Fossil

Timeline
Login

Timeline

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

200 check-ins occurring around 42f569238e53dd2a.

2011-10-18
23:37
When editing the properties of a check-in and comparing the old and new comment text, ignore leading and trailing whitespace and the differences between \r\n and \n. Hopefully this will reduce the number of unwanted comment edits. ... (check-in: 48928829 user: drh tags: trunk)
21:20
Adding a space I forgot in in the html output. ... (Closed-Leaf check-in: 61523cbe user: viriketo tags: targets_setting)
20:55
Adding a boolean setting to choose the use of 'targets' in the anchors href. Default enabled.

Related to the thread starting at http://www.mail-archive.com/fossil-users@lists.fossil-scm.org/msg06588.html ... (check-in: d29df2f0 user: viriketo tags: targets_setting)

19:49
Bringing the changes I had in [4bae75a08e] to a trunk-derived branch. ... (check-in: ef5d2176 user: viriketo tags: annotate_links)
19:45
Should fix ticket [f0f9aff371f2].

Until now, the annotate_cmd was taking the last (or any?) checkin that had the artifact to be annotated, totally unrelated to what version is checked out.

I made annotate_cmd respect the checkout, and annotate only from the past until the checked out version. This makes the command slower, but at least does what I'd like it to do. Maybe someone else can come up with a faster or simpler implementation.

I changed the compute_direct_ancestors code so I could call it twice in a single run. ... (Closed-Leaf check-in: c7c4279f user: viriketo tags: annotatecmd_fix)

