Commits · 03f0bf8399a5c205b259b641ff9d4ea7684fce59 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

09 Oct, 2011 11 commits

If a child is created just before graceful restart and then exits because · 03f0bf83

Stefan Fritsch authored Oct 09, 2011

of a missing lock file, don't shutdown the whole server.

PR: 39311
Submitted by: Shawn Michael <smichael rightnow com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180742 13f79535-47bb-0310-9956-ffa450edef68

03f0bf83

Check the return value from ap_run_create_connection in mpm_event. · 67c29fed

Stefan Fritsch authored Oct 09, 2011

Add a todo in mpm_simple

PR: 41194
Submitted by: Davi Arnaut


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180737 13f79535-47bb-0310-9956-ffa450edef68

67c29fed

Clarify behavior of multiple rewrite rules in the same scope. refs... · facf4b71

Richard Bowen authored Oct 09, 2011

Clarify behavior of multiple rewrite rules in the same scope. refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51968


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180734 13f79535-47bb-0310-9956-ffa450edef68

facf4b71

mod_mime_magic: Add signatures for PNG and SWF to the example config. · 5a9b03c6

Stefan Fritsch authored Oct 09, 2011

PR: 48352
Submitted by: Jeremy Wagner-Kaiser <jwagner-kaiser adknowledge com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180725 13f79535-47bb-0310-9956-ffa450edef68

5a9b03c6

Only dump User/Group if DUMP_RUN_CFG is defined · 84ac1c7d

Stefan Fritsch authored Oct 09, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180719 13f79535-47bb-0310-9956-ffa450edef68

84ac1c7d

s/perl/Perl/ · a76a35d7

Jeff Trawick authored Oct 09, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180699 13f79535-47bb-0310-9956-ffa450edef68

a76a35d7

Force base 10 when parsing the Content-Length. It doesn't matter in this · 8a7db7c0

Stefan Fritsch authored Oct 09, 2011

case, but in general using strto*(..., 0) for parsing HTTP headers is a bug.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180689 13f79535-47bb-0310-9956-ffa450edef68

8a7db7c0

Consistently use base 10 for numbers when parsing config options. It may be · 1cbfd00e

Stefan Fritsch authored Oct 09, 2011

confusing to the user if some directives treat a number with leading zero as
octal while most don't.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180687 13f79535-47bb-0310-9956-ffa450edef68

1cbfd00e

Add -D DUMP_RUN_CFG option to dump some configuration items · ff444d9c

Stefan Fritsch authored Oct 09, 2011

from the parsed (or default) config. This is useful for init scripts that
need to setup temporary directories and permissions, for example if those
temporary directories are located on a ram disk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180681 13f79535-47bb-0310-9956-ffa450edef68

ff444d9c

Consistenly use apr_file_* API instead of libc when dumping config because · 4e3b14c0

Stefan Fritsch authored Oct 09, 2011

mixing the two can give strange results due to buffering.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180671 13f79535-47bb-0310-9956-ffa450edef68

4e3b14c0

Remove ap_proxy_removestr(). It has been unused for a decade and has quadratic · 8e065037
Stefan Fritsch authored Oct 09, 2011
```
memory usage.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180654 13f79535-47bb-0310-9956-ffa450edef68
```
8e065037

08 Oct, 2011 13 commits

Rebuild various xdocs · abc11fda

Richard Bowen authored Oct 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180504 13f79535-47bb-0310-9956-ffa450edef68

abc11fda

Rebuild various xdocs · 360ad58e

Richard Bowen authored Oct 08, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180503 13f79535-47bb-0310-9956-ffa450edef68

360ad58e

Note that hostname lookups will be performed for 'require from hostname' · 01e2444d

Richard Bowen authored Oct 08, 2011

directives, regardless of the setting of HostnameLookups. refs
https://issues.apache.org/bugzilla/show_bug.cgi?id=51967

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180502 13f79535-47bb-0310-9956-ffa450edef68

01e2444d

refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51967 Mention · ad9ea425

Richard Bowen authored Oct 08, 2011

that %h will sometimes log the IP address, and sometimes the hostname,
depending on HostNameLookup setting and the use of hostname-based
authorization directives.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180500 13f79535-47bb-0310-9956-ffa450edef68

ad9ea425

mod_authn_socache: fix it to enable initialisation to work if configured · ab9d5d15

Nick Kew authored Oct 08, 2011

only in .htaccess context, and provide a toggle for that.
PR 51991


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180384 13f79535-47bb-0310-9956-ffa450edef68

ab9d5d15

Updates. · 81517445

Lucien Gentis authored Oct 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180379 13f79535-47bb-0310-9956-ffa450edef68

81517445

Shut up gcc/glibc warning about ignoring write()'s return value. · 4f540f4a

Stefan Fritsch authored Oct 08, 2011

This may actually fix a real bug in case the error log is directed to a FIFO.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180334 13f79535-47bb-0310-9956-ffa450edef68

