Commits · 20784b13aa2fcce802cd87992a9fd59204c5baec · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

26 Oct, 2003 1 commit

Forward port from 2.0: · 20784b13

Sander Striker authored Oct 26, 2003

SECURITY [CAN-2003-0789]: mod_cgid: Resolve some mishandling of
the AF_UNIX socket used to communicate with the cgid daemon and
the CGI script.

Submitted by: Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101570 13f79535-47bb-0310-9956-ffa450edef68

20784b13

24 Oct, 2003 1 commit

Fold in the CAN-2003-0542 regex patch. · 49a9edff

Sander Striker authored Oct 24, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101556 13f79535-47bb-0310-9956-ffa450edef68

49a9edff

23 Oct, 2003 2 commits

sync · 5d57a16a

Andre Malo authored Oct 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101540 13f79535-47bb-0310-9956-ffa450edef68

5d57a16a

* modules/ssl/ssl_engine_vars.c (ssl_var_log_handler_c): Fix · daa2f29b

Joe Orton authored Oct 23, 2003

segfault on a non-SSL request.

PR: 22741
Submitted by: Gary E. Miller <gem@rellim.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101534 13f79535-47bb-0310-9956-ffa450edef68

daa2f29b

22 Oct, 2003 5 commits

When UseCanonicalName is set to OFF, allow ap_get_server_port to check · a89ee778

Bradley Nicholes authored Oct 22, 2003

r->connection->local_addr->port before defaulting to server->port or
ap_default_port().

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101519 13f79535-47bb-0310-9956-ffa450edef68

a89ee778

Set the scoreboard state to indicate logging prior to running · 4a618b72

Jeff Trawick authored Oct 22, 2003

logging hooks so that server-status will show 'L' for hung loggers
instead of 'W'.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101517 13f79535-47bb-0310-9956-ffa450edef68

4a618b72

* proxy_http.c (ap_proxy_http_process_response): Send a valid · ad6e2fcb

Joe Orton authored Oct 22, 2003

status-line even if the parsed status-line had no trailing spaces.
Remove the warning for this case as triggers for valid status-lines
too.

PR: 23998


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101516 13f79535-47bb-0310-9956-ffa450edef68

ad6e2fcb

Fix a cosmetic issue where OpenSSL 0.9.7 will dump the error stack · 236b46b5

Joe Orton authored Oct 22, 2003

during pass phrase entry.

* ssl_engine_pphrase.c (ssl_pphrase_Handle): Clear the OpenSSL error
stack before reading the private key.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101515 13f79535-47bb-0310-9956-ffa450edef68

236b46b5

Prevent slow graceful restarts on some platforms: · 654c92e3

Joe Orton authored Oct 22, 2003

* prefork.c (ap_mpm_run): Only make as many dummy connections as slots
used, not as many as slots are available.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101513 13f79535-47bb-0310-9956-ffa450edef68

654c92e3

15 Oct, 2003 2 commits

sync with APACHE_2_0_BRANCH · e4a95b03

Jeff Trawick authored Oct 15, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101464 13f79535-47bb-0310-9956-ffa450edef68

e4a95b03

fix segfault which occured if the filename was not · 90261c34

Andre Malo authored Oct 15, 2003

set, for example, when processing some error conditions.

PR: 23836


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101461 13f79535-47bb-0310-9956-ffa450edef68

90261c34

14 Oct, 2003 2 commits

backported this change to 2.0: · 1f5da61f

Stas Bekman authored Oct 14, 2003

     fix the config parser to support <Foo>..</Foo> containers (no
     arguments in the opening tag) supported by httpd 1.3. Without
     this change mod_perl 2.0's <Perl> sections are broken.
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101445 13f79535-47bb-0310-9956-ffa450edef68

1f5da61f

Add a note about the special handling of log messages with a level of · b61c7b0f

Erik Abele authored Oct 14, 2003

'Notice'. Fixes PR#23724. German version included ;)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101442 13f79535-47bb-0310-9956-ffa450edef68

b61c7b0f

13 Oct, 2003 2 commits

tag the pools created for requests and subrequests · 74cbdae1

Jeff Trawick authored Oct 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101441 13f79535-47bb-0310-9956-ffa450edef68

74cbdae1

Fix a typo and remove an invalid section about the non-existent mod_ssl · 821bab7d

Erik Abele authored Oct 13, 2003

bugdb. According to Ralf there are no plans to fix it and this doc is
pretty out of date anyways. See also PR#18574.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101439 13f79535-47bb-0310-9956-ffa450edef68

821bab7d

12 Oct, 2003 1 commit

"Change the list of checks in the security model to more accurately reflect · 4feb7d1c

Erik Abele authored Oct 12, 2003

what happens, and in the correct order. Also fix the default locations, and
add a subsection about setting paranoid permissions."