13:06
add support for fetching text file content and checkin history via /artifact json request ... (check-in: 3d1d139a user: zach tags: json-multitag-test, json)
2011-10-17
23:12
Fix typo in warning message. ... (check-in: c80ee413 user: drh tags: trunk)
18:03
Removed some dead code. Experimentally enabled jQuery ajax back-end to test a problem on my 3DS. ... (check-in: ebb0c047 user: stephan tags: json-multitag-test, json)
16:08
merged in trunk [fda7c2c63d] for side-by-side diffs. ... (check-in: 571f3aca user: stephan tags: json-multitag-test, json)
16:01
Fixed an incorrect const qualifier (caught by clang). ... (check-in: fda7c2c6 user: stephan tags: trunk)
13:09
Font size adjustments for side-by-side diff. Use the dp= query parameter of timeline on the info page. ... (check-in: eefb3168 user: drh tags: trunk)
11:37
Fix the labeling of timelines with the dp=UUID query parameter. ... (check-in: a47fde8e user: drh tags: trunk)
01:19
Merge the side-by-side diff code into trunk. ... (check-in: 0bde74ea user: drh tags: trunk)
01:18
Remove unused variables and surplus blank lines from the side-by-side diff code. ... (Closed-Leaf check-in: a92908a6 user: drh tags: jan-sbsdiff)
01:12
Add new warnings for when Fossil overwrites an unmanged file on "update" or "merge". Undo has been and continues to be available to recover the overwritten files. ... (check-in: 39f979b0 user: drh tags: trunk)
00:26
Rephrasing and fixed a typo. ... (check-in: 8e358aa8 user: jan tags: jan-sbsdiff)
2011-10-16
23:24
Merge the latest trunk changes into the side-by-side diff branch. ... (check-in: 23c3affa user: drh tags: jan-sbsdiff)
23:10
Fix a typo in the timeline EVENT table entries generated by "fossil rebuild" in the previous check-in. ... (check-in: fd486df4 user: drh tags: trunk)
23:00
Show tag changes on the timeline. A "fossil rebuild" is required to take advantage of this new feature. Also put a • character in front of non-checkin timeline entries to make them stand out more. ... (check-in: 87540ed6 user: drh tags: trunk)
21:04
Renamed 1/2-pane diffs to unified and side-by-side in the ui. ... (check-in: ff9de303 user: jan tags: jan-sbsdiff)
17:32
Fix new and harmless compiler warnings that appeared with the upgrade to GCC 4.6.1. ... (check-in: d8bbe4ad user: drh tags: trunk)
16:19
Add sbsdiff options when using show-version-diffs. ... (check-in: adace758 user: jan tags: jan-sbsdiff)
14:33
Removed a GNU-make-only construct which broke Jan's build. ... (check-in: 8da84326 user: stephan tags: json-multitag-test, json)
13:35
Set explicit background color for sbsdiff table in skins. ... (check-in: f4f5e055 user: jan tags: jan-sbsdiff)
13:29
pulled in latest cson for cson_object_merge(). ... (check-in: d3ad893c user: stephan tags: json-multitag-test, json)
13:29
fixed a memleak of parent artifact uuid. long live valgrind. ... (check-in: 3db8bfc5 user: stephan tags: json-multitag-test, json)
12:56
Merge latest changes from trunk ... (check-in: 1349e5ed user: ashish tags: ashish-ipv6)
12:53
Add initial IPv6 support code ... (check-in: 92c59f12 user: ashish tags: ashish-ipv6)
10:04
merged/resolved trunk [ee723ed98ddb0a]. ... (check-in: a40ac8fd user: stephan tags: json-multitag-test, json)
09:49
minor doc clarification. ... (check-in: 398b53e0 user: stephan tags: json-multitag-test, json)
02:07
Separate sbsdiff block separator meta-rows a little more from regular rows in built-in skin 4. ... (check-in: 7a47abe1 user: jan tags: jan-sbsdiff)
00:14
Updated styles/skins. Built-in skin 4 can now wrap lines. ... (check-in: 1c40493c user: jan tags: jan-sbsdiff)
2011-10-15
21:25
Add sbsdiff link to the /info page. ... (check-in: 286f0950 user: jan tags: jan-sbsdiff)
18:45
Add button to toggle sbsdiff for /vdiff views. Renamed the button in /fdiff. ... (check-in: d1f63cd8 user: jan tags: jan-sbsdiff)
18:05
Add button to toggle sbsdiff for /fdiff views. ... (check-in: d0988fb5 user: jan tags: jan-sbsdiff)
17:36
Vary the number of columns of displayed files in the File List depending on the length of the longest filename in the list. ... (check-in: ee723ed9 user: drh tags: trunk)
17:18
Update to the Fossil-v-Git matrix. ... (check-in: a5228787 user: drh tags: trunk)
15:42
Merge the latest trunk changes into the side-by-side diff branch. ... (check-in: 15de70c2 user: drh tags: jan-sbsdiff)
14:33
Updated comments. Slightly more centralization of sbsdiff table generation. ... (check-in: c5ac4f80 user: jan tags: jan-sbsdiff)
12:49
Fix bug which disabled patch file generation. ... (check-in: dc27e134 user: jan tags: jan-sbsdiff)
12:30
Fix clang static analyzer warnings about deref null pointers and undefined values. There are still lots of dead code warnings, but those are harmless. ... (check-in: 63069145 user: drh tags: trunk)
12:22
Make sure sbsdiff lines are escaped properly. Started adding side-by-side diff support to fdiff. ... (check-in: ff41d4be user: jan tags: jan-sbsdiff)
12:16
Mark functions that never return (ex: fossil_panic()) as such so that static analyzers can do a better job of pruning paths. ... (check-in: 86d2b4ef user: drh tags: trunk)
10:40
Update the built-in SQLite and the SQL command-line shell to the latest code from the SQLite trunk: version 3.7.9 alpha. This fixes some warnings that started appearing after upgrading to gcc 4.6.1. ... (check-in: 3dd0c155 user: drh tags: trunk)
10:17
A very simple fix to the annotate memory leak problem. ... (check-in: 9929bab7 user: drh tags: trunk)
00:26
Code documentation. ... (check-in: 9b7955b5 user: jan tags: jan-sbsdiff)
00:10
The link p in the annotate page was totally bad implemented. As I don't see an easy way to implement it, I take it out. There is only d left. ... (check-in: 4bae75a0 user: viriketo tags: annotate_links)
00:06
The plink is not needed at all in the annotate query ... (check-in: 40cbb69c user: viriketo tags: annotate_links)
2011-10-14
23:38
Starting a branch to add more information into the annotate web page.

I added a link p to the annotation of the version previous to that line change, and a link d to the checkin file diff that introduced the given line.