4f540f4a

Fix format string bugs in mod_lua. Found by gcc and pointed out by Igor Galic. · 79847a41
Stefan Fritsch authored Oct 08, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180332 13f79535-47bb-0310-9956-ffa450edef68
```
79847a41

Add some CFLAGS in maintainer mode if supported by gcc: · 2befe171

Stefan Fritsch authored Oct 08, 2011

-Wformat
-Wformat-security
-Werror=format-security
-Werror=declaration-after-statement

Add new macro APACHE_ADD_GCC_CFLAGS to do the compatibility check.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180331 13f79535-47bb-0310-9956-ffa450edef68

2befe171

Add another AP_DEBUG_ASSERT to document some assumptions in the code, · 434985f0

Stefan Fritsch authored Oct 08, 2011

for the benefit of code analyzers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180330 13f79535-47bb-0310-9956-ffa450edef68

434985f0

Fix a potential NULL pointer dereference found by clang. · e7a12918

Stefan Fritsch authored Oct 08, 2011

Add a AP_DEBUG_ASSERT to quiet a clang false positive.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180329 13f79535-47bb-0310-9956-ffa450edef68

e7a12918

Downgrade error log messages which accompany a 404 request status from loglevel · 8104f18b

Stefan Fritsch authored Oct 08, 2011

error to info.

List thread at
http://mail-archives.apache.org/mod_mbox/httpd-dev/201110.mbox/%3Calpine.DEB.2.00.1110041948280.664@eru.sfritsch.de%3E

PR: 35768


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180328 13f79535-47bb-0310-9956-ffa450edef68

8104f18b

Sort hooks twice, once before pre_config, once after ap_process_config_tree. · 701c0370

Stefan Fritsch authored Oct 08, 2011

This fixes a regression with perl modules introduced by r1032002

PR: 45076
Submitted by: Torsten Foertsch <torsten foertsch gmx net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180325 13f79535-47bb-0310-9956-ffa450edef68

701c0370

07 Oct, 2011 2 commits

Rebuild doc transformations. · 1feb3eee

Richard Bowen authored Oct 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179914 13f79535-47bb-0310-9956-ffa450edef68

1feb3eee

Refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51967 Clarify · 3bdc4422

Richard Bowen authored Oct 07, 2011

that %h logs the IP address when HostnameLookup is set Off.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179913 13f79535-47bb-0310-9956-ffa450edef68

3bdc4422

06 Oct, 2011 3 commits

re-add "extern" accidentally removed by r1179448 · 7ea8317e

Stefan Fritsch authored Oct 06, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179715 13f79535-47bb-0310-9956-ffa450edef68

7ea8317e

Rebuild doc transform · a0a5a3bd

Richard Bowen authored Oct 06, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179617 13f79535-47bb-0310-9956-ffa450edef68

a0a5a3bd

Patch from Description Mathijs Schmittmann - Corrected syntax for && (vs &)... · 2d3477a1

Richard Bowen authored Oct 06, 2011

Patch from Description Mathijs Schmittmann - Corrected syntax for && (vs &) expression. Refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51976


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179614 13f79535-47bb-0310-9956-ffa450edef68

2d3477a1

05 Oct, 2011 7 commits

Export ap_max_mem_free, needed by r1178079, as pointed out by Gregg L. Smith · 7065098b
Stefan Fritsch authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179448 13f79535-47bb-0310-9956-ffa450edef68
```
7065098b

- `build.sh all` · 163289ae

Joe Orton authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179273 13f79535-47bb-0310-9956-ffa450edef68

163289ae

- add note here in light of CVE-2011-3368 · f8a11311

Joe Orton authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179272 13f79535-47bb-0310-9956-ffa450edef68

f8a11311

- add a security warning, and tweak the example, in light of CVE-2011-3368 · b10aeb17
Joe Orton authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179266 13f79535-47bb-0310-9956-ffa450edef68
```
b10aeb17

SECURITY (CVE-2011-3368): Prevent unintended pattern expansion in some · 2125cb1b

Joe Orton authored Oct 05, 2011

reverse proxy configurations by strictly validating the request-URI:

* server/protocol.c (read_request_line): Send a 400 response if the
  request-URI does not match the grammar from RFC 2616.  This ensures
  the input string for RewriteRule et al really is an absolute path.

Reviewed by: rpluem, wrowe, covener, fielding


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179239 13f79535-47bb-0310-9956-ffa450edef68

2125cb1b

Rebuild html. · a8d4d567

Richard Bowen authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179184 13f79535-47bb-0310-9956-ffa450edef68

a8d4d567

Fix link to Friedl's book. (refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51959) · 58acd380
Richard Bowen authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179179 13f79535-47bb-0310-9956-ffa450edef68
```
58acd380

04 Oct, 2011 2 commits

Add SSLCARevocationCheck directive to default mod_ssl config · 4865b878
Kaspar Brand authored Oct 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178695 13f79535-47bb-0310-9956-ffa450edef68
```
4865b878

fix indentation · 6ad30a0b

Kaspar Brand authored Oct 04, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178694 13f79535-47bb-0310-9956-ffa450edef68

6ad30a0b

03 Oct, 2011 2 commits

Enforce LimitRequestFieldSize after multiple headers with the same · 230803c5

Stefan Fritsch authored Oct 03, 2011

name have been merged.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178566 13f79535-47bb-0310-9956-ffa450edef68

230803c5

TODO note regarding the LimitInternalRecursion error message. · 051e2018
Richard Bowen authored Oct 03, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178523 13f79535-47bb-0310-9956-ffa450edef68
```
051e2018