortonclose option BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry BUG/MEDIUM: compression: Add a flag to know the filter is still processing data BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default DOC: lua: Add a warning about buffers modification in HTTP BUILD: cfgparse-ssl: Remove const from defpx param in keylog parsing function BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI BUG/MINOR: server/cli: Fix locking in function processing "set server" command MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules DOC: config: Add missing actions in "tcp-request session" documentation BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules Daniel Black (1): DOC: config: use CREATE USER for mysql-check Dirkjan Bussink (1): BUG/MINOR: checks: return correct error code for srv_parse_agent_check Emeric Brun (16): BUG/MEDIUM: peers: initialize resync timer to get an initial full resync BUG/MEDIUM: peers: register last acked value as origin receiving a resync req BUG/MEDIUM: peers: stop considering ack messages teaching a full resync BUG/MEDIUM: peers: reset starting point if peers appears longly disconnected BUG/MEDIUM: peers: reset commitupdate value in new conns BUG/MEDIUM: peers: re-work updates lookup during the sync on the fly BUG/MEDIUM: peers: reset tables stage flags stages on new conns MINOR: peers: add informative flags about resync process for debugging BUG/MEDIUM: dns: reset file descriptor if send returns an error BUG/MEDIUM: dns: send messages on closed/reused fd if fd was detected broken BUG/MINOR: resolvers: answser item list was randomly purged or errors MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item MEDIUM: resolvers: add a ref between servers and srv request or used SRV record BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs BUG/MINOR: stick-table: fix several printf sign errors dumping tables DOC: stick-table: add missing documentation about gpt0 stored type Remi Tricot-Le Breton (15): BUG/MEDIUM: ebtree: Invalid read when looking for dup entry BUG/MINOR: server: Missing calloc return value check in srv_parse_source BUG/MINOR: peers: Missing calloc return value check in peers_register_table BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list BUG/MINOR: http: Missing calloc return value check while parsing redirect rule BUG/MINOR: http: Missing calloc return value check in make_arg_list BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future William Lallemand (2): BUG/MINOR: ssl/cli: fix a lock leak when no memory available BUILD: make tune.ssl.keylog available again Willy Tarreau (24): REGTESTS: add minimal CLI "add map" tests BUG/MEDIUM: cli: prevent memory leak on write errors MINOR: compat: automatically include malloc.h on glibc MEDIUM: pools: call malloc_trim() from pool_gc() MINOR: pools/debug: slightly relax DEBUG_DONT_SHARE_POOLS MINOR: debug: add a new "debug dev sym" command in expert mode BUG/MINOR: stream: properly clear the previous error mask on L7 retries BUG/MINOR: lua/vars: prevent get_var() from allocating a new name BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush() MINOR: pools: do not maintain the lock during pool_flush() MINOR: pools: call malloc_trim() under thread isolation MEDIUM: pools: use a single pool_gc() function for locked and lockless BUG/MAJOR: pools: fix possible race with free() in the lockless variant CLEANUP: pools: remove now unused seq and pool_free_list BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE BUG/MINOR: ssl: use atomic ops to update global shctx stats BUG/MINOR: mworker: fix typo in chroot error message BUG/MAJOR: queue: set SF_ASSIGNED when setting strm->target on dequeue MINOR: backend: only skip LB when there are actual connections BUG/MINOR: stats: make "show stat typed desc" work again MINOR: mux-h2: obey http-ignore-probes during the preface BUG/MEDIUM: sock: make sure to never miss early connection failures BUG/MINOR: cli: fix server name output in "show fd" DOC: peers: fix the protocol tag name in the doc