I'd want also the links to bring the users to the concerning line of annotate; we should have something like line numbering and line anchors, like the artifact page. ... (check-in: 9e3b6ad0 user: viriketo tags: annotate_links)

22:21
Added two (local) options to sbsdiff (allow expansion and max columns limit), though they can't be changed in runtime yet. Added some missing error handling. ... (check-in: 47cdbbf2 user: jan tags: jan-sbsdiff)
22:20
Making 'fossil merge' also report a conflict for extra files overwritten. Like [60c6197c8a], but for the merge operation. Related to ticket [953031915f]. ... (check-in: bb49278a user: viriketo tags: declined)
22:17
Minor diff view change for the black'n'white skin. ... (check-in: 07714601 user: jan tags: jan-sbsdiff)
22:16
Reporting the number of merge conflicts at the end of merge, as with update. I think the information is of value to the user.

I think that had to be introduced in [070ce24d838a6], from its comment, but that change made the opposite of commented. ... (check-in: e1a7a1d9 user: viriketo tags: declined)

20:25
Making fossil warn about a conflict, if an update operation overwrites an extra file. This should close ticket [953031915f]. ... (check-in: 60c6197c user: viriketo tags: declined)
19:53
Same trouble as [bf480a29a6] but for the merge5 test. ... (check-in: 12960585 user: viriketo tags: declined)
19:46
Fixing the merge5 test, for it to run when out of a checkout. The same kind of fix as [0a7ab3ccb0]. ... (check-in: e46be99f user: viriketo tags: declined)
19:01
Fixing the merge_renames test; fossil was using $HOME somehow. I noticed it running the test in an environment without a valid $HOME path (the nix package building). fossil refused to run the 'fossil new' inside the merge_renames test. ... (check-in: bf480a29 user: viriketo tags: declined)
16:12
Merging the extended_ci_names branch, that introduces more ways of naming checkins in diff and update operations. ... (check-in: 107e605f user: viriketo tags: declined)
16:11
Merging the annotate_noleak changes, about removing an important memory leak in the annotate operation.

It also fixes some blob behaviour in blob.c and content.c.

Update: Removed from trunk. Replaced by the must simpler fix at [9929bab702f99839ee] ... (check-in: 409f370a user: viriketo tags: declined)

15:52
working on json wiki command ... (Closed-Leaf check-in: 4f9f0e9f user: zach tags: json-multitag-test, json)
15:41
Updated the built-in skins for sbsdiff. ... (check-in: bb76b57a user: jan tags: jan-sbsdiff)
00:06
Add /*sort*/ marks to some SQL queries to disable warnings about sorting without an index. ... (check-in: fff43ebb user: drh tags: trunk)
2011-10-13
23:48
Started adding support for showing side-by-side diffs in the web ui. ... (check-in: a6a8e894 user: jan tags: jan-sbsdiff)
23:47
Provide an option to enable the /test_env URL for all users. Optionally display cookie values in the /test_env URL. ... (check-in: 4d32db8e user: drh tags: trunk)
17:10
Added downloadPath property to files in timeline view, leading to /raw/FILENAME?name=uuid. ... (check-in: ea5e5815 user: stephan tags: json-multitag-test, json)
16:45
merged in trunk [862d7dbf59f55e2d]. ... (check-in: 3025ecb2 user: stephan tags: json-multitag-test, json)
16:39
Update the SQLite command-line shell to the latest from the SQLite source tree. ... (check-in: 862d7dbf user: drh tags: trunk)
12:56
Fixing the usage() calls in stash.c, as it duplicated the word stash; it was giving messags like "Usage: fossil stash stash pop". ... (check-in: 399c0dda user: viriketo tags: trunk)
02:47
Create new branch named "ashish-ipv6" ... (check-in: 10e10714 user: ashish tags: ashish-ipv6)
2011-10-12
17:41
Adding a more options at naming commits for diff and update commands.

I wrote a new function that allows more kind of specifications for a checkin uuid: checkout, parent and pivot:id1:id2.

If there was a way to discover the 'parent branch' of the current checkout, there could be a 'parentbranch' naming too.

I think this makes the life easier, specially for the pivot:id1:id2 case, about seeing the difference between a branch and its parent branch. I find myself using often the test-find-pivot command just to get that diff or update to the pivot, to check changes between the current branch and the parent branch. ... (Closed-Leaf check-in: 9fe787ec user: viriketo tags: extended_ci_names)

16:20
Fixing the merge_renames test, so it accepts being called out of a repository. The message given by fossil when trying 'info' out of a repository had changed. ... (check-in: 0a7ab3cc user: viriketo tags: trunk)
15:21
Making the http ssl code output the verification error, in case of verification failure.

