<feed xmlns='http://www.w3.org/2005/Atom'>
<title>otp.git/lib/inets/src/http_client, branch KennethL-patch-1</title>
<subtitle>Mirror of Erlang/OTP repository.
</subtitle>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/'/>
<entry>
<title>inets: Eliminate race condition</title>
<updated>2017-11-17T08:35:12+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2017-11-14T07:53:01+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=6eba2a32f2585bfd1d94fa1066167901213d0408'/>
<id>6eba2a32f2585bfd1d94fa1066167901213d0408</id>
<content type='text'>
Only run test case for http as the socket manipulation done by the test case
requires much more manipulation to work for https. However, that this test case
started failing constantly instead of sporadically is proof that this change
is a good thing.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Only run test case for http as the socket manipulation done by the test case
requires much more manipulation to work for https. However, that this test case
started failing constantly instead of sporadically is proof that this change
is a good thing.
</pre>
</div>
</content>
</entry>
<entry>
<title>[#ERL-407]: Fix httpc misbehaviour based on RFC7230, section 3.3.3</title>
<updated>2017-10-29T20:26:42+00:00</updated>
<author>
<name>Hamidreza Soleimani</name>
<email>hamidreza.s@gmail.com</email>
</author>
<published>2017-10-29T13:33:02+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=70a813c20a829ed47feb6a4b2e7b0332adac6c4f'/>
<id>70a813c20a829ed47feb6a4b2e7b0332adac6c4f</id>
<content type='text'>
If a message is received with both a Transfer-Encoding and a
Content-Length header field, it might indicate an attempt to
perform request smuggling or response splitting and must be
handled as an error in default mode (not relaxed mode).

Bug report: https://bugs.erlang.org/browse/ERL-407
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
If a message is received with both a Transfer-Encoding and a
Content-Length header field, it might indicate an attempt to
perform request smuggling or response splitting and must be
handled as an error in default mode (not relaxed mode).

Bug report: https://bugs.erlang.org/browse/ERL-407
</pre>
</div>
</content>
</entry>
<entry>
<title>inets: Correct guard test</title>
<updated>2017-10-26T14:46:57+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2017-10-26T14:34:15+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=05390c5a5a0b0657166d5c3c10e1a055cfe66e88'/>
<id>05390c5a5a0b0657166d5c3c10e1a055cfe66e88</id>
<content type='text'>
Guard test for error case was not updated to handle httpc stream concept
properly.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Guard test for error case was not updated to handle httpc stream concept
properly.
</pre>
</div>
</content>
</entry>
<entry>
<title>Update copyright year</title>
<updated>2017-06-14T13:36:21+00:00</updated>
<author>
<name>Hans Nilsson</name>
<email>hans@erlang.org</email>
</author>
<published>2017-06-14T13:36:21+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=43718d3b81d7f3d08e25047e22d579801bbe5044'/>
<id>43718d3b81d7f3d08e25047e22d579801bbe5044</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>inets: httpc - Gracefull normal shutdown</title>
<updated>2017-05-30T09:29:03+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2017-05-30T09:29:03+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=8fe699b8ca17a3e9e1a3cd1821e112b9983a74ae'/>
<id>8fe699b8ca17a3e9e1a3cd1821e112b9983a74ae</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix httpc timeout for redirects</title>
<updated>2017-05-23T06:44:03+00:00</updated>
<author>
<name>Johannes Weißl</name>
<email>jargon@molb.org</email>
</author>
<published>2017-05-14T21:35:37+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=fb4c7f27d050a167335a4274327cf1f8d8cc9aba'/>
<id>fb4c7f27d050a167335a4274327cf1f8d8cc9aba</id>
<content type='text'>
Probably since 6153ba7 (OTP R13B04) the httpc timeout setting does not
work for redirects (when autoredirect is true). With this patch a new
timer is started for the new (redirected) requests. This means that a
simple redirected request could return after 2*timeout milliseconds.

This is the first part to fix https://bugs.erlang.org/browse/ERL-420
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Probably since 6153ba7 (OTP R13B04) the httpc timeout setting does not
work for redirects (when autoredirect is true). With this patch a new
timer is started for the new (redirected) requests. This means that a
simple redirected request could return after 2*timeout milliseconds.

This is the first part to fix https://bugs.erlang.org/browse/ERL-420
</pre>
</div>
</content>
</entry>
<entry>
<title>Update copyright year</title>
<updated>2017-05-04T13:42:21+00:00</updated>
<author>
<name>Raimo Niskanen</name>
<email>raimo@erlang.org</email>
</author>
<published>2017-05-04T13:42:21+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=83e20c62057ebc1d8064bf57b01be560cd244e1d'/>
<id>83e20c62057ebc1d8064bf57b01be560cd244e1d</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'maint'</title>
<updated>2017-04-04T15:18:22+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2017-04-04T14:44:13+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=fbe1980e5ca85e516648420e0fed0d00b20a0529'/>
<id>fbe1980e5ca85e516648420e0fed0d00b20a0529</id>
<content type='text'>
Conflicts:
	OTP_VERSION
	erts/vsn.mk
	lib/crypto/c_src/crypto.c
	lib/crypto/src/crypto.erl
	lib/ssh/src/ssh.erl
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Conflicts:
	OTP_VERSION
	erts/vsn.mk
	lib/crypto/c_src/crypto.c
	lib/crypto/src/crypto.erl
	lib/ssh/src/ssh.erl
</pre>
</div>
</content>
</entry>
<entry>
<title>Omit port from Host header on redirect to well-known port</title>
<updated>2017-03-17T08:35:49+00:00</updated>
<author>
<name>Bram Verburg</name>
<email>bram.verburg@voltone.net</email>
</author>
<published>2017-03-17T08:35:49+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=a13e73d70d2af0a686701a3c8b16b82b664abd19'/>
<id>a13e73d70d2af0a686701a3c8b16b82b664abd19</id>
<content type='text'>
ERL-316, as part of 19.3, adds the port number to the Host header
upon automatic redirection. The port number is included even if it
is a well-known port (80, 443). This is different from the
behaviour of most HTTP clients, as well as httpc's own for new
requests.

The added port number can lead to problems such as this one, where
the request signature assumes the client will not send the :443
suffix on redirection to an https URL:
https://github.com/nerves-project/nerves/issues/96

I was unable to add a test case, since that would require a server
on a well-known port, but I manually verified that the GitHub/S3
signing issue was indeed resolved with this patch.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
ERL-316, as part of 19.3, adds the port number to the Host header
upon automatic redirection. The port number is included even if it
is a well-known port (80, 443). This is different from the
behaviour of most HTTP clients, as well as httpc's own for new
requests.

The added port number can lead to problems such as this one, where
the request signature assumes the client will not send the :443
suffix on redirection to an https URL:
https://github.com/nerves-project/nerves/issues/96

I was unable to add a test case, since that would require a server
on a well-known port, but I manually verified that the GitHub/S3
signing issue was indeed resolved with this patch.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix typos: lenght -&gt; length</title>
<updated>2017-03-01T17:34:50+00:00</updated>
<author>
<name>Myron Marston</name>
<email>myron.marston@gmail.com</email>
</author>
<published>2017-03-01T17:34:50+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=eb437db9e7df90d5e72d6314ee7c49cbde77135a'/>
<id>eb437db9e7df90d5e72d6314ee7c49cbde77135a</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
