Commits · 195e28da94644cb4fcfa4747eba0ae7661520b74 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

02 Feb, 2008 1 commit

* Do not retry a request in the case that we either failed to sent a part of the · 195e28da

Ruediger Pluem authored Feb 02, 2008

  request body or if the request is not idempotent.

PR: 44334


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@617822 13f79535-47bb-0310-9956-ffa450edef68

195e28da

29 Jan, 2008 2 commits

* Fix processing of chunked responses if Connection: Transfer-Encoding is · 6efab9de

Ruediger Pluem authored Jan 29, 2008

  set in the response of the proxied system.

PR: 44311


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@616517 13f79535-47bb-0310-9956-ffa450edef68

6efab9de

Now let things like · af0bb187

Jim Jagielski authored Jan 29, 2008

   ProxyPassReverse /foo balancer://bar

work "as expected" :) :)



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@616335 13f79535-47bb-0310-9956-ffa450edef68

af0bb187

28 Jan, 2008 1 commit

* Don't leak memory when reopening the logfile. · 9ffec24e

Ruediger Pluem authored Jan 28, 2008

PR: 40183
Submitted by: rpluem, Takashi Sato <serai lans-tv.com>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@615901 13f79535-47bb-0310-9956-ffa450edef68

9ffec24e

23 Jan, 2008 1 commit

Added rebind change info. · 1f25243a

Paul J. Reder authored Jan 23, 2008



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@614607 13f79535-47bb-0310-9956-ffa450edef68

1f25243a

17 Jan, 2008 1 commit

* Do not try to read non existing response bodies of HEAD requests. · bde59776

Ruediger Pluem authored Jan 17, 2008

PR: 34275
Submitted by: Takashi Sato <serai lans-tv.com>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@612954 13f79535-47bb-0310-9956-ffa450edef68

bde59776

12 Jan, 2008 3 commits

Support chroot on unix-family platforms · ca4f206d

Nick Kew authored Jan 12, 2008

PR 43596 (Dimitar Pashev)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@611483 13f79535-47bb-0310-9956-ffa450edef68

ca4f206d

Don't add bogus duplicate Content-Language header entries. · 11d14233

Nick Kew authored Jan 12, 2008

PR 11035


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@611475 13f79535-47bb-0310-9956-ffa450edef68

11d14233

mod_proxy_ftp: Fix base for directory listings. · 01992024

Nick Kew authored Jan 12, 2008

PR 27834


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@611466 13f79535-47bb-0310-9956-ffa450edef68

01992024

11 Jan, 2008 3 commits

*) mod_proxy_http: Return HTTP status codes instead of apr_status_t · f328895c

Eric Covener authored Jan 11, 2008

     values for errors encountered while forwarding the request body
     PR 44165 [Eric Covener]

See also PR 31759 / r448711



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@611292 13f79535-47bb-0310-9956-ffa450edef68

f328895c

*) mod_logio: Provide optional function to allow modules to adjust the · 1de81bff

Eric Covener authored Jan 11, 2008

   bytes_in count [Eric Covener]

Practical example: alternate SSL implementation that lives 
beyond the filters (IOL)



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@611199 13f79535-47bb-0310-9956-ffa450edef68

1de81bff

mod_rewrite: Don't canonicalise URLs with [P,NE] · 34d9a9e5

Nick Kew authored Jan 11, 2008

PR 43319


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@611134 13f79535-47bb-0310-9956-ffa450edef68

34d9a9e5

05 Jan, 2008 1 commit

* These are now backported. · 13e96e02

Ruediger Pluem authored Jan 05, 2008


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@609114 13f79535-47bb-0310-9956-ffa450edef68

13e96e02

02 Jan, 2008 1 commit

* These are now backported. · f631711e

Ruediger Pluem authored Jan 02, 2008


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@608063 13f79535-47bb-0310-9956-ffa450edef68

f631711e

01 Jan, 2008 1 commit

backported in 607929. · 18cd8eda

Eric Covener authored Jan 01, 2008


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607930 13f79535-47bb-0310-9956-ffa450edef68

18cd8eda

31 Dec, 2007 2 commits

When using the MS SDK, re-establish LDAP backend connections on a · b71d0a9b

Eric Covener authored Dec 31, 2007

return code of LDAP_UNAVAILABLE as if it were LDAP_SERVER_DOWN.

