Increase security in core.c by testing (as we merge the path) that the
  URI does not go above the DocumentRoot (as defined by the OS, not by
  the URI specification), and give us the true name.

  When we are done, note the name is canonical for directory_walk.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90593 13f79535-47bb-0310-9956-ffa450edef68

  Whoops.  To explain, we won't dup filename unless it really didn't match
  in the first place.  We are about to abuse test_filename, so don't try
  using that copy.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90592 13f79535-47bb-0310-9956-ffa450edef68

  Start with the presumption that canonical_filename is not likely to be set.
  Therefore we will canonicalize it when it doesn't match filename.

  The next optimization should take the path common to canonical_filename
  and filename, and start merging filename from there for canonicalization.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90591 13f79535-47bb-0310-9956-ffa450edef68

  Another spot we are certain of the canonical_filename


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90590 13f79535-47bb-0310-9956-ffa450edef68

  We already extract e for subprocess_env, and set SECURE_SERVER_PORT
  for real.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90589 13f79535-47bb-0310-9956-ffa450edef68

  Why two ifdef blocks?  This is simpler to read


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90588 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90587 13f79535-47bb-0310-9956-ffa450edef68

  Two cases we are certain of canonical correctness


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90586 13f79535-47bb-0310-9956-ffa450edef68

  Add a canonical_filename value (should remain the r->filename identity)
  so we can tell if a 3rd party module broke the canonical form of the
  filename by not calling apr_filepath_merge().


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90585 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90584 13f79535-47bb-0310-9956-ffa450edef68

  Better doc of ap_server_root_relative()


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90583 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90582 13f79535-47bb-0310-9956-ffa450edef68

a note about why it is commented out would be appropriate too


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90581 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90580 13f79535-47bb-0310-9956-ffa450edef68

change the module variable from tcache_module to cache_module

clear up various gcc warnings

don't segfault when the silly user (me) configures CACHE_OUT
manually


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90579 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90578 13f79535-47bb-0310-9956-ffa450edef68

  Add some appropriate constness to the config


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90577 13f79535-47bb-0310-9956-ffa450edef68

requested


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90576 13f79535-47bb-0310-9956-ffa450edef68

  Silly compiler, const char* is for text :)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90575 13f79535-47bb-0310-9956-ffa450edef68

  I _like_ malloca(), but it needs an include


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90574 13f79535-47bb-0310-9956-ffa450edef68

  Rather than continuing to canonicalize within directory_walk (very time
  consuming on all but *nix systems) we temporarily canonicalize to compare
  the results of the many merges, and fail on a mismatch.

  The apr_filepath_merge and ap_server_root_relative calls now merge the
  file _by canonicalizing it_.  That includes resolving all /../, /./,
  and // misnomers.

  A minor effort is required to figure out who all munges the r->filename
  in an inappropriate manner.

  The final (return to optimized state) probably involves setting an
  r->goodname argument to r->filename, every time we properly merge
  through ap_server_root_relative or apr_filepath_merge().


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90573 13f79535-47bb-0310-9956-ffa450edef68

  Eliminated ap_os_[systemcase|[case_]canonical]_filename() and
  changes for ap_os_is_path_absolute (moved to util.c).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90572 13f79535-47bb-0310-9956-ffa450edef68

  Overhauled ap_server_root_relative, so that it now changes any path
  to canonical form through apr.  Also assures that a change to the
  ServerRoot through a -C option takes effect before locating the
  httpd.conf file.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90571 13f79535-47bb-0310-9956-ffa450edef68

  Eliminated ap_os_[systemcase|[case_]canonical]_filename() and
  changes for ap_os_is_path_absolute


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90570 13f79535-47bb-0310-9956-ffa450edef68

  New ap_os_is_path_absolute() semantics


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90569 13f79535-47bb-0310-9956-ffa450edef68

The existing faq will be deleted soon.

Discussion to follow on docs list.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90568 13f79535-47bb-0310-9956-ffa450edef68

  Eliminated ap_os_[systemcase|[case_]canonical]_filename() and
  move ap_os_is_path_absolute() into util.c (now relies on apr.)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90567 13f79535-47bb-0310-9956-ffa450edef68

  Canonicalization will now occur on all sub_req_lookup_file() calls,
  and the ap_server_root_relative() will handle canonicalization as well.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90566 13f79535-47bb-0310-9956-ffa450edef68

  ap_server_root_relative will take care of this canonical_file call.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90565 13f79535-47bb-0310-9956-ffa450edef68

  Performance death notices.  Note that we shouldn't have EVER coded a
  module with a fixed path ... the config phase should take the proxy/
  path and ap_server_root_relative() it at startup.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90564 13f79535-47bb-0310-9956-ffa450edef68

  Optimize out what is a very expensive in-request call to
  ap_server_root_relative (and is becoming more expensive).
  Now the call happens in the config phase where it belongs.
  Note someone can hop in and transpose the stat and open
  with an open and getfileinfo if you are a performance hound.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90563 13f79535-47bb-0310-9956-ffa450edef68

  Clear out this optimization till we are prepared for it (not now.)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90562 13f79535-47bb-0310-9956-ffa450edef68

  Fix most-bogus ap_server_root_relative() cases.  These don't include
  the cases where we are trying to ap_server_root_relative() a pipe cmd!


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90561 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90560 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90557 13f79535-47bb-0310-9956-ffa450edef68

  This was copied as a test of the ap_r[put|putc|write|printf] family of
  functions.  Since those don't seem to be going anywhere, this test is
  redundant and a maintance headache.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90555 13f79535-47bb-0310-9956-ffa450edef68

Fix for mod_include. Ryan's patch to check error
codes put a return in the wrong place. Also, the
include handler return code wasn't being checked.
I don't like macros with returns, so I converted
SPLIT_AND_PASS_PRETAG_BUCKETS into a function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90554 13f79535-47bb-0310-9956-ffa450edef68

Reported by: Jeff Trawick, Paul Reder


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90553 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90552 13f79535-47bb-0310-9956-ffa450edef68

It will now reside in the ServerRoot, alongside with .../man/ and .../icons/
and .../htdocs/
-
Please review the config.layout entries for the vendor specific entries,
I supplied sensible defaults but you may disagree.

Reviewed by:	William A. Rowe, Jr., Joshua Slive, Rich Bowen


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90551 13f79535-47bb-0310-9956-ffa450edef68