Commits · 02229155770fa8447a1686ed0cddb7260d38cc8b · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Dec 10, 2003

update the misconfigured INCLUDES skipping code to remove itself, so it'd complain · 7960b7ed

Stas Bekman authored Dec 10, 2003

only once
PR:
Obtained from:
Submitted by:
Reviewed by:	Jeff Trawick, Bill Rowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102005 13f79535-47bb-0310-9956-ffa450edef68

7960b7ed

Dec 09, 2003

complain via error_log when mod_include's INCLUDES filter is · 5c17d775

Stas Bekman authored Dec 09, 2003

     enabled, but the relevant Options flag allowing the filter to run
     for the specific resource wasn't set, so that the filter won't
     silently get skipped.
PR:
Obtained from:
Submitted by:
Reviewed by:	nd


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101999 13f79535-47bb-0310-9956-ffa450edef68

5c17d775

Dec 04, 2003

sync with APACHE_2_0_BRANCH · 09b85c15

Jeff Trawick authored Dec 04, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101983 13f79535-47bb-0310-9956-ffa450edef68

09b85c15

Clean up httpd -V output: Instead of displaying the MPM source · 26f3fbe5

Jeff Trawick authored Dec 04, 2003

directory, display the MPM name and some MPM properties.

Submitted by: Geoffrey Young <geoff apache.org>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101978 13f79535-47bb-0310-9956-ffa450edef68

26f3fbe5

Dec 02, 2003

sunny but frigid today in charlottesville... · 4e0451f2

Cliff Woolley authored Dec 02, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101959 13f79535-47bb-0310-9956-ffa450edef68

4e0451f2

Synch with 2.0 branch. · ff2c9532

Joe Orton authored Dec 02, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101956 13f79535-47bb-0310-9956-ffa450edef68

ff2c9532

Nov 26, 2003

Add fatal exception hook for use by debug modules. The hook is only · 5ead11c9

Jeff Trawick authored Nov 26, 2003

available if the --enable-exception-hook configure parm is used.

Sample users at http://httpd.apache.org/~trawick/exception_hook.html

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101899 13f79535-47bb-0310-9956-ffa450edef68

5ead11c9

Nov 25, 2003

· 2b048c5b

Paul J. Reder authored Nov 25, 2003

Sync with APACHE_2_0_BRANCH.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101891 13f79535-47bb-0310-9956-ffa450edef68

2b048c5b

Extend mod_status output to include SSL session cache status · c0125084

Joe Orton authored Nov 25, 2003

information:

* modules/ssl/mod_ssl.c (ssl_hook_pre_config): Call
ssl_scache_status_register.

* modules/ssl/ssl_scache.c (ssl_scache_status): Removed function.
(ssl_ext_status_hook): Renamed from ssl_ext_ms_display: switch to
2.1's mod_status "status_hook" API.
(ssl_scache_status_register): Register optional hook.

* modules/ssl/ssl_scache_dbm.c (ssl_scache_dbm_status): Adjust to use
new API.

* modules/ssl/ssl_scache_shmcb.c (ssl_scache_shmcb_status): Adjust
to use new API.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101889 13f79535-47bb-0310-9956-ffa450edef68

c0125084

Remove shmht session cache in favour of shmcb; shmht has had · b62df8d2

Joe Orton authored Nov 25, 2003

data corruption bugs since being apr_rmm'ified.

* config.m4, mod_ssl.dsp: Don't build ssl_util_table and
ssl_scache_shmht.

* ssl_util_table.h, ssl_util_table.c, ssl_scache_shmht.c: Removed
files.

* mod_ssl.h (SSLModConfigRec): Use a void * pointer for storing
the scache-specific data.

* ssl_engine_config.c (ssl_cmd_SSLSessionCache): Treat shmht: as
shmcb:.

* ssl_scache.c: Remove shmht hooks throughout.

* ssl_scache_shmcb.c: Remove casts to use the table_t * pointer as a
void *.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101888 13f79535-47bb-0310-9956-ffa450edef68

b62df8d2

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_version): · 29af1821

Joe Orton authored Nov 25, 2003

Determine the library version string at run-time rather than at
compile-time.

Submitted by: Eric Seidel <eseidel@apple.com>
PR: 23956


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101879 13f79535-47bb-0310-9956-ffa450edef68

29af1821

Nov 24, 2003

SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the · 88f26135

Andre Malo authored Nov 24, 2003

errorlog.

