Commits · 1060495770726cad2f3676e16cba241f0314074d · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

30 Sep, 2009 1 commit

* Fix a regression from r724717 by reintroducing SSL_CLIENT_S_DN, · 10604957

Ruediger Pluem authored Sep 30, 2009

  SSL_CLIENT_I_DN, SSL_SERVER_S_DN, SSL_SERVER_I_DN back to the environment
  variables to be set by mod_ssl.

Submitted by: Peter Sylvester <peter.sylvester edelweb.fr>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@820401 13f79535-47bb-0310-9956-ffa450edef68

10604957

24 Sep, 2009 1 commit
- mod_cache: don't cache incomplete responses, per RFC 2616, 13.8. · 924d25e7
  Daniel Earl Poirier authored Sep 24, 2009
```
PR: 15866


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@818492 13f79535-47bb-0310-9956-ffa450edef68
```
  924d25e7
23 Sep, 2009 1 commit

Fix a segfault in ab when run in verbose mode using https. · 8561235d

Daniel Earl Poirier authored Sep 23, 2009

PR: 46393
Submitted by: Stefan Fritsch <sf sfritsch.de>, Ryan Niebur
Reviewed by: poirier


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@818204 13f79535-47bb-0310-9956-ffa450edef68

8561235d

19 Sep, 2009 1 commit

mod_dav: Allow other modules to become providers and add resource types · 81fc708f

Graham Leggett authored Sep 19, 2009

to the DAV response.
Submitted by: Jari Urpalainen <jari.urpalainen nokia.com>, Brian France <brian brianfrance.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@816893 13f79535-47bb-0310-9956-ffa450edef68

81fc708f

15 Sep, 2009 2 commits

Change Fallback to FallbackResource after extensive discussion with · 4682444d

Nick Kew authored Sep 15, 2009

wrowe and DrBacchus.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815502 13f79535-47bb-0310-9956-ffa450edef68

4682444d

Change "DefaultHandler" to "Fallback" as discussed on list and · 2d8c34cb

Nick Kew authored Sep 15, 2009

today on IRC, in the hope that everyone will be satisfied.
PR: 47184 + subsequent veto of original directive name

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815380 13f79535-47bb-0310-9956-ffa450edef68

2d8c34cb

14 Sep, 2009 6 commits

* Follow the standard CHANGES format for security changes. · e0424d6b
Ruediger Pluem authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814866 13f79535-47bb-0310-9956-ffa450edef68
```
e0424d6b
Correct attribution for mod_dav options provider interface. · dddc7e2e
Graham Leggett authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814860 13f79535-47bb-0310-9956-ffa450edef68
```
dddc7e2e

Add attribution and CVE notices. · 3f24dca3

Graham Leggett authored Sep 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814850 13f79535-47bb-0310-9956-ffa450edef68

3f24dca3

mod_dav: Allow other modules to add things to the DAV or Allow headers · 41a29e6e

Graham Leggett authored Sep 14, 2009

of an OPTIONS request.
Submitted by: Brian France <brian brianfrance.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814832 13f79535-47bb-0310-9956-ffa450edef68

41a29e6e

* Lower memory usage by reusing the brigade instead of constantly · 63ae0b6f

Ruediger Pluem authored Sep 14, 2009

  recerating one.

Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814807 13f79535-47bb-0310-9956-ffa450edef68

63ae0b6f

mod_mime: detect invalid use of MultiviewsMatch inside Location and · 0b1033ce

Daniel Earl Poirier authored Sep 14, 2009

LocationMatch sections.  Document that such usage is not valid.
PR47754.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814728 13f79535-47bb-0310-9956-ffa450edef68

0b1033ce

13 Sep, 2009 3 commits

mod_request: Make sure the KeptBodySize directive rejects values · 4979c0aa

Graham Leggett authored Sep 13, 2009

that aren't valid numbers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814337 13f79535-47bb-0310-9956-ffa450edef68

