<feed xmlns='http://www.w3.org/2005/Atom'>
<title>busybox-w32/networking/httpd_ratelimit_cgi.c, branch cron_changes</title>
<subtitle>A mirror of https://github.com/rmyorston/busybox-w32.git
</subtitle>
<id>https://git.lua4.win/busybox-w32/atom?h=cron_changes</id>
<link rel='self' href='https://git.lua4.win/busybox-w32/atom?h=cron_changes'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/'/>
<updated>2026-01-29T11:01:56+00:00</updated>
<entry>
<title>tar: strip unsafe hardlink components - GNU tar does the same</title>
<updated>2026-01-29T11:01:56+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-01-29T10:48:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=3fb6b31c716669e12f75a2accd31bb7685b1a1cb'/>
<id>urn:sha1:3fb6b31c716669e12f75a2accd31bb7685b1a1cb</id>
<content type='text'>
Defends against files like these (python reproducer):

import tarfile
ti = tarfile.TarInfo("leak_hosts")
ti.type = tarfile.LNKTYPE
ti.linkname = "/etc/hosts"  # or "../etc/hosts" or ".."
ti.size = 0
with tarfile.open("/tmp/hardlink.tar", "w") as t:
	t.addfile(ti)

function                                             old     new   delta
skip_unsafe_prefix                                     -     127    +127
get_header_tar                                      1752    1754      +2
.rodata                                           106861  106856      -5
unzip_main                                          2715    2706      -9
strip_unsafe_prefix                                  102      18     -84
------------------------------------------------------------------------------
(add/remove: 1/0 grow/shrink: 1/3 up/down: 129/-98)            Total: 31 bytes

Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>httpd: optimize example CGIs</title>
<updated>2026-01-26T06:21:11+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-01-26T06:15:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=28e4d2b854d7072c510f416acd2eea5dcdbc346a'/>
<id>urn:sha1:28e4d2b854d7072c510f416acd2eea5dcdbc346a</id>
<content type='text'>
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>httpd: simplify CGI code a bit, add a bunch of TODOs and FIXMEs</title>
<updated>2026-01-23T01:18:30+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-01-23T01:10:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=01ea35e81d7f3dcc9d5032ac53b794a5e9d7cedd'/>
<id>urn:sha1:01ea35e81d7f3dcc9d5032ac53b794a5e9d7cedd</id>
<content type='text'>
function                                             old     new   delta
log_and_exit                                          33      25      -8
handle_incoming_and_exit                            2298    2290      -8
send_cgi_and_exit                                    784     770     -14
cgi_io_loop_and_exit                                 538     477     -61
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 0/4 up/down: 0/-91)             Total: -91 bytes

Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>networking/httpd_ratelimit_cgi.c: new example CGI handler</title>
<updated>2026-01-21T17:47:56+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-01-21T17:43:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=58b46b7d67c4063aafb94bf82f4e2f3d6e0e3878'/>
<id>urn:sha1:58b46b7d67c4063aafb94bf82f4e2f3d6e0e3878</id>
<content type='text'>
   text	   data	    bss	    dec	    hex	filename
   4003	     40	    352	   4395	   112b	httpd_ratelimit_cgi

Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
</feed>
