Commits · 1d87d6f489fb0c328c6ee530029a622fb3ae2796 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

06 Oct, 2009 1 commit

Work around broken cache management in mod_ldap: If LDAPSharedCacheSize is too · 2b120568

Stefan Fritsch authored Oct 06, 2009

small, try to free some memory by purging the cache and log a warning.

Also increase the default LDAPSharedCacheSize to 500000. This is a more
realistic size suitable for the default values of 1024 for LdapCacheEntries and
LdapOpCacheEntries.

PR: 46749


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822458 13f79535-47bb-0310-9956-ffa450edef68

2b120568

05 Oct, 2009 3 commits

mod_rewrite: Make sure that a hostname:port isn't fully qualified if · 646cbf8e

Graham Leggett authored Oct 05, 2009

the request is a CONNECT request.
Submitted by: Bill Zajac <billz consultla.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@822004 13f79535-47bb-0310-9956-ffa450edef68

646cbf8e

mod_cache: Teach CacheEnable and CacheDisable to work from within a · e90ff819

Graham Leggett authored Oct 05, 2009

Location section, in line with how ProxyPass works.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821993 13f79535-47bb-0310-9956-ffa450edef68

e90ff819

Back out r818492 which prevented all caching of incomplete responses. · 4af767bc

Daniel Earl Poirier authored Oct 05, 2009

Instead move the check to mod_disk_cache. This leaves cache implementations
the flexibility to implement caching of incomplete responses.
PR: 15866

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821763 13f79535-47bb-0310-9956-ffa450edef68

4af767bc

04 Oct, 2009 4 commits

Add mod_reqtimeout: New module to set timeouts and minimum data rates for · f7be92d5

Stefan Fritsch authored Oct 04, 2009

receiving requests from the client.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821591 13f79535-47bb-0310-9956-ffa450edef68

f7be92d5

Correct the attribution in CHANGES. · 7d3a8cce

Graham Leggett authored Oct 04, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821542 13f79535-47bb-0310-9956-ffa450edef68

7d3a8cce

Make sure to not destroy bucket brigades that have been created by earlier · 203e5247

Stefan Fritsch authored Oct 04, 2009

filters. Otherwise the pool cleanups would be removed causing potential memory
leaks later on.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821477 13f79535-47bb-0310-9956-ffa450edef68

203e5247

core, mod_deflate, mod_sed: Reduce memory usage by reusing bucket · 41194ef9

Stefan Fritsch authored Oct 04, 2009

brigades in several places


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821471 13f79535-47bb-0310-9956-ffa450edef68

41194ef9

03 Oct, 2009 3 commits

mod_cache: Fix uri_meets_conditions() so that CacheEnable will · 53b940c6

Graham Leggett authored Oct 03, 2009

match by scheme, or by a wildcarded hostname.
PR: 40169
Submitted by: Peter Grandi <pg_asf asf.for.sabi.co.uk>
Reviewed by: Graham Leggett


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821333 13f79535-47bb-0310-9956-ffa450edef68

53b940c6

suexec: Allow to log an error if exec fails by setting FD_CLOEXEC · 32eb0db1

Stefan Fritsch authored Oct 03, 2009

on the log file instead of closing it.

PR: 10744
Submitted by: Nicolas Rachinsky
Reviewed by: Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821321 13f79535-47bb-0310-9956-ffa450edef68

32eb0db1

Make RemoveType override the info from TypesConfig · 22de7959

Stefan Fritsch authored Oct 03, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821298 13f79535-47bb-0310-9956-ffa450edef68

22de7959

02 Oct, 2009 1 commit

mod_cache: Introduce the option to run the cache from within the · 6f6a4a66

Graham Leggett authored Oct 02, 2009

normal request handler, and to allow fine grained control over
where in the filter chain content is cached.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@821202 13f79535-47bb-0310-9956-ffa450edef68

6f6a4a66

01 Oct, 2009 1 commit

core: Treat timeout reading request as 408 error, not 400. · 7bee78b3

Daniel Earl Poirier authored Oct 01, 2009

Log 408 errors in access log as was done in Apache 1.3.x.

