Commits · 1c271959f82bd453adfd02a75e4702e6eee4aefd · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

18 Oct, 2009 5 commits

Fix some more overflows spotted by Ruediger Pluem · 1c271959

Stefan Fritsch authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826520 13f79535-47bb-0310-9956-ffa450edef68

1c271959

svn:eol-style = native · 0e8e45e7

Andre Malo authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826519 13f79535-47bb-0310-9956-ffa450edef68

0e8e45e7

detab · 7e936753

Stefan Fritsch authored Oct 18, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826507 13f79535-47bb-0310-9956-ffa450edef68

7e936753

htdigest: Fix possible overflow in command line processing. htdigest is not · 4bedda4b

Stefan Fritsch authored Oct 18, 2009

supposed to be suid save, therefore not treated as a security issue.

CVE-2005-1344
Submitted by: Adam Conrad
Reviewed by: Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826506 13f79535-47bb-0310-9956-ffa450edef68

4bedda4b

ab: Fix segfault in case the argument for -n is a very large number. · d55490d0

Stefan Fritsch authored Oct 18, 2009

PR: 47178
Submitted by: Philipp Hagemeister <oss phihag.de>
Reviewed by: Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826497 13f79535-47bb-0310-9956-ffa450edef68

d55490d0

17 Oct, 2009 6 commits

Update. · 9537cd50

Lucien Gentis authored Oct 17, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826268 13f79535-47bb-0310-9956-ffa450edef68

9537cd50

New .fr translation for mod_cache trunk doc · dcca60e5

Vincent Deffontaines authored Oct 17, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826211 13f79535-47bb-0310-9956-ffa450edef68

dcca60e5

update transformation · ac2654ab

Nilgun Belma Buguner authored Oct 17, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826166 13f79535-47bb-0310-9956-ffa450edef68

ac2654ab

update for sync with English docs. · 18d19e6d

Nilgun Belma Buguner authored Oct 17, 2009

Translated by: Nilgün Belma Bugüner <nilgun belgeler.org>
Reviewed by: Orhan Berent <berent belgeler.org>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826165 13f79535-47bb-0310-9956-ffa450edef68

18d19e6d

fix validation error · 0b32efb9

Nilgun Belma Buguner authored Oct 17, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826164 13f79535-47bb-0310-9956-ffa450edef68

0b32efb9

commented out non-existing directory. · 89939f29

Guenter Knauf authored Oct 17, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826161 13f79535-47bb-0310-9956-ffa450edef68

89939f29

16 Oct, 2009 3 commits

A handful of new french translations for trunk docs. · 483ed7d8
Vincent Deffontaines authored Oct 16, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826124 13f79535-47bb-0310-9956-ffa450edef68
```
483ed7d8

mention that "Header onsuccess" is the default and reword the description · 1a565abf

Eric Covener authored Oct 16, 2009

of "Header always" to talk less about implementation details and more about
the FAQ of redirects or 401's.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826005 13f79535-47bb-0310-9956-ffa450edef68

1a565abf

Adds the frequently-requested example of relaxing authentication for a · 2cd63ce1

Richard Bowen authored Oct 16, 2009

subdirectory. Whether this is actually a *good* idea is left as an
exercise for the reader.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@825898 13f79535-47bb-0310-9956-ffa450edef68

2cd63ce1

14 Oct, 2009 2 commits

* Update transformation · c4b9fbff

Ruediger Pluem authored Oct 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@825230 13f79535-47bb-0310-9956-ffa450edef68

c4b9fbff

Rename ReqTimeout into RequestTimeout, to be more in line with other · 2950738a

Stefan Fritsch authored Oct 14, 2009

directives.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@825177 13f79535-47bb-0310-9956-ffa450edef68

2950738a

13 Oct, 2009 2 commits

Note gcc42 and Darwin 10 issues · b6adbf1e

Jim Jagielski authored Oct 13, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@824875 13f79535-47bb-0310-9956-ffa450edef68

b6adbf1e

* With SSLProxyCheckPeerCN and SSLProxyCheckPeerExpire available and turned · cb9f0700

Ruediger Pluem authored Oct 13, 2009

  on by default this warning is no longer true.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@824830 13f79535-47bb-0310-9956-ffa450edef68

cb9f0700

11 Oct, 2009 2 commits

Add example of load balancing with stickyness using mod_headers. · f9c9c4e0

Stefan Fritsch authored Oct 11, 2009

PR: 46167


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@824151 13f79535-47bb-0310-9956-ffa450edef68

f9c9c4e0

Allow ProxyPreserveHost to work in <Proxy> sections · fc5ebf4c

Stefan Fritsch authored Oct 11, 2009

PR: 34901


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@824072 13f79535-47bb-0310-9956-ffa450edef68

fc5ebf4c

10 Oct, 2009 3 commits

Updates. · 2b8db887

Lucien Gentis authored Oct 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823879 13f79535-47bb-0310-9956-ffa450edef68

2b8db887

Stop unexpected error logs in each requests. · bdbaedec

Takashi Sato authored Oct 10, 2009

sock_write returns not size but status.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823797 13f79535-47bb-0310-9956-ffa450edef68

bdbaedec

configure: Fix THREADED_MPMS so that mod_cgid is · c3cd992e

Takashi Sato authored Oct 10, 2009

enabled again for worker MPM.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823794 13f79535-47bb-0310-9956-ffa450edef68

c3cd992e

09 Oct, 2009 7 commits

Added french translation for mod_proxy documentation. · f0b9e995
Vincent Deffontaines authored Oct 09, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823704 13f79535-47bb-0310-9956-ffa450edef68
```
f0b9e995

