[PATCH 0/4] Patch update, mostly server DoS related

[Sven Göthel]

I have refined the patch-set via force-push,
single patch updates will follow.

<https://jausoft.com/cgit/cgit.git/log/>

Also added 2 more patches, see below.

Feel free to pick and discuss.

~Sven

On 7/19/26 5:34 PM, Sven Göthel wrote:
> I will send 4 current patched from my repo
> <https://jausoft.com/cgit/cgit.git/log/>, namely
> 
> - 1: cgit: add_repo: Assign default branch from git HEAD to repo->defbranch if undefined
>  
> <https://jausoft.com/cgit/cgit.git/commit/?id=5ccffc927460e651da10a6b0be2e9786129355bb>
> 
> - 2: cgit: print_slot: Avoid Slow-Attack via `client-io-idle-timeout` and `client-io-min-rate`
>  
> <https://jausoft.com/cgit/cgit.git/commit/?id=3612cb2a9fbec0052ae6d8f5b5a4a0bb0c3aed35>
> 
> - 3: Resolve concurrent initial cache fill post lock. Release lock after fill.
>  
> <https://jausoft.com/cgit/cgit.git/commit/?id=0771f700a9788cbe7e9f923ebeb8c4b6bf1ab1fa>

update <https://jausoft.com/cgit/cgit.git/commit/?id=c701a724807d980b7876c3a1c15ea747088ea4c7>

> 
> - 4: Add cfg cache-lock-fail behavior if failing to acquire cache-file lock
>  
> <https://jausoft.com/cgit/cgit.git/commit/?id=23472c578356f8ac5a2858ebaa7287bc24c3a5b0>

update <https://jausoft.com/cgit/cgit.git/commit/?id=23bce8965897c21213da1a2882e0b04392f8428a>

- 5 Refine log-level usage, define values
  <https://jausoft.com/cgit/cgit.git/commit/?id=6ead0ef2bc361fa7e0a292709922133aeb3776b3>

- 6 filters/syntax-highlighting.sh: Use highlight version 3 invocation
  <https://jausoft.com/cgit/cgit.git/commit/?id=9383c3d46a1ff40439f46f761323c3b63b62c93b>


> 
> last 2 are new.
> I welcome a merge and/or discussion with the maintainer.
> 
> Motivation of this work was to fight DoS attack
> on two cgit server, reducing the load by using
> - send timeout and min-bandwidth to client
> - rely on cache-lock (actually a concurrency fix)
> - fail on cache-lock failure -> error page (new default)
>