I also make the user question state the host the certificate is related to. ... (check-in: 79c31f9b user: viriketo tags: trunk)

2011-10-11
21:04
Added another AJAX impl which uses a local fossil binary for the back-end while using the FossilAjaj front-end interface. ... (check-in: 15551663 user: stephan tags: json-multitag-test, json)
20:46
Update the build-in SQLite and the SQLite-shell to the latest code from the trunk of the SQLite source tree - version 3.7.9 alpha. ... (check-in: 55fb082a user: drh tags: trunk)
19:57
JS code test cleanups to account for the fact that the ajax-thrown assertions/exceptions get swallowed by the ajax layer. ... (check-in: 9e98a9bd user: stephan tags: json-multitag-test, json)
14:28
merged in trunk [496edc2176]. ... (check-in: ec76ee16 user: stephan tags: json-multitag-test, json)
2011-10-10
20:02
Fix some compiler warnings. ... (check-in: 496edc21 user: drh tags: trunk)
19:33
Fix a C++ comment in sha1.c. Fix a help text typo. ... (check-in: a6f3dd1c user: drh tags: trunk)
13:19
Update the "scrub" command to drop the accesslog table when the --verily option is used. ... (check-in: 16a6dfef user: drh tags: trunk)
13:05
Additional formatting fixes: shorten lines to 80 characters or less. ... (check-in: c1d78e05 user: drh tags: trunk)
12:59
Adjust SSL trust fix to skip prompting for certificates that already have an explicitly negative trust setting. ... (check-in: 63680474 user: mistachkin tags: trunk)
12:55
Fix indentation and formatting in http_ssl.c. Limit line length to 80 characters per the coding style spec. ... (check-in: 5eb8f015 user: drh tags: trunk)
11:38
Merge the ssl-trust-fix branch into trunk. ... (check-in: 0554dbd0 user: drh tags: trunk)
08:56
Fix constant prompting on already saved SSL certificates that are not trusted for some reason (e.g. host mismatch, etc). ... (Closed-Leaf check-in: 25169506 user: mistachkin tags: ssl-trust-fix)
2011-10-09
12:58
factored out an extraneous parameter to json_gc_add(). ... (check-in: 7a83a5cb user: stephan tags: json-multitag-test, json)
11:57
fixed: json_cap_value() now returns NULL (instead of prematurely/fataly querying the db) if g.userUid has not been set (i.e. CLI mode). ... (check-in: 96920e7c user: stephan tags: json-multitag-test, json)
11:45
Added global debugFossilG/--json-debug-g boolean to add the "g" output to any response (including (especially) error responses) to simplify debuggering. Requires a|s privileges. ... (check-in: f047bbdd user: stephan tags: json-multitag-test, json)
11:23
Added /json/g, which dumps the "g" object to JSON (debuggering tool). ... (check-in: 65e0c94c user: stephan tags: json-multitag-test, json)
11:09
minor cleanups to how FossilAjaj stores its auth info. ... (check-in: fb55f253 user: stephan tags: json-multitag-test, json)
11:04
minor pedantic mtime "as int" casts. ... (check-in: 770f9da5 user: stephan tags: json-multitag-test, json)
2011-10-08
15:13
s/rn/report/, for API consistency. ... (check-in: a52296e0 user: stephan tags: json-multitag-test, json)
15:13
accommodated API change. ... (check-in: 69ef388f user: stephan tags: json-multitag-test, json)
14:36
Fixed Ctrl-D handling in rhino-based shell. ... (check-in: 15c6caf2 user: stephan tags: json-multitag-test, json)
14:16
added /json/report/get. ... (check-in: e21b391d user: stephan tags: json-multitag-test, json)
14:15
getenv() as the fallback strategy for json_getenv() now only enabled in CLI mode. ... (check-in: 8c4a23ae user: stephan tags: json-multitag-test, json)
12:57
"Dispatching" json subcommands now produce more useful error messages when no subcommand is specified. ... (check-in: a8af09fc user: stephan tags: json-multitag-test, json)
12:13
Permissions fixes in json/report. Added json/timeline/branch, analog to /brtimeline. ... (check-in: 6841b116 user: stephan tags: json-multitag-test, json)
11:55
fixed a cson mis-use which could cause a crash in some cases due to client-side misachtung of the reference count. ... (check-in: d8fd611f user: stephan tags: json-multitag-test, json-add-tag-test, json)
10:18
