Commits · 084e3181b9aaac1b73e7827f8a9c77b148de947c · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Mar 29, 2003

Simplify and shorten the code path for scanning request headers · 084e3181

Brian Pane authored Mar 29, 2003

Reviewed by:	Greg Ames, Bill Rowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99109 13f79535-47bb-0310-9956-ffa450edef68

084e3181

Mar 28, 2003

keep changes in sync ... · ffc86bdc

Andre Malo authored Mar 28, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99101 13f79535-47bb-0310-9956-ffa450edef68

ffc86bdc

Mar 24, 2003

ap_get_mime_headers_core: allocate space for the trailing null when there · 80858976

Greg Ames authored Mar 24, 2003

are folded headers. PR 18170 [Peter Mayne <PeterMayne@SPAM_SUX.ap.spherion.com>]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99057 13f79535-47bb-0310-9956-ffa450edef68

80858976

Mar 22, 2003

Do not bypass output filters when redirecting subrequests internally. · a98ca162

Andre Malo authored Mar 22, 2003

PR: 17629


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99042 13f79535-47bb-0310-9956-ffa450edef68

a98ca162

Mar 20, 2003

· 9f53fda6

William A. Rowe Jr authored Mar 20, 2003

  SECURITY:  Eliminated leaks of several file descriptors to child
  processes, such as CGI scripts.

PR: 17206
Submitted by:	Christian Kratzer <ck@cksoft.de>, Bjoern A. Zeeb <bz@zabbadoz.net>
Reviewed by:	Joe Orton, Will Rowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99032 13f79535-47bb-0310-9956-ffa450edef68

9f53fda6

Mar 19, 2003

keep changes in sync · 9c9548c4

Andre Malo authored Mar 19, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99026 13f79535-47bb-0310-9956-ffa450edef68

9c9548c4

Mar 14, 2003

OpenSSL should be included as "openssl/ssl.h" and not "ssl.h" (and rely on the · 5939e88f

Madhusudan Mathihalli authored Mar 14, 2003

INCLUDE path to be defined properly)

PR: 11310
Submitted by: Geoff Thrope <geoff@geoffthrope.net>
Reviewed by: Madhusudan Mathihalli


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99008 13f79535-47bb-0310-9956-ffa450edef68

5939e88f

Mar 13, 2003

· 59bd106f

Paul J. Reder authored Mar 13, 2003

I did the work, got out the vote, back-ported it, removed the vote, but forgot
to move the CHANGES entry... Darn. I've moved it to where it *should* have
been. I hope this causes less confusion than having it out of sequence would
have...

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99002 13f79535-47bb-0310-9956-ffa450edef68

59bd106f

Modify the APACHE_CHECK_SSL_TOOLKIT to detect SSL-C (atleast version 2.1). · 12c355d1

Madhusudan Mathihalli authored Mar 13, 2003

Submitted by: Madhusudan Mathihalli


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99000 13f79535-47bb-0310-9956-ffa450edef68

12c355d1

Replace the APACHE_CHECK_SSL_TOOLKIT method with a cleaner one, using · 5038d2af

Madhusudan Mathihalli authored Mar 13, 2003

autoconf tools (AC_CHECK_HEADER, AC_CHECK_LIB etc).

Submitted by: Geoff Thorpe <geoff@geoffthorpe.net>
Reviewed by: Madhu, Justin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98999 13f79535-47bb-0310-9956-ffa450edef68

5038d2af

Backported this fix to 2.0.45-dev · 8bc7cf0d

Bill Stoddard authored Mar 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98997 13f79535-47bb-0310-9956-ffa450edef68

8bc7cf0d

Oops. I'd forgotten to update the CHANGES file with the shmht fix. · e771c965

Madhusudan Mathihalli authored Mar 13, 2003

PR: 17864
Submitted by: Andreas Leimbacher <andreasl67@yahoo.de>
Reviewed by: Madhusudan Mathihalli


