OpenResty® Scalable Web Platform by Extending NGINX with Lua

OpenResty XRay

Advanced observability built for OpenResty and more

×

limited time offer

Request TRIAL today and receive a diagnostic REPORT
Learn more

ChangeLog for 1.19.9.x

Johnny Wang , 21 Jul 2024 (created 06 Aug 2021)

Version 1.19.9.2 - 19 Jul 2024

  • upgraded LuaJIT to 2.1-20210510.1.
    • bugfix: disable hash computation optimization because of the possibility of severe degradation (CVE-2024-39702). This issue originates from the OpenResty LuaJIT branch. Thanks Zhongwei Yao from Kong INC. for reporting the issue, and thanks lijunlong for the patch.

Version 1.19.9.1 - 6 Aug 2021

  • upgraded ngx_lua to 0.10.20.

    • bugfix: changed from graceful shutdown to abort when lua_resume return LUA_ERRMEM. Thanks lijunlong for the patch.
    • bugfix: correct the way to handle invalid quote in ngx.escape_uri/ngx.req.get_{uri,post}_args. Thanks Suika for the patch.
    • bugfix: fix possible null pointer dereference found by Coverity. Thanks Ilya Shipitsin for the patch.
    • bugfix: fixed memory leak in debug log. Thanks Hawker for the patch.
    • bugfix: we closed listener's fd which was closed. Thanks spacewander for the patch.
  • upgraded ngx_stream_lua to 0.0.10.

    • bugfix: changed from graceful shutdown to abort when lua_resume return LUA_ERRMEM. Thanks lijunlong for the patch.
    • bugfix: wrong source address for the replying packet when received udp packet via req.socket on secondary address. Thanks lijunlong for the patch.
    • bugfix: fix possible null pointer dereference found by Coverity. Thanks Ilya Shipitsin for the patch.
    • bugfix: fixed memory leak in debug log. Thanks Hawker for the patch.
    • bugfix: ignore the raw argument when acquiring UDP request socket. Thanks Datong Sun for the patch.
  • upgraded lua-resty-core to v0.1.22.

    • feature: expose the get_ctx_table API to get the ctx table, and support using ctx table from caller when the ctx table does not exists. Thanks doujiang24 for the patch.
    • feature: implemented ngx.process API for stream subsystem. Thanks WANG HUI for the patch.
    • bugfix: should compare to nil to check if a cdata is NULL. Thanks lijunlong for the patch.
    • change: it is harmful to set ngx.ctx to a non-table value. Thanks spacewander for the patch.
  • upgraded lua-tablepool to v0.02

    • bugfix: should also clear the metatable when clearing key values of a table. Thanks doujiang24 for the patch.
    • change: discard the object simply when the pool size is large than max_pool_size, so that we can get better performance. Thanks doujiang24 for the patch.
  • upgraded lua-resty-memcached to v0.16.

    • change: use preferred settimeouts instead of settimout. Thanks Elvin Efendi for the patch.
  • upgraded lua-resty-dns to v0.22.

    • feature: add no_random option. Thanks Thijs Schreijer for the patch.
  • upgraded lua-resty-mysql to v0.24.

    • bugfix: 64-bit integer values in the MySQL packets (like last insert_id) could not be properly parsed due to LuaJIT's BitOp functions return results in the range of signed 32 bit numbers. Thanks doujiang24 for the patch.
  • upgraded opm to v0.0.6.

    • bugfix: update the RegExp to suit the new GitHub access tokens format. Thanks pintsized for the patch.
    • feature: web: support displaying and searching package docs. Thanks xlibor for the patch.
    • change: print usage if no command specified. Thanks tison for the patch.
    • feature: web: improvements for the website UI. Thanks xlibor for the patch.
  • upgraded resty-cli to v0.28.

    • bugfix: share dict name can be upper letter & numbers. Thanks Zhenzhen Zhao for the patch.
    • bugfix: resty: win32: we should search for *.ljbc files first too.
  • upgraded lua-resty-lrucache to v0.11.

    • bugfix: set num_items to zero when flushall. Thanks hnlq715 for the patch.
  • upgraded lua-resty-string to v0.14.

    • change: added parameter check for aes.lua. Thanks lijunlong for the patch.
    • feature: added aes gcm encryption/decryption algorithm. Thanks lijunlong for the patch.
    • bugfix: segmentation fault while decoding because the wrong output size buffer. Thanks Miroslav Nový for the patch.
  • upgraded lua-resty-signal 0.03.

    • change: the signum method return correct value on different system now, not only for linux. Thanks xiaobiaozhao for the patch.
  • upgraded LuaJIT to 2.1-20210510.

    • change: Introduce a new macro LUAJIT_TEST_FIXED_ORDER for testing so that lua table would have predictable key iteration order.
    • bugfix: Fix trace exit register dump for some archs.
    • bugfix: FFI: Fix recording of union initialization.
    • bugfix: x64: Fix __call metamethod return dispatch.
    • bugfix: Fix binary number literal parsing.
    • feature: enable debuginfo in our luajit build by default.