Added /json/report/run. Fixed an SQL syntax bug in report/list (only affected non-priveleged accounts). ... (check-in: 8907163e user: stephan tags: json-multitag-test, json)
08:46
Added /json/report/list and /json/query. ... (check-in: 20978b27 user: stephan tags: json-multitag-test, json)
05:57
added diff demo to ajax page. ... (check-in: 42f56923 user: stephan tags: json-multitag-test, json)
05:16
minor hack to allow libcson to use fossil_malloc/free/realloc() so that we will hook into its die-on-OOM behaviour (=reduced error checking). ... (check-in: 56ecc0c6 user: stephan tags: json-multitag-test, json)
05:16
doc additions for /json/diff. ... (check-in: a37df1d9 user: stephan tags: json-multitag-test, json)
2011-10-07
19:55
Documentation update. ... (check-in: c0b6c28d user: drh tags: trunk)
18:38
Update the built-in SQLite to the latest 3.7.9 alpha. ... (check-in: f678a7b9 user: drh tags: trunk)
14:19
fixed a missing db_finalize() in an error-handling case. ... (check-in: 7906bab8 user: stephan tags: json-multitag-test, json)
13:51
First draft, no-frills /json/diff added. ... (check-in: 54e1f1a5 user: stephan tags: json-multitag-test, json-add-tag-test, json)
13:32
minor tweaks to the prototype shell. ... (check-in: d30b20a5 user: stephan tags: json-multitag-test, json)
12:02
Added a very, very prototypic/pre-alphalpha demo fossil shell. Requires rhino JS. ... (check-in: 7ab5d854 user: stephan tags: json-multitag-test, json)
10:59
Pulled in another round of memory optimizations in cson/sqlite3. Added a few minor error reporting cleanups in JSON mode. ... (check-in: 09e5fcd7 user: stephan tags: json-multitag-test, json)
10:20
Another round of cson memory optimizations. Object keys can now be cson_strings, which can be refcounted/shared. ... (check-in: 3d252e87 user: stephan tags: json-multitag-test, json)
06:54
Minor internal tweaks. Pulled in lastest cson_amalgamation for the new convenience functions. ... (check-in: c75759d8 user: stephan tags: json-multitag-test, json)
03:52
/json/wiki/get: renamed request.payload.page to "name" for consistency. Added a TODO to /json/tag/list. ... (check-in: 34056ea2 user: stephan tags: json-multitag-test, json)
03:51
fixed how many path parts are generated for the "command" response property. ... (check-in: 3d6cc1df user: stephan tags: json-multitag-test, json)
03:24
Removed an unnecessary strcmp(). Removed some debuggering code which corrupted the output of /json/tag/find in raw mode. ... (check-in: faaf7387 user: stephan tags: json-multitag-test, json-add-tag-test, json)
03:09
fixed whoami requests in demo apps to notice when the user has been logged out (and logs him in with the new auth token). ... (check-in: ccc90734 user: stephan tags: json-multitag-test, json)
02:58
Fixed a minor denkfehler in the "bump <1ms runtime to 1ms" logic. Changed g.json.gc to an array (lower memory and better performance for what we use it for). ... (check-in: 19276984 user: stephan tags: json-multitag-test, json)
02:16
merged in trunk [4b0f813b8c]. ... (check-in: 39d9f837 user: stephan tags: json-multitag-test, json)
02:14
pulled in tonight's libcson changes, which halve the number of allocations needed for creating new JSON values. ... (check-in: 130cc65c user: stephan tags: json-multitag-test, json)
2011-10-06
23:29
fixed a bug in the handling of /json/tag/find --raw format (caused by moving code w/o paying attention). Added a warning when the given tag is not found. ... (check-in: be410090 user: stephan tags: json-multitag-test, json)
23:12
Added /json/tag/find. ... (check-in: 9d27ade3 user: stephan tags: json-multitag-test, json)
21:25
Added /json/tag/cancel. ... (check-in: 0b685fcc user: stephan tags: json-multitag-test, json)
21:14
Added /json/tag/add. ... (check-in: bd9d7ce2 user: stephan tags: json-multitag-test, json)
20:10
Added /json/tag/list and infrastructure for pending (add, cancel, find) ops. ... (check-in: 1088cf21 user: stephan tags: json-multitag-test, json-add-tag-test, json)
17:12
Added /json/resultCodes. ... (check-in: 71a1d448 user: stephan tags: json-multitag-test, json)
