Commits · 1642916c159ca53df93281ff16d91872b58fe6ed · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Jul 09, 2002

Don't allow a negative value to sneak through · 1642916c

Jim Jagielski authored Jul 09, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95987 13f79535-47bb-0310-9956-ffa450edef68

1642916c

Allow for null/all-whitespace C-L fields as we did pre-1.3.26. However, · 048c718a

Jim Jagielski authored Jul 09, 2002

we do not allow for the total bogusness of values for C-L, just this
one special case. IMO a C-L field of "iloveyou" is bogus as is one
of "123yabbadabbado", which older versions appear to have allowed
(and in the 1st case, assume 0 and in the 2nd assume 123). Didn't
make sense to make this runtime, but a documented special case
instead.
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95986 13f79535-47bb-0310-9956-ffa450edef68

048c718a

Jul 08, 2002

Add ProtocolReqCheck directive, which determines if Apache will · 65c26d2b

Jim Jagielski authored Jul 08, 2002

check for a valid protocol string in the request (eg: HTTP/1.1)
and return HTTP_BAD_REQUEST if not valid. Versions of Apache
prior to 1.3.26 would silently ignore bad protocol strings, but
1.3.26 included a more strict check. This makes it runtime
configurable. The default is On. This also removes the requirement
on an ANSI sscanf() implementation.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95978 13f79535-47bb-0310-9956-ffa450edef68

65c26d2b

NetWare mod_rewrite file locking problem · 92889176

Bradley Nicholes authored Jul 08, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95974 13f79535-47bb-0310-9956-ffa450edef68

92889176

Since NetWare CLib does not implement file locking through fcntl() or flock(), · c8ff9867

Bradley Nicholes authored Jul 08, 2002

used a semaphore to simulate the file locking behavior.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95973 13f79535-47bb-0310-9956-ffa450edef68

c8ff9867

Jun 27, 2002

Finally signed and uploaded these. · 2f46cad6

Aaron Bannert authored Jun 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95904 13f79535-47bb-0310-9956-ffa450edef68

2f46cad6

On 2nd thought, these should be explicitly listed. · d19d8178

Jim Jagielski authored Jun 27, 2002

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95902 13f79535-47bb-0310-9956-ffa450edef68

d19d8178

Be consistant when highlighting security changes, check the CVE names · cab25f4c

Mark J. Cox authored Jun 27, 2002

and add some missing ones (I applied a while ago for the remaining
CVE names for older issues, but since these are pre-2000 they are low
priority)
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95901 13f79535-47bb-0310-9956-ffa450edef68

cab25f4c

Jun 26, 2002

· 73b2a171

Ken Coar authored Jun 26, 2002

	Style police; there appears to be a bug in here somewhere
	(see bugzilla #10259), and I want to get the code style
	fix out of the way first.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95890 13f79535-47bb-0310-9956-ffa450edef68

73b2a171

Add sinix & reliantunix · 926c3683

Martin Kraemer authored Jun 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95889 13f79535-47bb-0310-9956-ffa450edef68

926c3683

Jun 22, 2002

Binaries available for LinuxPPC · 74905209

Graham Leggett authored Jun 22, 2002

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95845 13f79535-47bb-0310-9956-ffa450edef68

74905209

... or at least, they WOULD be available if I could get my silly upload · b1d52c15

Cliff Woolley authored Jun 22, 2002

to daedalus to go through.  keeps stalling.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95841 13f79535-47bb-0310-9956-ffa450edef68

b1d52c15

Jun 21, 2002

Initialize n=0, just in case. · aa1d01a1

Martin Kraemer authored Jun 21, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95831 13f79535-47bb-0310-9956-ffa450edef68

aa1d01a1

Jun 20, 2002

Just uploaded sparc/sol8 · a58fb389

Jim Jagielski authored Jun 20, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95823 13f79535-47bb-0310-9956-ffa450edef68

a58fb389

Jun 19, 2002

Better document the error cases returned from get_chunk_size(). · 034000df

Aaron Bannert authored Jun 19, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95811 13f79535-47bb-0310-9956-ffa450edef68

034000df

Updated binary status for NetWare · 7f33f37f

Bradley Nicholes authored Jun 19, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95809 13f79535-47bb-0310-9956-ffa450edef68