Reviewed by: Mark J Cox


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101873 13f79535-47bb-0310-9956-ffa450edef68

88f26135

Nov 22, 2003

· 1d0b9aba

Paul J. Reder authored Nov 22, 2003

A better solution than my previous commit as pointed out by Andre Malo.
mod_expires: Initialize ExpiresDefault to NULL instead of "" to
avoid reporting an Internal Server error if it is used without
having been set in the httpd.conf file. PR: 23748, 24459
Submitted: Andre Malo, Liam Quinn <liam htmlhelp.com>
Reviewed: Andre Malo, Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101846 13f79535-47bb-0310-9956-ffa450edef68

1d0b9aba

Nov 21, 2003

sync · 73ac7215

Andre Malo authored Nov 21, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101845 13f79535-47bb-0310-9956-ffa450edef68

73ac7215

· 11a9e3b4

Paul J. Reder authored Nov 21, 2003

mod_expires: Don't report an Internal Server error if ExpiresDefault
is used and has not been set in the httpd.conf file. PR: 23748, 24459

Submitted: Liam Quinn <liam htmlhelp.com>
Reviewed: Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101839 13f79535-47bb-0310-9956-ffa450edef68

11a9e3b4

Account for some bytes handed to the network layer prior to · 2a3c2152

Jeff Trawick authored Nov 21, 2003

dropped connections.

Such bytes were counted on some paths but not on others.  If
these bytes are to be counted in some error paths, they should
be counted in the others.  We don't know if they were actually
presented to the client.

AFAIK, this only affects mod_logio.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101832 13f79535-47bb-0310-9956-ffa450edef68

2a3c2152

Fix a problem with the display of empty variables ("SetEnv foo") in · 70654fd8

Jeff Trawick authored Nov 21, 2003

mod_include.  Now it works like 1.3 (see PR for details).  Setting
of envvars for scripts was/is consistent with 1.3 for empty variables.

PR:           24734
Submitted by: Markus Julen <mj zermatt.net>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101830 13f79535-47bb-0310-9956-ffa450edef68

70654fd8

Nov 20, 2003

sync with stable branch · 446f4dfb

Jeff Trawick authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101819 13f79535-47bb-0310-9956-ffa450edef68

446f4dfb

Win32: Make Win32 MPM transaction pools honor MaxMemFree · 4ae7b10a

Bill Stoddard authored Nov 20, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101817 13f79535-47bb-0310-9956-ffa450edef68

4ae7b10a

mod_autoindex: new directive IndexStyleSheet · bff3bad5

Ian Holsman authored Nov 20, 2003


PR:
Obtained from:
Submitted by: Tyler Riddle <triddle_1999 yahoo.com> and Paul Querna <chip force-elite.com>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101809 13f79535-47bb-0310-9956-ffa450edef68

bff3bad5

Nov 13, 2003

sync with stable branch · 80a92a45

Jeff Trawick authored Nov 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101779 13f79535-47bb-0310-9956-ffa450edef68

80a92a45

Nov 12, 2003

· 56fafca3

William A. Rowe Jr authored Nov 12, 2003

Normalize email addresses for the purpose of deliberate but simple-to-read
obscufication.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101763 13f79535-47bb-0310-9956-ffa450edef68

56fafca3

Nov 07, 2003

Fix a long delay with CGI requests and keepalive connections on · fe0f3b56

Jeff Trawick authored Nov 07, 2003

AIX.

On AIX, for processes like mod_cgid's script children where
SIGCHLD is ignored, kill(pid,0) returns success for up to
one second after the script child exits, based on when a
daemon runs to clean up unnecessary process table entries.
getpgid() can report the proper info (-1/ESRCH) immediately.