4979c0aa

mod_session_crypto: Sanity check should the potentially encrypted · 691b0692

Graham Leggett authored Sep 13, 2009

session cookie be too short.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814334 13f79535-47bb-0310-9956-ffa450edef68

691b0692

mod_session.c: Prevent a segfault when session is added but not · ca7c8b41

Graham Leggett authored Sep 13, 2009

configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814327 13f79535-47bb-0310-9956-ffa450edef68

ca7c8b41

11 Sep, 2009 1 commit

htcacheclean: 19 ways to fail, 1 error message. Fixed. · 32de8d5c

Graham Leggett authored Sep 11, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814091 13f79535-47bb-0310-9956-ffa450edef68

32de8d5c

10 Sep, 2009 2 commits

Fail server startup when mod_auth_digest is unable to · f8c7ff9c

Daniel Earl Poirier authored Sep 10, 2009

provide the security checks configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813396 13f79535-47bb-0310-9956-ffa450edef68

f8c7ff9c

veto-ed · 6876e93d

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813376 13f79535-47bb-0310-9956-ffa450edef68

6876e93d

09 Sep, 2009 3 commits

mod_proxy_connect: The connect method doesn't work if the client is · 34aeb912

Graham Leggett authored Sep 09, 2009

connecting to the apache proxy through an ssl socket. Fixed.
PR: 29744.
Submitted by: Brad Boyer, Mark Cave-Ayland, Julian Gilbey, Fabrice Durand,
David Gence, Tim Dodge, Per Gunnar Hans, Emmanuel Elango, Kevin Croft,
Rudolf Cardinal


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813178 13f79535-47bb-0310-9956-ffa450edef68

34aeb912

mod_ssl: The error message when SSLCertificateFile is missing should at · e92fef18

Graham Leggett authored Sep 09, 2009

least give the name or position of the problematic virtual host definition.
[Stefan Fritsch sf sfritsch.de]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813105 13f79535-47bb-0310-9956-ffa450edef68

e92fef18

mod_auth_digest: When qop is none, client doesn't send nonce count, · b3706dc4

Daniel Earl Poirier authored Sep 09, 2009

but module was segfaulting trying to check the nonce count anyway.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@812934 13f79535-47bb-0310-9956-ffa450edef68

b3706dc4

06 Sep, 2009 1 commit

Add support for HTTP PUT to ab. · eba65d27

Graham Leggett authored Sep 06, 2009

Submiited by: Jeff Barnes <jbarnesweb yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@811806 13f79535-47bb-0310-9956-ffa450edef68

eba65d27

28 Aug, 2009 2 commits

And additional ServerTokens improvement... · 62541784

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808965 13f79535-47bb-0310-9956-ffa450edef68

62541784

OK, might as well finish this... Allow ServerTokens Off · 15f0f61c

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808895 13f79535-47bb-0310-9956-ffa450edef68

15f0f61c

27 Aug, 2009 1 commit

mod_headers: generalise the envclause to support conditional · 71bdb2b8

Nick Kew authored Aug 27, 2009

header rules via ap_expr.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808240 13f79535-47bb-0310-9956-ffa450edef68

71bdb2b8

26 Aug, 2009 2 commits

mod_cache: Introduce the thundering herd lock, a mechanism to keep · 39034684

Graham Leggett authored Aug 26, 2009

the flood of requests at bay that strike a backend webserver as
a cached entity goes stale.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808212 13f79535-47bb-0310-9956-ffa450edef68

39034684

Fix shm, rmm, and lock problems. · c2d772c3

Daniel Earl Poirier authored Aug 26, 2009

PR: 16057


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808150 13f79535-47bb-0310-9956-ffa450edef68

c2d772c3

23 Aug, 2009 2 commits

Preserve port over internal redirection · b8a218f6

Nick Kew authored Aug 23, 2009

PR#35999
A four-year-old buglet!


