Commits · 04a4aeec9c8cd9a6f242fdd39f70968b0e68873b · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

04 Mar, 2010 1 commit
- Small rearrangement, placing the explanatory text with the example it · 04a4aeec
  Richard Bowen authored Mar 04, 2010
```
explains.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918997 13f79535-47bb-0310-9956-ffa450edef68
```
  04a4aeec
03 Mar, 2010 9 commits

Jeff Trawick authored Mar 03, 2010

These particular functions can't be static because they're 
part of ISAPI, so use a different mechanism to quiet the gcc 
warnings.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918671 13f79535-47bb-0310-9956-ffa450edef68

e080ce1a

fix these warnings: · 46e83ce8

Jeff Trawick authored Mar 03, 2010

mod_isapi.c:488: warning: no previous prototype for ‘GetServerVariable’
mod_isapi.c:590: warning: no previous prototype for ‘ReadClient’
mod_isapi.c:807: warning: no previous prototype for ‘WriteClient’
mod_isapi.c:863: warning: no previous prototype for ‘ServerSupportFunction’
mod_isapi.c:1407: warning: no previous prototype for ‘isapi_handler’

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918665 13f79535-47bb-0310-9956-ffa450edef68

46e83ce8

fix these warnings (and presumably a similar one in mod_socache_dc.c): · 1c35b7bc

Jeff Trawick authored Mar 03, 2010

mod_socache_shmcb.c:625: warning: no previous prototype for ‘socache_shmcb_iterate’
mod_socache_dbm.c:505: warning: no previous prototype for ‘socache_dbm_iterate’
mod_socache_memcache.c:290: warning: no previous prototype for ‘socache_mc_iterate’

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918655 13f79535-47bb-0310-9956-ffa450edef68

1c35b7bc

fix this warning: · 56fdf7e2

Jeff Trawick authored Mar 03, 2010

mod_example_hooks.c: In function ‘trace_nocontext’:
mod_example_hooks.c:494: warning: format not a string literal and no format arguments

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918654 13f79535-47bb-0310-9956-ffa450edef68

56fdf7e2

fix this error: · 6ecc05b1

Jeff Trawick authored Mar 03, 2010

mod_sed.c: In function ‘log_sed_errf’:
mod_sed.c:67: warning: format not a string literal and no format arguments

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918653 13f79535-47bb-0310-9956-ffa450edef68

6ecc05b1

use separate #error message when APR[-Util] is of a valid · dc95c4ab

Jeff Trawick authored Mar 03, 2010

version but wasn't built with crypto support


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918562 13f79535-47bb-0310-9956-ffa450edef68

dc95c4ab

Typo. Regenerating html · 5ce9d7c1

Richard Bowen authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918531 13f79535-47bb-0310-9956-ffa450edef68

5ce9d7c1

Typo · 60fcfb56

Richard Bowen authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918528 13f79535-47bb-0310-9956-ffa450edef68

60fcfb56

reflect assignment of CVE-2010-0434 · 9d130409

Jeff Trawick authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918428 13f79535-47bb-0310-9956-ffa450edef68

9d130409

02 Mar, 2010 14 commits

Rebuild transformations. · 84d30561

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918034 13f79535-47bb-0310-9956-ffa450edef68

84d30561

Tell them how to increase ThreadLimit · d9b0c013

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918033 13f79535-47bb-0310-9956-ffa450edef68

d9b0c013

Rebuild transformations. · 0b4dd669

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918025 13f79535-47bb-0310-9956-ffa450edef68

0b4dd669

Reference Min/MaxSpareServers/Threads when talking about dynamically · 68d2d1d6

Richard Bowen authored Mar 02, 2010

configuring the side of the server pool.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918024 13f79535-47bb-0310-9956-ffa450edef68

68d2d1d6

Not sure if this is actually useful, but I've been asked often enough · cf39e73d

Richard Bowen authored Mar 02, 2010

that I think it's probably worth mentioning. On the other hand, if
someone can't grep the source code for '20000', I'm not sure they should
be encouraged ... ;-)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918022 13f79535-47bb-0310-9956-ffa450edef68

cf39e73d

Awkward phrasing. · 48561372

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918018 13f79535-47bb-0310-9956-ffa450edef68

48561372

Awkward phrasing. · f6fea86e

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918015 13f79535-47bb-0310-9956-ffa450edef68

f6fea86e

Cross-linking between (Min|Max)Spare(Servers|Threads). · 908a90b3

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918011 13f79535-47bb-0310-9956-ffa450edef68

908a90b3

'Address already in use' error message. · 36b560b7

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918003 13f79535-47bb-0310-9956-ffa450edef68

36b560b7

Another occurance of 'processes'. Rebuild transformations. · b1e60aae

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918002 13f79535-47bb-0310-9956-ffa450edef68

b1e60aae

Rebuild transformation. · 7927c652

Richard Bowen authored Mar 02, 2010



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917997 13f79535-47bb-0310-9956-ffa450edef68

7927c652

None of the supposedly correct forms of the possessive of process sound · 889ea07e

Richard Bowen authored Mar 02, 2010

very awkward in this sentence. Rephrasing.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917996 13f79535-47bb-0310-9956-ffa450edef68

889ea07e

SECURITY: CVE-2010-0408 (cve.mitre.org) · 2fe8ec85

William A. Rowe Jr authored Mar 02, 2010

mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent after
request headers indicate a request body is incoming; this is not a case of
HTTP_INTERNAL_SERVER_ERROR.