15:51
minor doc fix before switching PCs for the weekend. ... (check-in: a403544f user: stephan tags: json-multitag-test, json)
15:47
fixed comparison logic which broken dumbing-down of error codes (caused them to never be dumbed-down). ... (check-in: f93e059f user: stephan tags: json-multitag-test, json)
2011-10-05
16:58
fixed [fc825dcf52] ... (check-in: 4b0f813b user: ron tags: trunk)
12:04
experimentally added "command" property to all responses to simplify response handler dispatching in some experimental Java client code. ... (check-in: 8f12ac98 user: stephan tags: json-multitag-test, json)
12:03
minor cosmetic cleanups. ... (check-in: 2dac80dd user: stephan tags: json-multitag-test, json)
08:00
Added (--args -) to read from stdin. Theoretically now also strips windows newlines, but i do not have a broken editor to test that with ;). ... (check-in: 080d27a6 user: stephan tags: trunk)
07:01
fixed a url-updating problem caused by recent refactoring. ... (check-in: 4b708534 user: stephan tags: json-multitag-test, json)
06:42
A few internal cosmetic cleanups, added json_get_wiki_page_by_rid(). ... (check-in: afb3c89f user: stephan tags: json-multitag-test, json)
05:41
Tweaks to the JS API, mainly to simplify a common 2-callbacks-per-event use case. Added missing json2.js. ... (check-in: cf10d9d9 user: stephan tags: json-multitag-test, json)
03:32
const-correctness tweak in db_text(). ... (check-in: 30431ff9 user: stephan tags: json-multitag-test, json)
02:41
Doh... accidentally changed resultCodes from strings to ints during refactoring. ... (check-in: 36384da8 user: stephan tags: json-multitag-test, json)
02:31
fixed a mis-sorting in the json timeline, caused by refactoring in a recent commit. ... (check-in: 824ed5fb user: stephan tags: json-multitag-test, json)
02:26
Consolidated more of the CLI/HTTP/CLI-with-POST arg handling disparities into the json_find_option() family of functions. ... (check-in: 5b4a3f12 user: stephan tags: json-multitag-test, json)
02:03
Change a #ifdef so that builds on MSVC will work on repos larger than 2GB. ... (check-in: 6092935f user: drh tags: trunk)
00:53
lots of minor cleanups in JSON error handling (mostly cosmetic). Added some new FOSSIL-xxxx codes. ... (check-in: 2e41514f user: stephan tags: json-multitag-test, json)
2011-10-04
23:40
merged and conflict-resolved trunk [c0274f996266aef]. ... (check-in: 4fbf77d4 user: stephan tags: json-multitag-test, json)
23:07
Merge the --args FILENAME patch into trunk. ... (check-in: c0274f99 user: drh tags: trunk)
23:03
Simplify the implementation of the --args FILENAME patch, as requested by the FIXME comment. ... (check-in: eb8d989d user: drh tags: stephan-hack)
21:41
Initial --args FILENAME patch. Impl seems over-complex to me, but works as described in the list thread. ... (check-in: 8a6568c3 user: stephan tags: stephan-hack)
21:28
merging with trunk [d4a341b49dd1b701] before applying --args FILENAME patch, to simplify downstream merge. ... (check-in: 312d522f user: stephan tags: stephan-hack)
20:02
Started adding /json/artifact tickets support, but grokking tkt.c is more than i am up for tonight. Changed how permissions checks are done under /json/artifact (previous approach is just plain silly without C++ templates) ... (check-in: cee8bc67 user: stephan tags: json-multitag-test, json)
19:17
fixed a c99ism. ... (check-in: cd67b945 user: stephan tags: json-multitag-test, json)
15:20
Add HMAC-SHA1 implementation. ... (Closed-Leaf check-in: dcee34b2 user: dmitry tags: multisession)
15:15
Merge protection against timing attacks into trunk. ... (check-in: d4a341b4 user: dmitry tags: trunk)
14:38
Merge trunk into dmitry-security branch. ... (Closed-Leaf check-in: f4eb0f5a user: dmitry tags: dmitry-security)
14:34
Rename constant_time_eq to constant_time_cmp to better indicate that these functions return 0 when values are equal, like memcmp, strcmp, etc., not truth, to avoid possible mistakes. ... (check-in: d244c484 user: dmitry tags: dmitry-security)
14:28
Revert the previous change after thinking more about it.