Submitted by: Colm MacCarthaigh <colm@stdlib.net>

Additionally cleaned up the whole xml source to keep the docs consistent
(mostly cosmetic fixes, formatting, typos).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101431 13f79535-47bb-0310-9956-ffa450edef68

4feb7d1c

11 Oct, 2003 6 commits

This doesn't go in here... it goes in the BACKPORT section of the STATUS · e9f9332c

Cliff Woolley authored Oct 11, 2003

file that's on the APACHE_2_0_BRANCH


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101418 13f79535-47bb-0310-9956-ffa450edef68

e9f9332c

spelling fix · fd02d960

Stas Bekman authored Oct 11, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101416 13f79535-47bb-0310-9956-ffa450edef68

fd02d960

fix the config parser to support <Foo>..</Foo> containers (no · 695ab620

Stas Bekman authored Oct 11, 2003

arguments in the opening tag) supported by httpd 1.3. Without
this change mod_perl 2.0's <Perl> sections are broken.
PR:
Obtained from:
Submitted by:	"Philippe M. Chiasson" <gozer@cpan.org>
Reviewed by:	stas


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101415 13f79535-47bb-0310-9956-ffa450edef68

695ab620

a href updates, plus transformation. · cfafee6e

Jason S. Lingohr authored Oct 11, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101414 13f79535-47bb-0310-9956-ffa450edef68

cfafee6e

reflect backported change · 31b9d816

Roy T. Fielding authored Oct 11, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101413 13f79535-47bb-0310-9956-ffa450edef68

31b9d816

match the comments in 2.0 · 939b48ad

Roy T. Fielding authored Oct 11, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101412 13f79535-47bb-0310-9956-ffa450edef68

939b48ad

10 Oct, 2003 6 commits

add a note about *:80 and change the example to use it. · 2b606e1e

Andre Malo authored Oct 10, 2003

PR: 23606


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101407 13f79535-47bb-0310-9956-ffa450edef68

2b606e1e

formatting only · 9fe522e9

Andre Malo authored Oct 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101406 13f79535-47bb-0310-9956-ffa450edef68

9fe522e9

remove a wrong not about file-to-file hooks. · e037765b

Andre Malo authored Oct 10, 2003

PR: 23618


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101404 13f79535-47bb-0310-9956-ffa450edef68

e037765b

do sync. · 30894628

Andre Malo authored Oct 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101403 13f79535-47bb-0310-9956-ffa450edef68

30894628

add map_to_storage hook to mod_example · d1e233ff

Jeff Trawick authored Oct 10, 2003

Submitted by: Geoffrey Young <geoff@modperlcookbook.org>
Reviewed by: Jeff Trawick

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101397 13f79535-47bb-0310-9956-ffa450edef68

d1e233ff

fix a typo · b1e723c4

Cliff Woolley authored Oct 10, 2003

PR: 23713
Submitted by: millenix@zemos.net


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101394 13f79535-47bb-0310-9956-ffa450edef68

b1e723c4

02 Oct, 2003 1 commit

mod_cgid: fix a hash table corruption problem which could · 602f8cb2

Jeff Trawick authored Oct 02, 2003

result in the wrong script being cleaned up at the end of a
request.

Unique storage was not used for the key, as the code assumed
incorrectly that apr_hash_set() made a copy of the key.  Thus,
when the script pid was looked up at the end of the request,
some other script's pid could be found.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101374 13f79535-47bb-0310-9956-ffa450edef68

602f8cb2

30 Sep, 2003 6 commits

Check to make sure that the file name is not NULL before passing it to the · 9cd1887a

Bradley Nicholes authored Sep 30, 2003

strncmp() function. At least on NetWare this prevents the strncmp() function
from faulting and also brings the code into sync with similar checks for a NULL
file name before calling strncmp() in other areas of this file.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101361 13f79535-47bb-0310-9956-ffa450edef68

9cd1887a

· b26c4d23

Paul J. Reder authored Sep 30, 2003

Update as a result of a backport.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101359 13f79535-47bb-0310-9956-ffa450edef68

b26c4d23

Match type of both arguments (get rid of compiler warning) in x ? y : z expression · 2621ce66
Martin Kraemer authored Sep 30, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101357 13f79535-47bb-0310-9956-ffa450edef68
```
2621ce66

Cosmetics: remove redundancy · 4b5e290a

Martin Kraemer authored Sep 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101356 13f79535-47bb-0310-9956-ffa450edef68

4b5e290a

Typo · db1235cb

Martin Kraemer authored Sep 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101354 13f79535-47bb-0310-9956-ffa450edef68

db1235cb

Typo · f465548a

Martin Kraemer authored Sep 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101353 13f79535-47bb-0310-9956-ffa450edef68

f465548a

29 Sep, 2003 4 commits

· ce28b3f1

Paul J. Reder authored Sep 29, 2003

Update to document a completed backport


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101352 13f79535-47bb-0310-9956-ffa450edef68

ce28b3f1

make sure we have prototype for strcasecmp() · be2650f0

Jeff Trawick authored Sep 29, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101344 13f79535-47bb-0310-9956-ffa450edef68

be2650f0

Backport done. · 6bec9346

Thom May authored Sep 29, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101343 13f79535-47bb-0310-9956-ffa450edef68

6bec9346

Switch to the new 32-bit APR atomic API for better portability · 80d6808a

Brian Pane authored Sep 29, 2003

(the old code assumed that apr_atomic_t and apr_uint32_t were interchangeable).
Also, add more detailed comments on how one of the synchronization
functions works.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101340 13f79535-47bb-0310-9956-ffa450edef68

80d6808a

28 Sep, 2003 1 commit

Setting lr = NULL on line 399 leads the the loop · bd630637

Cliff Woolley authored Sep 28, 2003

closing early (see line 343) and the ap_listeners list being
nonsense.

End result is a segfault if something is already listening on ::
on our port when httpd is started.

Submitted by:	Colm MacCarthaigh <colm@stdlib.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101338 13f79535-47bb-0310-9956-ffa450edef68

bd630637