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@807015 13f79535-47bb-0310-9956-ffa450edef68

b8a218f6

Return consistent error status for proxy unable to connect · 6680ce39

Nick Kew authored Aug 23, 2009

PR 46971


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@806920 13f79535-47bb-0310-9956-ffa450edef68

6680ce39

16 Aug, 2009 1 commit

* Do better checking of pollset operations in various places to avoid segfaults. · 5b09c5da

Ruediger Pluem authored Aug 16, 2009

PR: 46467
Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@804764 13f79535-47bb-0310-9956-ffa450edef68

5b09c5da

12 Aug, 2009 1 commit

* Correctly create an empty cell if the description for a file is missing. · 512f915c

Ruediger Pluem authored Aug 12, 2009

PR: 47682
Submitted by: Peter Poeml <poeml suse.de>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@803704 13f79535-47bb-0310-9956-ffa450edef68

512f915c

29 Jul, 2009 1 commit

ab: Fix broken error messages after resolver or connect() failures. · 1dc7bd6c

Jeff Trawick authored Jul 29, 2009

The APR error code was truncated because ab used an incorrect data
type.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@798943 13f79535-47bb-0310-9956-ffa450edef68

1dc7bd6c

24 Jul, 2009 1 commit

htdbm: Fix possible buffer overflow if dbm database has very · f8a8f3c5

Daniel Earl Poirier authored Jul 24, 2009

long values.  PR 30586 [Dan Poirier]

PR 30586
Reported by: Ulf Harnhammar, Swedish IT Incident Centre


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@797563 13f79535-47bb-0310-9956-ffa450edef68

f8a8f3c5

09 Jul, 2009 1 commit

* Return APR_EOF if request body is shorter than the length announced by the · a52bf4f4

Ruediger Pluem authored Jul 09, 2009

  client.

PR: 33098
Submitted by: Stefan Fritsch <sf sfritsch.de>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@792409 13f79535-47bb-0310-9956-ffa450edef68

a52bf4f4

05 Jul, 2009 1 commit

Correctly set suexec_enabled when httpd is run by non-root · 3cd0c3b1

Nick Kew authored Jul 05, 2009

PR 42175


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@791337 13f79535-47bb-0310-9956-ffa450edef68

3cd0c3b1

02 Jul, 2009 1 commit

Security fix for CVE-2009-1890: · 4685944e

Joe Orton authored Jul 02, 2009

* modules/proxy/mod_proxy_http.c (stream_reqbody_cl): Specify the base
  passed to apr_strtoff, and validate the Content-Length in the same
  way the HTTP_IN filter does.  If the number of bytes streamed
  exceeds the expected body length, bail out of the loop.

Submitted by: niq, jorton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@790587 13f79535-47bb-0310-9956-ffa450edef68

4685944e

23 Jun, 2009 1 commit

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_dn_rec): Map · def0588e

Joe Orton authored Jun 23, 2009

  the _UID variable to NID_userId, where defined by OpenSSL.

PR: 45107
Submitted by: Michael Ströder <michael stroeder.com>,
     Peter Sylvester <peter.sylvester edelweb.fr>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@787683 13f79535-47bb-0310-9956-ffa450edef68

def0588e

17 Jun, 2009 2 commits

mod_proxy_http: fix case sensitivity checking transfer encoding · fa70d245

Nick Kew authored Jun 17, 2009

PR 47383 [Ryuzo Yamamoto]



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@785661 13f79535-47bb-0310-9956-ffa450edef68

fa70d245

mod_alias: Ensure Redirect issues a valid URL · 04889aa0

Nick Kew authored Jun 17, 2009

PR 44020
Patch by Håkon Stordahl


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@785575 13f79535-47bb-0310-9956-ffa450edef68

04889aa0

16 Jun, 2009 1 commit

Add DefaultHandler directive to mod_dir. · 0d0ae994

Nick Kew authored Jun 16, 2009

PR 47184


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@785425 13f79535-47bb-0310-9956-ffa450edef68

0d0ae994