Login cards in the sync protocol have the following format:

login userid nonce signature

Nonce is SHA-1 of the message that follows this line, signature is SHA-1 of the concatenation of the nonce and user's shared secret. The successful timing attack can reveal only signature for this particular packet due to nonce. However, as nonce is known to the attacker, it's theoretically possible for them to bruteforce the shared secret_offline_.

The whole scenario sounds highly improbable, but using constant-time comparison function for such things by default is a good practice. ... (check-in: 13a9a124 user: dmitry tags: dmitry-security)

09:06
/json/wiki/get argument handling cleanup so that it works with the newer command=... approach. ... (check-in: 96fe10ab user: stephan tags: json-multitag-test, json)
2011-10-03
16:34
Disabling Cache-control: no-store, as it made firefox forget about form field contents on back/forward in history.

Resolution achieved by a minimal consensus at this thread on the mailing list. ... (check-in: 3fac77d7 user: viriketo tags: trunk)

2011-10-02
23:59
Minor error handling cleanups (nicer resultText strings). Removed a call to sqlite3_config() from the JSON bootstrap code which _seems_ to be the cause of an SQLITE_MISUSE warning. ... (check-in: af72cc75 user: stephan tags: json-multitag-test, json)
23:43
Accommodated recent API changes. ... (check-in: 901a0133 user: stephan tags: json-multitag-test, json)
23:21
Fixed an incorrect setting of the content type in one error-handling case. ... (check-in: 35e4e918 user: stephan tags: json-multitag-test, json)
22:58
Added /json/branch/create. Finally found g.zErrMsg, and started using it in conjunction with json error reporting. ... (check-in: 8eaf58ee user: stephan tags: json-multitag-test, json)
21:01
moved /json/branch code into its own file. ... (check-in: 1a4c874e user: stephan tags: json-multitag-test, json)
20:15
renamed json timeline "showFiles" option to "files" because we do not really "show" anything." ... (check-in: bc7af519 user: stephan tags: json-multitag-test, json)
19:57
Added tag/branch option to /json/timeline/ci, analog to HTML mode t/r options. ... (check-in: 76212851 user: stephan tags: json-multitag-test, json)
19:56
Added empty_Stmt, analog to empty_Blob, to work around an assertion triggered during some error handling code. ... (check-in: 4db6d7c5 user: stephan tags: json-multitag-test, json)
18:28
Merged in trunk [ae64088627df]. Added /json/timeline/checkin as alias for /json/timeline/commit (checkin is historically more correct/consistent). ... (check-in: a9070a49 user: stephan tags: json-multitag-test, json)
18:18
s/userName/name/, for consistency. ... (check-in: 94689bbf user: stephan tags: json-multitag-test, json)
13:30
minor hack to name_search() to make it stop searching after it determines there is an ambiguity. ... (check-in: ae640886 user: stephan tags: trunk)
12:41
json mode now accepts command=string request parameter if path length is 1 (no subcommand was specified). ... (check-in: 225fd3da user: stephan tags: json-multitag-test, json)
12:31
initial code for reading POST data from a file/stdin in CLI mode. ... (check-in: 8145cdbf user: stephan tags: json-multitag-test, json)
11:43
minor cleanups and doc additions to the json/artifact handling. ... (check-in: 6d066783 user: stephan tags: json-multitag-test, json)
11:16
Reorganized json_page_artifact(), fixed a C99ism, fixed permissions check. ... (check-in: c9261700 user: stephan tags: json-multitag-test, json)
11:15
removed an implemented TODO reminder. ... (check-in: f270f0b5 user: stephan tags: json-multitag-test, json)
10:51
Added missing license header to new files. Updated (c) date to 2011. ... (check-in: 8a665715 user: stephan tags: json-multitag-test, json)
2011-10-01
20:50