With this SDK, LDAP_UNAVAIALBLE is returned when the socket had been closed 
between LDAP API calls.

PR 39095



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607766 13f79535-47bb-0310-9956-ffa450edef68

b71d0a9b

Introduce the ProxyFtpDirCharset directive, allowing the administrator · 2f913fa1

William A. Rowe Jr authored Dec 31, 2007

to identify a default, or specific servers or paths which list their
contents in other-than ISO-8859-1 charset (e.g. utf-8).

Submitted by: Ruediger Pluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607638 13f79535-47bb-0310-9956-ffa450edef68

2f913fa1

29 Dec, 2007 4 commits

mod_dav: Fix evaluation of If-Match * and If-None-Match * conditionals. · 561a3bc9

Nick Kew authored Dec 29, 2007

PR 38034
Patch by Paritosh Shah
Explanation by Werner Baumann


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607466 13f79535-47bb-0310-9956-ffa450edef68

561a3bc9

* Adjust etag generation to produce identical results on 32-bit and 64-bit · 483258ad

Ruediger Pluem authored Dec 29, 2007

  platforms and avoid a regression with conditional PUT's on lock and etag.

  Add a warning to the documentation of FileETAG that changes of the ETAG
  format can cause conditionals to fail on mod_dav_fs provided backends.

PR: 44152
Submitted by: Michael Clark <michael metaparadigm.com>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607437 13f79535-47bb-0310-9956-ffa450edef68

483258ad

* Added missing CVE number · 6c7d80d3

Ruediger Pluem authored Dec 29, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607403 13f79535-47bb-0310-9956-ffa450edef68

6c7d80d3

* Added missing CVE number · c7752700

Ruediger Pluem authored Dec 29, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607402 13f79535-47bb-0310-9956-ffa450edef68

c7752700

28 Dec, 2007 5 commits

* Ensure refresh parameter is numeric to prevent a possible XSS attack caused · 0d32dc95

Ruediger Pluem authored Dec 28, 2007

  by redirecting to other URLs. Reported by SecurityReason.

Submitted by: Mark Cox, Joe Orton
Reviewed by: security@httpd.apache.org


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607282 13f79535-47bb-0310-9956-ffa450edef68

0d32dc95

* Fix CHANGES wording for r606693. · 42da2d46

Ruediger Pluem authored Dec 28, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607276 13f79535-47bb-0310-9956-ffa450edef68

42da2d46

* Correctly escape the worker route and the worker redirect string in the HTML · 26e37ff4

Ruediger Pluem authored Dec 28, 2007

  output of the balancer manager.

Reported by SecurityReason.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607275 13f79535-47bb-0310-9956-ffa450edef68

26e37ff4

* Prevent crash in balancer manager if invalid balancer name is passed as · 69905a57
Ruediger Pluem authored Dec 28, 2007
```
  parameter.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607273 13f79535-47bb-0310-9956-ffa450edef68
```
69905a57

PR 39727: Fixup ETag handling in mod deflate (updated following extensive · 531aa1f0

Nick Kew authored Dec 28, 2007

discussion on-list).
This is not a full-and-final fix, because we don't ourselves do anything
useful with these ETags. But at least we're no longer screwing up clients.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607219 13f79535-47bb-0310-9956-ffa450edef68

531aa1f0

24 Dec, 2007 1 commit

* Set character set for HTML outputs generated by mod_ldap, · 843bc0ee

Ruediger Pluem authored Dec 24, 2007

  mod_proxy_balancer, mod_proxy_ftp, mod_info, mod_dav without a character
  set to ISO-8859-1.

