- Oct 11, 2003
-
-
rswindell authored
or socket object as first arg. Removed debug log output.
-
- Oct 09, 2003
-
-
rswindell authored
recycling without using semaphore files.
-
- Sep 26, 2003
-
-
rswindell authored
back to callback functions (e.g. lputs, thread_up, etc). This allows servers to share the same callback functions, eliminating many nearly-identical functions. This was able to shave quite a bit of redundant code from ntsvcs.c. This feature is not utilized in sbbs (sbbscon.c) or sbbsctrl (mainformunit.cpp).
-
- Sep 20, 2003
-
-
rswindell authored
-
- Sep 19, 2003
- Sep 16, 2003
-
-
rswindell authored
file: context stack size, branch limit, yield and garbage collection intervals. Each service (configured in services.ini) can over-ride these parameters if new values are specified allowing maximum configurability.
-
rswindell authored
Moved definition of MAX_LINE_LEN to ini_file.c, renamed to INI_*.
-
- Sep 10, 2003
-
-
rswindell authored
(pointer to server/service/host-process termination requested flag) so js.terminated should be used in place of server.terminated for universal scripts.
-
rswindell authored
-
rswindell authored
but with different names (e.g. branch.counter is now js.branch_counter). This object will now be used for other internal JS monitoring/control functions (e.g. garbage collection). js_internal.c/o/obj now replaces js_branch.*.
-
- Sep 09, 2003
- Sep 02, 2003
-
-
deuce authored
to track down the issue, I finally gave up... as a result, there is a new feature! Linux will no longer completely drop it's root privs (It never really did anyways, and you couldn't possibly make it... but now it does so even less) As a result, Linux can now recycle all servers when running as non-root. From a security standpoint, doing this is more secure than running as root, but less secure than the behaviour on POSIX.4 compliant pthreads. Running the BBS as root means that if a user can create a file with the name of his choice, or pass *any* command through to a shell, that user will get root access to the machine. Using the new behaviour, the user would need to trick the Synchronet binary itself into executing arbitrary and specially crafted code... probobly using the dreaded buffer overflow... of which there are probobly some in the web server code. :-) If the user can do this much more tricky feat, then the user gets root privs. If not, the user will have to find something else to exploit on your system. Knowing that some *BSD users (surely not OpenBSD users though) will want to trade security for convenience, I stole a page out of the Sendmail book and implemented a "DONT_BLAME_SYNCHRONET" make option. Compiling like this: gmake DONT_BLAME_SYNCHRONET=1 Will implement this same behaviour on non-Linux platforms. Allowing this partial security feature.
-
- Aug 29, 2003
- Aug 28, 2003
- Aug 27, 2003
-
-
rswindell authored
used to specify a service that only runs on a specific host (for multi-hosted BBSes).
-
- Jul 30, 2003
-
-
rswindell authored
-
- Jul 27, 2003
-
-
rswindell authored
Now points to permanent user storage (in private service_client_t buffer).
-
- Jul 25, 2003
- Jul 23, 2003
-
-
rswindell authored
"max_bytes" value is insufficient for the number of configured items: by defining dynamically created objects and arrays as properties of child objects of the global object immediately after such objects are created, they are "implicitly rooted", protecting them from (unexpected) garbage collection. Now the initialization will simply fail with a nice "out of memory" error. This was a long-standing bug that rarely occurred in the wild.
-
- Jul 22, 2003
- Jul 21, 2003
- Jul 09, 2003
-
-
rswindell authored
servers) - needs work (timeout support, LF-termination, etc).
-
- Jul 08, 2003
-
-
rswindell authored
JS_BranchCallback behavior in regards to infinite-loop detection, periodic garbage collection, and periodic time-slice yields. Eliminated global reset_loop() method, ill side-effects. Use branch.limit=0 instead to defeat infinite-loop detection mechanism (e.g. for static services).
-
- Jul 07, 2003
-
-
rswindell authored
service until the terminated property is set.
-
- Jul 04, 2003
-
-
rswindell authored
print() is now an alias for writeln().
-
- Jun 12, 2003
-
-
rswindell authored
local logging and remote printing of the same string easy: writeln(log("some string"));
-
- Jun 07, 2003
- May 14, 2003
-
-
rswindell authored
-