Variable used for return value of send(2) must be signed, otherwise error conditions just result in infinite loops. ... (check-in: 5e351987 user: joerg tags: trunk)
07:58
s/commit/checkin/, for consistency. s/artifactType/type/. ... (check-in: 44e032aa user: stephan tags: json-multitag-test, json)
07:47
more consolidation of timeline/artifact code. ... (check-in: cc444a02 user: stephan tags: json-multitag-test, json)
07:04
more timeline/artifact refactoring. ... (check-in: 22fc0ab8 user: stephan tags: json-multitag-test, json)
06:45
Started refactoring some of the timeline/artifact components into reusable parts. Comment edited only to test json responses which differentiate between pristine and edited commits. ... (check-in: b1f92572 user: stephan tags: json-multitag-test, json)
05:58
Started adding artifact-type-dependent result data to /json/artifact output. ... (check-in: a893fff3 user: stephan tags: json-multitag-test, json)
05:58
minor cleanups. ... (check-in: 6ee6486e user: stephan tags: json)
05:57
Added json_new_int() convenience function. ... (check-in: ccd66b9b user: stephan tags: json)
05:09
Added initial /json/artifact code, but it currently can only report the type of a given artifact. ... (check-in: 6372d951 user: stephan tags: json)
05:05
minor db_column usage cleanup. ... (check-in: cf8b20ea user: stephan tags: json)
05:05
added test for /json/wiki/get. ... (check-in: 2b7edce3 user: stephan tags: json)
05:04
Changed some of the exception-throwing code to propagate instead of ingore. ... (check-in: e8fe84bc user: stephan tags: json)
04:03
Cleaned up wiki formatting code a bit. Added wiki uuid to /json/wiki/get response payload. ... (check-in: 3f512ca4 user: stephan tags: json)
03:37
Added format=raw|html to /json/wiki/get. ... (check-in: c990e7ec user: stephan tags: json)
02:19
minor cleanups in the /json/login payload code. ... (check-in: 3bdae54c user: stephan tags: json)
02:12
Changed /json/login output payload structure. ... (check-in: 88ddf2cb user: stephan tags: json)
2011-09-30
17:00
minor ajax test code cleanups. ... (check-in: 7eb52b23 user: stephan tags: json)
16:36
Added more integration tests. ... (check-in: 10e677c9 user: stephan tags: json)
16:35
added preliminary support for cookies in the rhino ajax client, but it does not seem to be doing anything. ... (check-in: ef9d8393 user: stephan tags: json)
15:50
Fixed POST sending for rhino-based ajax impl (was sending Content-Type form-urlencoded). Login over rhino works :). ... (check-in: a36d5c0e user: stephan tags: json)
15:48
minor fix for fossil's internal handling of name=xyz parameter. ... (check-in: 9f2535f1 user: stephan tags: json)
14:11
Some touch-ups in the JS code. Started adding Rhino-based tests for integration/unit-testing CGI/server modes. ... (check-in: 42a07be4 user: stephan tags: json)
10:51
It seems like blob_constant_time_eq() is unnecessary for sync protocol signatures; removed. ... (check-in: 48bcfbd4 user: dmitry tags: dmitry-security)
09:41
Catch zero length early in blob_constant_time_eq(). ... (check-in: e3d022df user: dmitry tags: dmitry-security)
09:01
Merged in trunk [9bfa186be09f]. Fixed an inexplicable duplicate call to db_find_and_open_repository() which has since disappeared from the trunk. ... (check-in: 8185bddf user: stephan tags: json)
2011-09-29
22:27
json ajax: fixed POST/GET message sending determination (broken by a previous change this evening). ... (check-in: 37963253 user: stephan tags: json)
21:57
Removed the json warnings bitset crap. Still not sure i like the warnings mechanism at all. ... (check-in: 9fe06e2f user: stephan tags: json)
21:55
Corrected a JSON-mode result code when db rebuild is required. ... (check-in: 44644d43 user: stephan tags: json)
21:06
Fix to the previous fix: install function to the correct database. ... (check-in: 3782276d user: dmitry tags: dmitry-security)