git: b1773ff718c6 - main - www/freenginx-devel: third-party modules management
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 15 Oct 2026 10:20:06 UTC
The branch main has been updated by osa:
URL: https://cgit.FreeBSD.org/ports/commit/?id=b1773ff718c68a875ca60d45c063751cedf5edca
commit b1773ff718c68a875ca60d45c063751cedf5edca
Author: Sergey A. Osokin <osa@FreeBSD.org>
AuthorDate: 2026-10-15 10:19:39 +0000
Commit: Sergey A. Osokin <osa@FreeBSD.org>
CommitDate: 2026-10-15 10:19:39 +0000
www/freenginx-devel: third-party modules management
- update njs module to 1.0.2
Bump PORTREVISION.
Sponsored by: tipi.work
<ChangeLog>
nginx modules:
*) Bugfix: fixed response body framing and keepalive connection reuse
in ngx.fetch(). Responses with conflicting Content-Length fields,
with both Transfer-Encoding and Content-Length, or with 1xx status
codes are now rejected.
*) Bugfix: fixed enforcement of max_response_body_size for chunked
responses in ngx.fetch().
*) Bugfix: fixed parsing of js_periodic options following
worker_affinity in HTTP and Stream configurations.
*) Bugfix: fixed memory leaks and false unhandled promise rejection
reports when formatting rejection reasons in the QuickJS engine.
Core:
*) Security: fixed a memory leak when parsing malformed XML in the
njs engine. Repeated malformed input could exhaust worker process
memory.
*) Security: fixed incomplete XML attribute values containing entity
references. JavaScript accessors could return values different
from those used by XML canonicalization, affecting signed XML
validation.
*) Feature: added XMLNode.getAttributeNS() and XMLNode.getChildNS()
methods for namespace-aware attribute and child element lookup.
*) Improvement: reduced compilation memory consumption in the njs
engine and released temporary parser and generator data after
compilation.
*) Improvement: switched to constant-time HMAC signature verification
in WebCrypto.
*) Change: XML node mutation and canonicalization now reject detached
nodes, and a removed child node has an undefined $parent.
Text and attribute values must be primitive strings; null and
undefined retain their deletion semantics for these values.
addChild() and $tags reject source trees with namespaces.
Assigning to $tag$name now throws TypeError in the QuickJS engine;
deletion is still supported.
*) Change: the "test262" make target was renamed to "js_test".
The "test262" target now runs the official Test262 suite and
requires NJS_TEST262_DIR.
*) Bugfix: fixed stale XML node references after tree mutations and
a crash when repeatedly modifying a node in the QuickJS engine.
*) Bugfix: fixed XML node methods being hidden by child elements with
matching names in the QuickJS engine.
*) Bugfix: fixed XML document leaks during property existence checks
in the QuickJS engine.
*) Bugfix: fixed out-of-bounds reads and invalid frees when formatting
unhandled promise rejection reasons in the QuickJS shell.
*) Bugfix: fixed crashes and incorrect error reporting when importing
modules after a failed module compilation in the njs engine.
*) Bugfix: fixed oversized Buffer allocation lengths being truncated
instead of rejected in the QuickJS engine.
*) Bugfix: fixed use of invalidated zlib dictionary memory during
argument conversion in the QuickJS engine.
*) Bugfix: fixed UTC Date setters applying the local timezone offset
in the njs engine.
*) Bugfix: fixed Promise.any() with empty input resolving with
AggregateError instead of rejecting in the njs engine.
*) Bugfix: fixed excessive execution time and memory consumption in
Array.prototype.sort() with huge sparse arrays in the njs engine.
This closes #1095 issue on Github.
*) Bugfix: fixed Array.prototype.concat() with sparse arrays in the
njs engine.
This closes #1095 issue on Github.
*) Bugfix: fixed initialization of array literals with more than
32760 elements in the njs engine.
*) Bugfix: fixed invalid memory accesses when enumerating typed arrays
with Object.values() and Object.entries() in the njs engine.
This closes #1098 issue on Github.
*) Bugfix: fixed invalid memory accesses in Object.defineProperty()
with reentrant property descriptors in the njs engine.
This closes #1089 issue on Github.
*) Bugfix: fixed object-to-primitive conversion when user code
replaced the input value during conversion in the njs engine.
This closes #1094 issue on Github.
*) Bugfix: fixed memory corruption in RegExp replace and split
operations with custom exec() results in the njs engine.
This closes #1090, #1091, #1092, #1093, #1096, and #1097 issues
on Github.
*) Bugfix: fixed out-of-bounds reads in RegExp replacement with
inconsistent match objects in the njs engine.