PR: 39785
Submitted by: Nobutaka Mantani, Stefan Fritsch
Reviewed and added to by: Dan Poirier


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@820760 13f79535-47bb-0310-9956-ffa450edef68

7bee78b3

30 Sep, 2009 1 commit

* Fix a regression from r724717 by reintroducing SSL_CLIENT_S_DN, · 10604957

Ruediger Pluem authored Sep 30, 2009

  SSL_CLIENT_I_DN, SSL_SERVER_S_DN, SSL_SERVER_I_DN back to the environment
  variables to be set by mod_ssl.

Submitted by: Peter Sylvester <peter.sylvester edelweb.fr>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@820401 13f79535-47bb-0310-9956-ffa450edef68

10604957

24 Sep, 2009 1 commit
- mod_cache: don't cache incomplete responses, per RFC 2616, 13.8. · 924d25e7
  Daniel Earl Poirier authored Sep 24, 2009
```
PR: 15866


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@818492 13f79535-47bb-0310-9956-ffa450edef68
```
  924d25e7
23 Sep, 2009 1 commit

Fix a segfault in ab when run in verbose mode using https. · 8561235d

Daniel Earl Poirier authored Sep 23, 2009

PR: 46393
Submitted by: Stefan Fritsch <sf sfritsch.de>, Ryan Niebur
Reviewed by: poirier


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@818204 13f79535-47bb-0310-9956-ffa450edef68

8561235d

19 Sep, 2009 1 commit

mod_dav: Allow other modules to become providers and add resource types · 81fc708f

Graham Leggett authored Sep 19, 2009

to the DAV response.
Submitted by: Jari Urpalainen <jari.urpalainen nokia.com>, Brian France <brian brianfrance.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@816893 13f79535-47bb-0310-9956-ffa450edef68

81fc708f

15 Sep, 2009 2 commits

Change Fallback to FallbackResource after extensive discussion with · 4682444d

Nick Kew authored Sep 15, 2009

wrowe and DrBacchus.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815502 13f79535-47bb-0310-9956-ffa450edef68

4682444d

Change "DefaultHandler" to "Fallback" as discussed on list and · 2d8c34cb

Nick Kew authored Sep 15, 2009

today on IRC, in the hope that everyone will be satisfied.
PR: 47184 + subsequent veto of original directive name

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815380 13f79535-47bb-0310-9956-ffa450edef68

2d8c34cb

14 Sep, 2009 6 commits

* Follow the standard CHANGES format for security changes. · e0424d6b
Ruediger Pluem authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814866 13f79535-47bb-0310-9956-ffa450edef68
```
e0424d6b
Correct attribution for mod_dav options provider interface. · dddc7e2e
Graham Leggett authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814860 13f79535-47bb-0310-9956-ffa450edef68
```
dddc7e2e

Add attribution and CVE notices. · 3f24dca3

Graham Leggett authored Sep 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814850 13f79535-47bb-0310-9956-ffa450edef68

3f24dca3

mod_dav: Allow other modules to add things to the DAV or Allow headers · 41a29e6e

Graham Leggett authored Sep 14, 2009

of an OPTIONS request.
Submitted by: Brian France <brian brianfrance.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814832 13f79535-47bb-0310-9956-ffa450edef68

41a29e6e

* Lower memory usage by reusing the brigade instead of constantly · 63ae0b6f

Ruediger Pluem authored Sep 14, 2009

  recerating one.

Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814807 13f79535-47bb-0310-9956-ffa450edef68

63ae0b6f

mod_mime: detect invalid use of MultiviewsMatch inside Location and · 0b1033ce

Daniel Earl Poirier authored Sep 14, 2009

LocationMatch sections.  Document that such usage is not valid.
PR47754.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814728 13f79535-47bb-0310-9956-ffa450edef68

0b1033ce

13 Sep, 2009 3 commits

mod_request: Make sure the KeptBodySize directive rejects values · 4979c0aa

Graham Leggett authored Sep 13, 2009

that aren't valid numbers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814337 13f79535-47bb-0310-9956-ffa450edef68

4979c0aa

mod_session_crypto: Sanity check should the potentially encrypted · 691b0692

Graham Leggett authored Sep 13, 2009

session cookie be too short.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814334 13f79535-47bb-0310-9956-ffa450edef68

691b0692

mod_session.c: Prevent a segfault when session is added but not · ca7c8b41

Graham Leggett authored Sep 13, 2009

configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814327 13f79535-47bb-0310-9956-ffa450edef68

ca7c8b41

11 Sep, 2009 1 commit

htcacheclean: 19 ways to fail, 1 error message. Fixed. · 32de8d5c

Graham Leggett authored Sep 11, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814091 13f79535-47bb-0310-9956-ffa450edef68

32de8d5c

10 Sep, 2009 2 commits

Fail server startup when mod_auth_digest is unable to · f8c7ff9c

Daniel Earl Poirier authored Sep 10, 2009

provide the security checks configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813396 13f79535-47bb-0310-9956-ffa450edef68

f8c7ff9c

veto-ed · 6876e93d

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813376 13f79535-47bb-0310-9956-ffa450edef68

6876e93d

09 Sep, 2009 3 commits

mod_proxy_connect: The connect method doesn't work if the client is · 34aeb912

Graham Leggett authored Sep 09, 2009

connecting to the apache proxy through an ssl socket. Fixed.
PR: 29744.
Submitted by: Brad Boyer, Mark Cave-Ayland, Julian Gilbey, Fabrice Durand,
David Gence, Tim Dodge, Per Gunnar Hans, Emmanuel Elango, Kevin Croft,
Rudolf Cardinal


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813178 13f79535-47bb-0310-9956-ffa450edef68

34aeb912

mod_ssl: The error message when SSLCertificateFile is missing should at · e92fef18

Graham Leggett authored Sep 09, 2009

least give the name or position of the problematic virtual host definition.
[Stefan Fritsch sf sfritsch.de]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813105 13f79535-47bb-0310-9956-ffa450edef68

e92fef18

mod_auth_digest: When qop is none, client doesn't send nonce count, · b3706dc4

Daniel Earl Poirier authored Sep 09, 2009

but module was segfaulting trying to check the nonce count anyway.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@812934 13f79535-47bb-0310-9956-ffa450edef68

b3706dc4

06 Sep, 2009 1 commit

Add support for HTTP PUT to ab. · eba65d27

Graham Leggett authored Sep 06, 2009

Submiited by: Jeff Barnes <jbarnesweb yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@811806 13f79535-47bb-0310-9956-ffa450edef68

eba65d27

28 Aug, 2009 2 commits

And additional ServerTokens improvement... · 62541784

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808965 13f79535-47bb-0310-9956-ffa450edef68

62541784

OK, might as well finish this... Allow ServerTokens Off · 15f0f61c

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808895 13f79535-47bb-0310-9956-ffa450edef68

15f0f61c

27 Aug, 2009 1 commit

mod_headers: generalise the envclause to support conditional · 71bdb2b8

Nick Kew authored Aug 27, 2009

header rules via ap_expr.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808240 13f79535-47bb-0310-9956-ffa450edef68

71bdb2b8

26 Aug, 2009 2 commits

mod_cache: Introduce the thundering herd lock, a mechanism to keep · 39034684

Graham Leggett authored Aug 26, 2009

the flood of requests at bay that strike a backend webserver as
a cached entity goes stale.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808212 13f79535-47bb-0310-9956-ffa450edef68

39034684

Fix shm, rmm, and lock problems. · c2d772c3

Daniel Earl Poirier authored Aug 26, 2009

PR: 16057


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808150 13f79535-47bb-0310-9956-ffa450edef68

c2d772c3