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98994 13f79535-47bb-0310-9956-ffa450edef68

e771c965

Mar 12, 2003

reflect a fix merged to 2.0.45-dev · 680350e4

Jeff Trawick authored Mar 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98992 13f79535-47bb-0310-9956-ffa450edef68

680350e4

Mar 11, 2003

reflect backport of mod_deflate.c r1.31 · 34637efa

Ian Holsman authored Mar 11, 2003

change directive from compressionlevel to deflatecompressionlevel

PR:
Obtained from:
Submitted by:	Ian Holsman, Andre Malo
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98982 13f79535-47bb-0310-9956-ffa450edef68

34637efa

· c6b50550

William A. Rowe Jr authored Mar 11, 2003

Move an accepted backport. BTW - what's with the *new* mismatches
between CHANGES in 2.0-stable and 2.1-dev under the (2.0.45) section?

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98972 13f79535-47bb-0310-9956-ffa450edef68

c6b50550

Mar 10, 2003

mod_negotiation: quality values are now parsed independent from · 19e6845a

Andre Malo authored Mar 10, 2003

the current locale. level values are now really parsed as integers.

PR: 17564
Reviewed by: Dirk-Willem van Gulik


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98964 13f79535-47bb-0310-9956-ffa450edef68

19e6845a

Mar 09, 2003

keep changes in sync. · c9a1620d

Andre Malo authored Mar 09, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98953 13f79535-47bb-0310-9956-ffa450edef68

c9a1620d

Mar 08, 2003

Check also err_headers_out for an already set Content-Encoding: · d1411e01

Andre Malo authored Mar 08, 2003

gzip header. This prevents gzip compressed content from a CGI
script from being compressed once more.

PR: 17797


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98948 13f79535-47bb-0310-9956-ffa450edef68

d1411e01

Mar 07, 2003

keep changes in sync. · 7f289060

Andre Malo authored Mar 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98944 13f79535-47bb-0310-9956-ffa450edef68

7f289060

keep changes in sync. · 5f0acaa0

Andre Malo authored Mar 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98942 13f79535-47bb-0310-9956-ffa450edef68

5f0acaa0

keep changes in sync... · bb11d359

Andre Malo authored Mar 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98940 13f79535-47bb-0310-9956-ffa450edef68