Thanks to Basavaraj S m.
*) Bugfix: fixed out-of-bounds reads in RegExp named capture lookup
in the njs engine.
This closes #1088 issue on Github.
*) Bugfix: fixed parsing of for loop initializers and preservation of
lexical bindings across nested declarations in the njs engine.
*) Bugfix: prevented stack overflow when compiling deeply nested
expressions in the njs engine by limiting recursive analysis.
<ChangeLog>
---
www/freenginx-devel/Makefile | 2 +-
www/freenginx-devel/Makefile.extmod | 2 +-
www/freenginx-devel/distinfo | 6 +++---
3 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/www/freenginx-devel/Makefile b/www/freenginx-devel/Makefile
index 0f13823eb434..44495ae08ef7 100644
--- a/www/freenginx-devel/Makefile
+++ b/www/freenginx-devel/Makefile
@@ -1,7 +1,7 @@
PORTNAME= freenginx
PORTVERSION= ${NGINX_VERSION}
.include "version.mk"
-PORTREVISION= 5
+PORTREVISION= 6
CATEGORIES= www
MASTER_SITES= https://freenginx.org/download/ \
LOCAL/osa
diff --git a/www/freenginx-devel/Makefile.extmod b/www/freenginx-devel/Makefile.extmod
index 4c0ce1f4c2be..7e8e247c02f7 100644
--- a/www/freenginx-devel/Makefile.extmod
+++ b/www/freenginx-devel/Makefile.extmod
@@ -254,7 +254,7 @@ NAXSI_EXTRA_PATCHES= ${PATCHDIR}/extra-patch-naxsi-libinjection__sqli_c \
${PATCHDIR}/extra-patch-naxsi_config
NAXSI_VARS= DSO_EXTMODS+=naxsi NAXSI_SUBDIR=/naxsi_src
-NJS_GH_TUPLE= nginx:njs:1.0.1:njs
+NJS_GH_TUPLE= nginx:njs:1.0.2:njs
NJS_CFLAGS= -I ${LOCALBASE}/include/quickjs
NJS_CONFIGURE_ARGS= --cc-opt="${CFLAGS}" --ld-opt="${LDFLAGS}" --with-quickjs
NJS_IMPLIES= HTTP STREAM
diff --git a/www/freenginx-devel/distinfo b/www/freenginx-devel/distinfo
index 201307aff737..138720a0c133 100644
--- a/www/freenginx-devel/distinfo
+++ b/www/freenginx-devel/distinfo
@@ -1,4 +1,4 @@
-TIMESTAMP = 1788624298
+TIMESTAMP = 1792059330
SHA256 (freenginx-1.31.4.tar.gz) = 23d784d93e13ac8febf6dd209631e056bc8c4046769804c6ef3c56d401734e27
SIZE (freenginx-1.31.4.tar.gz) = 1256428
SHA256 (nginx_mogilefs_module-1.0.4.tar.gz) = 7ac230d30907f013dff8d435a118619ea6168aa3714dba62c6962d350c6295ae
@@ -117,8 +117,8 @@ SHA256 (wargio-naxsi-1.7_GH0.tar.gz) = adee817da71913f64a9fb0fca142d9520bb0e5014
SIZE (wargio-naxsi-1.7_GH0.tar.gz) = 1132392
SHA256 (libinjection-libinjection-b9fcaaf_GH0.tar.gz) = 7812e1316b61a7a7d3a65a57a07c6d5235ac40fe35e6edda983f31a44661a38e
SIZE (libinjection-libinjection-b9fcaaf_GH0.tar.gz) = 2218207
-SHA256 (nginx-njs-1.0.1_GH0.tar.gz) = 74372cfcbf11eb0a71bc555e19dc785f61d561d5663d254474da6c8c9e50a6a7
-SIZE (nginx-njs-1.0.1_GH0.tar.gz) = 1003218
+SHA256 (nginx-njs-1.0.2_GH0.tar.gz) = 84a114499fa6878d3ec52b99c1cf2874a91eb0d915408f418a2b1279519f09ae
+SIZE (nginx-njs-1.0.2_GH0.tar.gz) = 1071822
SHA256 (osokin-nginx-otel-ed35139_GH0.tar.gz) = ae35317e2f01481b6511f4b4b6366233193cab19db2cc8fe0da4f2d3529efe68
SIZE (osokin-nginx-otel-ed35139_GH0.tar.gz) = 28117
SHA256 (konstruxi-ngx_postgres-8aa7359_GH0.tar.gz) = c69ad4495de7c7883ebc23e1e6c4cc83a4ac6a7fddd4d5c12e49d33b65f7c50b