Submitted by: jorton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@606693 13f79535-47bb-0310-9956-ffa450edef68

843bc0ee

21 Dec, 2007 1 commit

Added server name indication (RFC 4366) support (PR 34607). · 9542c490

Guenter Knauf authored Dec 21, 2007

Submitted by: Kaspar Brand <asfbugz velox.ch>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@606190 13f79535-47bb-0310-9956-ffa450edef68

9542c490

14 Dec, 2007 1 commit

* This change was backported. · 6484de72

Ruediger Pluem authored Dec 14, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@604321 13f79535-47bb-0310-9956-ffa450edef68

6484de72

13 Dec, 2007 1 commit

* Those are backported. · 61d49df1

Ruediger Pluem authored Dec 13, 2007

Pointed out by: Takashi Sato <serai lans-tv.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@604000 13f79535-47bb-0310-9956-ffa450edef68

61d49df1

12 Dec, 2007 1 commit

* These have been backported. · 0ee819b5

Ruediger Pluem authored Dec 12, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@603738 13f79535-47bb-0310-9956-ffa450edef68

0ee819b5

11 Dec, 2007 4 commits

http_protocol: Escape request method in 405 error reporting. · a1c853b8

Jeff Trawick authored Dec 11, 2007

This has no security impact since the browser cannot be tricked
into sending arbitrary method strings.

(words from jorton)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@603346 13f79535-47bb-0310-9956-ffa450edef68

a1c853b8

Introduce --kill argument to ApacheMonitor for use by the · 018cc6a7

William A. Rowe Jr authored Dec 11, 2007

installer. This will permit the installation tool to remove
all running instances before attempting to remove the .exe.

Note that since the introduction of CriticalSections, our
compatibility with NT 4 was destroyed, and at this point that
is no loss (there are no more security updates to NT 4 ergo
it's not an OS we want connected to the internet, anyways).
The WTS api calls require 2000 or later, but I'm not wrapping
them since nobody notices the same issue with CriticalSections.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@603238 13f79535-47bb-0310-9956-ffa450edef68

018cc6a7

* Use a separate subpool to manage the data for the socket and the connection · 55e811d2

Ruediger Pluem authored Dec 11, 2007

member of the proxy_conn_rec struct as we destroy this data more frequently
than other data in the proxy_conn_rec struct like hostname and addr (at least
in the case where we have keepalive connections that timed out and were
closed by the backend).
This fixes a memory leak with short lived and broken connections.

PR: 44026

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@603237 13f79535-47bb-0310-9956-ffa450edef68

55e811d2

* Do not set filter context brigade to NULL (and thus need to recreate it each · 7481b1f5

Ruediger Pluem authored Dec 11, 2007

  time) but empty it (via APR_BRIGADE_PREPEND) and reuse it. 

Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@603227 13f79535-47bb-0310-9956-ffa450edef68

7481b1f5

10 Dec, 2007 1 commit

Use 64K as maximum allowable AJP packet size · 3635ec52

Mladen Turk authored Dec 10, 2007

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@602795 13f79535-47bb-0310-9956-ffa450edef68

3635ec52

09 Dec, 2007 2 commits

* Do not split the brigade if the flush bucket is the last bucket in the brigade. · 7d18f313

Ruediger Pluem authored Dec 09, 2007

PR: 23567
Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@602735 13f79535-47bb-0310-9956-ffa450edef68

7d18f313

* These one have been backported. · 073d0962

Ruediger Pluem authored Dec 09, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@602682 13f79535-47bb-0310-9956-ffa450edef68

073d0962

08 Dec, 2007 2 commits

* Enable the proxy to keep connections persistent in the HTTPS case. · a4974b25

Ruediger Pluem authored Dec 08, 2007

Basicly the persistence is created by keeping the conn_rec structure
created for our backend connection (whether http or https) in the connection
pool. This required to adjust scoreboard.c in a way that its functions can
properly deal with a NULL scoreboard handle by ignoring the call or returning
an error code.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@602542 13f79535-47bb-0310-9956-ffa450edef68

a4974b25

* All these changes have been backported. · 32227f47

Ruediger Pluem authored Dec 08, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@602509 13f79535-47bb-0310-9956-ffa450edef68

32227f47