Updated copyright notices to include the year 2018.

lib-master: Add master_service_init_stats_client() This allows initializing the stats client after master_service_init() if necessary.

lib-master: Add stats-client Enable it if MASTER_SERVICE_FLAG_SEND_STATS is set

lib-master: Add log_debug setting lib-master understands only the global log_debug setting, which is passed to it via environment from master process, or alternatively via doveconf when executing standalone programs. Any per-user log_debug settings need to be handled explicitly elsewhere.

global: io_remove*(NULL) is a no-op

global: timeout_remove(NULL) is a no-op

lib-master: Load SSL module if wanted by service

lib-master: Allow a second log initialization after settings have been read. This fixes logging with services that bypass the log service (lda or -L parameter).

global: stop including fd-set-nonblock.h & fd-close-on-exec.h directly

lib-master: master_service_init_log() - Switch log handlers only on the first call The secondary calls were only done by mail_storage_service_*() calls. They want to initialize the logging once, but afterwards they only care about changing the log prefix. Switch to this behavior now explicitly. This fixes behavior if logging functions are changed between mail_storage_service_*() calls, so they don't get reset.

global: use i_close_fd{,_path}() instead of open-coding them

global: start relying on timeout_remove(NULL) being a no-op Cleanup performed with the following semantic patch: @@ expression E; @@ - if (E != NULL) { - timeout_remove(&E); - } + timeout_remove(&E);

global: start relying on io_remove{,_closed}(NULL) being a no-op Cleanup performed with the following semantic patch: @@ expression E; @@ - if (E != NULL) { - io_remove(&E); - } + io_remove(&E); @@ expression E; @@ - if (E != NULL) { - io_remove_closed(&E); - } + io_remove_closed(&E);

lib-master: master_service_import_environment() - use a data stack frame This way the caller doesn't have to do it.

master: Move master_set_import_environment() to lib-master

lib-master: Replace listeners with /dev/null in SIGQUIT instead of closing This should be somewhat safer.

lib-master: When running under master, close listeners immediately on SIGQUIT

lib-master: Remove listener's IO earlier if possible This is needed for the next change to work properly.

lib: Add error_r to t_readlink and its callers

lib: Rename abspath to path-util

Updated copyright notices to include the year 2017.

global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro. Used the following script: C_FILES=`git ls-files *.c` H_FILES=`git ls-files *.h` for F in "$C_FILES $H_FILES"; do echo "$F" perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F done

global: Change string position/length from unsigned int to size_t Mainly to avoid truncating >4GB strings, which might potentially cause some security holes. Normally there are other limits, which prevent such excessive strings from being created in the first place. I'm sure this didn't find everything. Maybe everything could be found with compiler warnings. -Wconversion kind of does it, but it gives way too many unnecessary warnings. These were mainly found with: grep " = strlen" egrep "unsigned int.*(size|len)"

lib-master: Revert redundant stdin/stdout/stderr fd checks This is now done by lib_init() in a bit nicer way. Reverts 08923d2c956ece3dc604d5842ba152c2bdb11fb9

lib-master: Make sure stdin/stdout/stderr fds are open. We'll just open /dev/null for them if they don't already exist.

lib: Changed t_pop() API to make it a bit more like free()

lib-master: master_service_init_finish() now verifies that t_pop() wasn't leaked

lib-master: don't leak config path The config path can already be non-NULL thanks to the default config path code or the CONFIG_PATH environmental variable.

lib-master: Add automatic data stack frame to init unless disabled.

Make libbsd optional Also use setproctitle properly if libbsd is indeed used.

global: freshen copyright git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/'

lib-master: master_service_is_master_stopped() now returns FALSE if running standalone. The only caller of this function was stats plugin to see if it should send stats updates. So this fixes dovecot-lda, doveadm and other standalone tools to send stats updates.

Remove now-unnecessary direct stdlib.h #includes.

lib-master: Compiler warning fix

Removed all invocations of atoi().

lib-master: struct master_service_connection.name must never be NULL, use "" instead. Fixes crash at least in auth process when there are inet_listeners without names.

lib-master: Added support for HAProxy protocol. Patch by Stephan Bosch - with some small changes.

master: Changed passing of listener settings from master to process to be more flexible. This is needed to allow adding new listener settings, such as `haproxy'. Patch by Stephan Bosch - with some small changes.

lib-master: Added local and real IP addresses and ports to struct master_service_connection.

lib-master: Moved connection accepting code to its own functions. No functional changes.

lib-master: If idle-die callback returns FALSE, notify master that we don't want to die. This avoids the master thinking that we're ignoring its idle-kill signal and logging an error.

lib-master: Code cleanup - split master_status_update() to two functions. No functional changes.

lib-master: Make sure we can't accidentally add duplicate getopt args.

lib-master: Added master_service_get_socket_name()

lib-master: Get log timestamp prefix from LOG_STDERR_TIMESTAMP environment.

global: freshen copyright Robomatically: git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/' Happy 2015 everyone! Signed-off-by: Phil Carmody <phil@dovecot.fi>

lib-master: Earlier config file path fix broke reusing existing config socket lookups.

Updated copyright notices to include year 2014.

Call lib_atexit() callbacks before destroying the lib-master ioloop.

lib-master: Fix to previous commit. It broke doveadm-server's "does client need authentication?" check.

lib-master: If service_count=1, close the listener before starting to handle the connection. This way if the connection handling takes a long time and the service doesn't notice that master dies, it can keep running without keeping the listener fds open and preventing a restart.

lib-master: If MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN is set, open the config socket before dropping privileges.

Call master_service_init_finish() only after all of the initialization is done. This way if the init crashes, the master process will throttle a buggy service.

lib-master: Added master_service_is_master_stopped()

lib-master: Added master_service_get_process_min_avail()

lib-master: If fifo isn't accepted, don't double-destroy the connection.

lib-master: Added version_string_verify_full()

login: Don't fail at startup by trying to load SSL plugin.

lib-master: If ssl settings are used, initialize ssl context automatically.

Replaced all -1U and (unsigned int)-1 with UINT_MAX. It's somewhat clearer this way. Also clang's -fsanitize=integer gives runtime errors about -1U (but not about explicit casts, so no need to change (type)-1 casts).

Oops :) Update copyrights to 2013 without breaking all .c files.