bb11d359

Updated to reflect the backport of the auth_LDAP SSL standardization patch · 5498507e
Bradley Nicholes authored Mar 07, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98937 13f79535-47bb-0310-9956-ffa450edef68
```
5498507e

Mar 06, 2003

Minor MMN bump: · 7b1d2e3f

Andre Malo authored Mar 06, 2003

Forward port: Escape special characters (especially control
characters) in mod_log_config to make a clear distinction between
client-supplied strings (with special characters) and server-side
strings. This was already introduced in version 1.3.25.

Obtained from: Patch in 1.3.25-dev by Martin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98912 13f79535-47bb-0310-9956-ffa450edef68

7b1d2e3f

mod_usertrack: don't set the cookie in subrequests. This works · 6993016e

Andre Malo authored Mar 06, 2003

around the problem that cookies were set twice during fast internal
redirects.

PR: 13211


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98910 13f79535-47bb-0310-9956-ffa450edef68

6993016e

Linux 2.4+: enable coredumps when Apache is started as root if · 4dc0df85

Greg Ames authored Mar 06, 2003

            CoreDumpDirectory is explicitly coded


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98908 13f79535-47bb-0310-9956-ffa450edef68

4dc0df85

· bc73cb0d

William A. Rowe Jr authored Mar 06, 2003

  Jeff reminds me, document this one (users observed the bug).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98901 13f79535-47bb-0310-9956-ffa450edef68

bc73cb0d

Mar 05, 2003

new directive 'compressionlevel' · 4a81e1bd

Ian Holsman authored Mar 05, 2003

Default compression level now changed to Zlib's default (was 'best_speed')

Obtained from: Stephen Pierzchala <stephen@pierzchala.com> Michael Schroepl <Michael.Schroepl@telekurs.de>
Reviewed by: Ian Holsman

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98895 13f79535-47bb-0310-9956-ffa450edef68

4a81e1bd

Restore the ability of htdigest.exe to create files that contain · 17c7b231

Andre Malo authored Mar 05, 2003

more than one user. On win32 we cannot system("copy") a file, while
it's open.

PR: PR 12910


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98893 13f79535-47bb-0310-9956-ffa450edef68

17c7b231

Mar 04, 2003

Added the WindowsSocketsWorkaroud directive for Windows NT/2000/XP · 0c1274ca

Allan K. Edwards authored Mar 04, 2003

to work around problems with certain VPN and Firewall products that
have buggy AcceptEx implementations

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98890 13f79535-47bb-0310-9956-ffa450edef68

0c1274ca

Mar 02, 2003

Unescape the supplied wildcard pattern. Otherwise the pattern will · db6281fc

Andre Malo authored Mar 02, 2003

not always match as desired. In order to be correct and safe, the
pattern will be re-escaped for output.

PR: 12596


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98885 13f79535-47bb-0310-9956-ffa450edef68

db6281fc

emit and accept modern query string parameter delimiters (;). · 5072e70c

Andre Malo authored Mar 02, 2003

Thus column headers no longer contain unescaped ampersands.

PR: 10880


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98883 13f79535-47bb-0310-9956-ffa450edef68

5072e70c

buhuh! use the correct target string and don't forget · 06c396a3

Andre Malo authored Mar 02, 2003

F=x and V=y in column headers ...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98882 13f79535-47bb-0310-9956-ffa450edef68

06c396a3

Mar 01, 2003

Extend mod_negotiation to evaluate the environment variables · 2fbdc4ae

Andre Malo authored Mar 01, 2003

no-gzip and gzip-only-text/html the same way as mod_deflate does.

(it drops all non-identity encodings, not only gzip)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98871 13f79535-47bb-0310-9956-ffa450edef68

2fbdc4ae

Prevent endless loops of internal redirects in mod_rewrite by · 70285cc6

Andre Malo authored Mar 01, 2003

aborting after exceeding a limit of internal redirects. The
limit defaults to 10 and can be changed using the RewriteOptions
directive with the new MaxRedirects=n argument.
(The latter required some restructuring of the RewriteOptions
 evaluation code).

(Documentation patch follows asap)

PR: 17462


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98863 13f79535-47bb-0310-9956-ffa450edef68

70285cc6

Feb 28, 2003

huh, add missing changelog entry ... · 60d4048f

Andre Malo authored Feb 28, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98842 13f79535-47bb-0310-9956-ffa450edef68

60d4048f

mod_rewrite: Fix some problems reporting errors with mapping · eeb143f4

Jeff Trawick authored Feb 28, 2003

programs (RewriteMap prg:/something).

the wrong field was specified when trying to log the name of
the program that couldn't be started

recent APR features used to provide better error reporting
on systems where apr_proc_create() uses fork()


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98840 13f79535-47bb-0310-9956-ffa450edef68

eeb143f4

Feb 27, 2003

account for a fix merged into stable branch · 1efcf160

Jeff Trawick authored Feb 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98822 13f79535-47bb-0310-9956-ffa450edef68

1efcf160

account for a mod_ssl fix merged into stable branch · 5dbe74de

Jeff Trawick authored Feb 27, 2003

(there never was a CHANGES entry for 2.1-dev... bad Madhu :) )


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98819 13f79535-47bb-0310-9956-ffa450edef68

5dbe74de

Reflect some backported patches. · 115d10da

Justin Erenkrantz authored Feb 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98817 13f79535-47bb-0310-9956-ffa450edef68

115d10da

keep the entries consistent. · 75150f69

Andre Malo authored Feb 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98813 13f79535-47bb-0310-9956-ffa450edef68

75150f69