One user had a page with a lot of embedded images created by
CGIs, and the browser fetched them on a keepalive connection,
and the cumulative delays were very noticeable by the clients.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101716 13f79535-47bb-0310-9956-ffa450edef68

fe0f3b56

Fix uninitialized gprof directory name in prefork MPM. · 826d0b0f

Jeff Trawick authored Nov 07, 2003

PR:           24450
Submitted by: Chris Knight <Christopher.D.Knight@nasa.gov>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101714 13f79535-47bb-0310-9956-ffa450edef68

826d0b0f

Nov 06, 2003

mod_auth_ldap: Fix some segfaults in the cache logic. · 2d7f4054

Jeff Trawick authored Nov 06, 2003

PR:                18756
Submitted by:      Matthieu Estrade <apache@moresecurity.org>
Reviewed by:       Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101706 13f79535-47bb-0310-9956-ffa450edef68

2d7f4054

Nov 03, 2003

darn, the patch for bug 9587 (wrong icon for directories shown) broke · 949596d3

Andre Malo authored Nov 03, 2003

the directory descriptions more or less completely. Fix it now.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101693 13f79535-47bb-0310-9956-ffa450edef68

949596d3

Nov 02, 2003

no longer allow an ETag header in 304 responses. · 32bcbea1

Andre Malo authored Nov 02, 2003

PR: 19355
Submitted by: Geoffrey Young <geoff@apache.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101687 13f79535-47bb-0310-9956-ffa450edef68

32bcbea1

- add XHTML doctypes to httpd.h · 7523d8a7

Andre Malo authored Nov 02, 2003

- fix the (x)html output of mod_autoindex to be consistent
  and make it configurable to emit either HTML or XHTML

PR: 23747


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101683 13f79535-47bb-0310-9956-ffa450edef68

7523d8a7

fix optimizer to not throw away a regex if it stumbles over it. · 981b83ed

Andre Malo authored Nov 02, 2003

PR: 24219


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101665 13f79535-47bb-0310-9956-ffa450edef68

981b83ed

Nov 01, 2003

Don't omit the initial <tr> if SuppressIcon is set. · 1f2ddd5b

Andre Malo authored Nov 01, 2003

Submitted by: Jesse Tie-Ten-Quee <highos@highos.com>
PR: 21668


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101661 13f79535-47bb-0310-9956-ffa450edef68

1f2ddd5b

Let mod_autoindex show filenames containing special chars like %. · b21bcca1

Andre Malo authored Nov 01, 2003

PR: 13598


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101659 13f79535-47bb-0310-9956-ffa450edef68

b21bcca1

sync with stable branch · aa762576

Jeff Trawick authored Nov 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101651 13f79535-47bb-0310-9956-ffa450edef68

aa762576

sync with stable branch · a3d76d1d

Jeff Trawick authored Nov 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101648 13f79535-47bb-0310-9956-ffa450edef68

a3d76d1d

Oct 30, 2003

* modules/generators/mod_info.c: · d3f0f5ca

Thom May authored Oct 30, 2003

        (mod_info_module_cmds) ap_escape_html() all directives and
        arguments.
PR: 24232


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101626 13f79535-47bb-0310-9956-ffa450edef68

d3f0f5ca

Oct 29, 2003

mod_status: Report total CPU time accurately when using a threaded · f5448c23

Jeff Trawick authored Oct 29, 2003

MPM.

Note: It worked before with linuxthreads and it still does.  But now
it works with normal thread implementations too.

PR:     23795


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101614 13f79535-47bb-0310-9956-ffa450edef68

f5448c23

Oct 26, 2003

Forward port from 2.0: · 20784b13

Sander Striker authored Oct 26, 2003

SECURITY [CAN-2003-0789]: mod_cgid: Resolve some mishandling of
the AF_UNIX socket used to communicate with the cgid daemon and
the CGI script.

Submitted by: Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101570 13f79535-47bb-0310-9956-ffa450edef68

20784b13

Oct 24, 2003

Fold in the CAN-2003-0542 regex patch. · 49a9edff

Sander Striker authored Oct 24, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101556 13f79535-47bb-0310-9956-ffa450edef68

49a9edff

Oct 23, 2003

sync · 5d57a16a

Andre Malo authored Oct 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101540 13f79535-47bb-0310-9956-ffa450edef68

5d57a16a

* modules/ssl/ssl_engine_vars.c (ssl_var_log_handler_c): Fix · daa2f29b

Joe Orton authored Oct 23, 2003

segfault on a non-SSL request.

PR: 22741
Submitted by: Gary E. Miller <gem@rellim.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101534 13f79535-47bb-0310-9956-ffa450edef68

daa2f29b

Oct 22, 2003

Set the scoreboard state to indicate logging prior to running · 4a618b72

Jeff Trawick authored Oct 22, 2003

logging hooks so that server-status will show 'L' for hung loggers
instead of 'W'.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101517 13f79535-47bb-0310-9956-ffa450edef68

4a618b72