Submitted by: Niku Toivola <niku.toivola sulake.com>

rpluem, jim, wrowe



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917875 13f79535-47bb-0310-9956-ffa450edef68

2fe8ec85

SECURITY: CVE-2010-0425 (cve.mitre.org) · e9602aec

William A. Rowe Jr authored Mar 02, 2010

mod_isapi: Do not unload an isapi .dll module until the request
processing is completed, avoiding orphaned callback pointers.

Submitted by: Brett Gervasoni <brettg senseofsecurity.com>, trawick
Reviewed by: trawick, wrowe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917870 13f79535-47bb-0310-9956-ffa450edef68

e9602aec

01 Mar, 2010 5 commits

Make sure we request the APR_FINFO_TYPE on the apr_dir_read() for wildcard · 3e64d02b
Graham Leggett authored Mar 01, 2010
```
configuration.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917759 13f79535-47bb-0310-9956-ffa450edef68
```
3e64d02b

When loading wildcards that are part of a path, only consider directories · ef549917

Graham Leggett authored Mar 01, 2010

and ignore other files. [Dan Poirier, Graham Leggett]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917735 13f79535-47bb-0310-9956-ffa450edef68

ef549917

overlooked for 10 years, impressive ;-) · 41fe4bae

William A. Rowe Jr authored Mar 01, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917615 13f79535-47bb-0310-9956-ffa450edef68

41fe4bae

in preparation of fixing 2.2 branch, change again, now to a cast-less solution · 91fdaf5d
William A. Rowe Jr authored Mar 01, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917611 13f79535-47bb-0310-9956-ffa450edef68
```
91fdaf5d

test svn update · 7e61d6c0

Philip M. Gollucci authored Mar 01, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917386 13f79535-47bb-0310-9956-ffa450edef68

7e61d6c0

28 Feb, 2010 3 commits

Update transformation. · 55a908e4

Rainer Jung authored Feb 28, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917242 13f79535-47bb-0310-9956-ffa450edef68

55a908e4

Correct referenced OpenSSL version now that 0.9.8m · 8d0a0238

Rainer Jung authored Feb 28, 2010

was released.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917235 13f79535-47bb-0310-9956-ffa450edef68

8d0a0238

Add mod_reqtimeout line to Windows default configuration. · 24ba779e

Stefan Fritsch authored Feb 28, 2010

Submitted by: Gregg L. Smith <lists glewis com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917151 13f79535-47bb-0310-9956-ffa450edef68

24ba779e

27 Feb, 2010 3 commits

Use portable apr_snprintf in rotatelogs. · e76d6bb5

Graham Leggett authored Feb 27, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917029 13f79535-47bb-0310-9956-ffa450edef68

e76d6bb5

Create the pidfile world readable by adding APR_FPROT_WREAD. Use · 4b86d701

Graham Leggett authored Feb 27, 2010

non-deprecated versions of the APR constants.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917005 13f79535-47bb-0310-9956-ffa450edef68

4b86d701

Try open the pid file twice, once before daemonisation so we can see any · 0ff31547

Graham Leggett authored Feb 27, 2010

error, and once after daemonisation so the child's pid is logged correctly.
Patch by Jeff Trawick.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917002 13f79535-47bb-0310-9956-ffa450edef68

0ff31547

26 Feb, 2010 5 commits

build mod_reqtimeout on Windows · 285c8327

Jeff Trawick authored Feb 26, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916866 13f79535-47bb-0310-9956-ffa450edef68

285c8327

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLInsecureRenegotiation): · 6052186d

Joe Orton authored Feb 26, 2010

  Tweak wording as suggested by trawick.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916817 13f79535-47bb-0310-9956-ffa450edef68

6052186d

fix base addr of mod_serf · 15e47b6c

Jeff Trawick authored Feb 26, 2010

Submitted by: Gregg L. Smith <lists@glewis.com>
Reviewed by:  trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916804 13f79535-47bb-0310-9956-ffa450edef68

15e47b6c

spelling · 807b9e24

Jeff Trawick authored Feb 26, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916789 13f79535-47bb-0310-9956-ffa450edef68

807b9e24

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Dump the SSL · cdedbd11

Joe Orton authored Feb 26, 2010

error stack if reneg fails; this will give a big hint for failures
due to secure reneg.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916733 13f79535-47bb-0310-9956-ffa450edef68

cdedbd11