mod_dav: Provide a mechanism to obtain the request_rec and pathname · 3aec2ae8

Graham Leggett authored Oct 09, 2009

from the dav_resource.
Submitted by: Jari Urpalainen <jari.urpalainen nokia.com>,
              Brian France <brian brianfrance.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823703 13f79535-47bb-0310-9956-ffa450edef68

3aec2ae8

bump pending version · ec40e3ab

Takashi Sato authored Oct 09, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823623 13f79535-47bb-0310-9956-ffa450edef68

ec40e3ab

Add PR number for r823613. · 7ea66111

Takashi Sato authored Oct 09, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823618 13f79535-47bb-0310-9956-ffa450edef68

7ea66111

Build: Use install instead of cp if available on · 14777033

Takashi Sato authored Oct 09, 2009

installing modules to avoid segfault.

Submitted by: <hirose31 gmail.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823613 13f79535-47bb-0310-9956-ffa450edef68

14777033

Update doc to match change to mod_cache to include s-maxage in · 4e0d0024

Daniel Earl Poirier authored Oct 09, 2009

some cacheability decisions.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823563 13f79535-47bb-0310-9956-ffa450edef68

4e0d0024

mod_cache: add Cache-control: s-maxage to cacheability decisions per RFC 2616. · 563f16e3
Daniel Earl Poirier authored Oct 09, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823536 13f79535-47bb-0310-9956-ffa450edef68
```
563f16e3

08 Oct, 2009 2 commits

mod_logio: introduce new optional function ap_logio_get_last_bytes to get · cf0de645

Stefan Fritsch authored Oct 08, 2009

total byte count of last request.

core: Use ap_logio_get_last_bytes to report more accurate byte counts in
mod_status if mod_logio is loaded. Without mod_logio, don't increment
counts for HEAD requests.

PR: 25656


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823337 13f79535-47bb-0310-9956-ffa450edef68

cf0de645

When pick was zero no worker where choosen. · a2bd0728

Jean-Frederic Clere authored Oct 08, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@823093 13f79535-47bb-0310-9956-ffa450edef68

a2bd0728

07 Oct, 2009 4 commits

remove CHANGES entry · 7e720a9e

Stefan Fritsch authored Oct 07, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822881 13f79535-47bb-0310-9956-ffa450edef68

7e720a9e

Update comments in util_filter.h about bucket and brigade ownership to reflect · e4896083

Stefan Fritsch authored Oct 07, 2009

current practice and the advice from manual/developer/output-filters.xml.

Submitted by: Rici Lake <rici ricilake.net>
Reviewed by: Stefan Fritsch, Joe Orton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822870 13f79535-47bb-0310-9956-ffa450edef68

e4896083

add note about ssl renegotiation · 1d87d6f4

Stefan Fritsch authored Oct 07, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822857 13f79535-47bb-0310-9956-ffa450edef68

1d87d6f4

Oops the slotmem uses apr_time_now. Can't use stat on shared memory :-) · c0720411
Jean-Frederic Clere authored Oct 07, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822758 13f79535-47bb-0310-9956-ffa450edef68
```
c0720411

06 Oct, 2009 3 commits

update transformations · c96e5136

Stefan Fritsch authored Oct 06, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822517 13f79535-47bb-0310-9956-ffa450edef68

c96e5136

Add some docs for mod_reqtimeout. · 34c059f3

Stefan Fritsch authored Oct 06, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822509 13f79535-47bb-0310-9956-ffa450edef68

34c059f3

Work around broken cache management in mod_ldap: If LDAPSharedCacheSize is too · 2b120568

Stefan Fritsch authored Oct 06, 2009

small, try to free some memory by purging the cache and log a warning.

Also increase the default LDAPSharedCacheSize to 500000. This is a more
realistic size suitable for the default values of 1024 for LdapCacheEntries and
LdapOpCacheEntries.

PR: 46749


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822458 13f79535-47bb-0310-9956-ffa450edef68

2b120568

05 Oct, 2009 1 commit

mod_rewrite: Make sure that a hostname:port isn't fully qualified if · 646cbf8e

Graham Leggett authored Oct 05, 2009

the request is a CONNECT request.
Submitted by: Bill Zajac <billz consultla.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822004 13f79535-47bb-0310-9956-ffa450edef68

646cbf8e