7f33f37f

Binaries for AIX 4.3 are up. I no longer have a functioning AIX 4.2 box. · ab247f09
Bill Stoddard authored Jun 19, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95802 13f79535-47bb-0310-9956-ffa450edef68
```
ab247f09

OS/2 binaries are up. · c7af58c9

Brian Havard authored Jun 19, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95798 13f79535-47bb-0310-9956-ffa450edef68

c7af58c9

I'd take Sol8 on Sparc · 4eff3854

Jim Jagielski authored Jun 19, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95797 13f79535-47bb-0310-9956-ffa450edef68

4eff3854

We now have 1.3.26 binaries for Darwin5.5, Solaris8/intel, and Linux2.4 · e180895d
Aaron Bannert authored Jun 19, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95796 13f79535-47bb-0310-9956-ffa450edef68
```
e180895d

Prepare for a new set of binary tarballs. · 3ef0ce9c

Aaron Bannert authored Jun 19, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95794 13f79535-47bb-0310-9956-ffa450edef68

3ef0ce9c

Jun 18, 2002

Fix the -f parameter so that it requires a follow-up argument again. · 49231a7e
Bradley Nicholes authored Jun 18, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95790 13f79535-47bb-0310-9956-ffa450edef68
```
49231a7e

And we are 1.3.27-dev · 669241a8

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95783 13f79535-47bb-0310-9956-ffa450edef68

669241a8

ready the tag · bd979869

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95781 13f79535-47bb-0310-9956-ffa450edef68

bd979869

For our own info · 090e3330

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95780 13f79535-47bb-0310-9956-ffa450edef68

090e3330

For the announcement · 12021b90

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95779 13f79535-47bb-0310-9956-ffa450edef68

12021b90

Update the changes · 90882bc7

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95778 13f79535-47bb-0310-9956-ffa450edef68

90882bc7

Need to ensure that result is set, no matter what · 08d4c5de

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95777 13f79535-47bb-0310-9956-ffa450edef68

08d4c5de

It is entirely possible that dbuf is NULL. Accessing *dbuf when NULL is not · 9eb492fe

Justin Erenkrantz authored Jun 18, 2002

a good idea.

(How this escaped for essentially 5 years is completely unknown)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95776 13f79535-47bb-0310-9956-ffa450edef68

9eb492fe

OS/2: Fix linkage to ap_strtol() by making it a macro like on Win32. Modules · 511d5080

Brian Havard authored Jun 18, 2002

were failing to build because ap_strtol() wasn't being exported from the core.
This makes it unnecessary.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95770 13f79535-47bb-0310-9956-ffa450edef68

511d5080

And note we are 1.3.26-dev · bcaedfbf

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95766 13f79535-47bb-0310-9956-ffa450edef68

bcaedfbf

Note the big change · 0bfa9d7b

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95765 13f79535-47bb-0310-9956-ffa450edef68

0bfa9d7b

Get ready to tag 1.3.25 · ba072396

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95764 13f79535-47bb-0310-9956-ffa450edef68

ba072396

Add in the expected Announcement file · 9bc0ee9f

Jim Jagielski authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95763 13f79535-47bb-0310-9956-ffa450edef68

9bc0ee9f

· 4d59f41d

William A. Rowe Jr authored Jun 18, 2002

According to Watcom and other docs, it appears Netware users can trust
the clib to return ERANGE, so let's punt this to release, and let our
friends at Netware author any necessary patches down the line.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95760 13f79535-47bb-0310-9956-ffa450edef68

4d59f41d

· f682999a

William A. Rowe Jr authored Jun 18, 2002

Two remnants required to make ap_strtol a macro on any platform,
specifically win32

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95759 13f79535-47bb-0310-9956-ffa450edef68

f682999a

use signed long to avoid compiler complaints about the negation of unsigned · f4f73e5e
Brian Pane authored Jun 18, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95758 13f79535-47bb-0310-9956-ffa450edef68
```
f4f73e5e

· a13fdca9

William A. Rowe Jr authored Jun 18, 2002

  We are safe.  We don't need this according to MSVC docs assertions.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95757 13f79535-47bb-0310-9956-ffa450edef68

a13fdca9

Add ap/ap_strtol.o to TPF's sample link JCL. · b53a4830

David McCreedy authored Jun 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95756 13f79535-47bb-0310-9956-ffa450edef68

b53a4830

Document that ap_strtol should only really · 7b331e2e

Jim Jagielski authored Jun 18, 2002

be used with bases <19 because of EBCDIC.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95755 13f79535-47bb-0310-9956-ffa450edef68

7b331e2e