Commits · 26bf0ebaa76c33f58073d376da0442581f6739e9 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

26 Nov, 2014 2 commits

xforms · 26bf0eba

Eric Covener authored Nov 26, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641889 13f79535-47bb-0310-9956-ffa450edef68

26bf0eba

add a few more expresion examples to illustrate functions and -f · 71fd830f
Eric Covener authored Nov 26, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641888 13f79535-47bb-0310-9956-ffa450edef68
```
71fd830f

25 Nov, 2014 2 commits

mod_lua: Initial attempt at passing on the configuration tree to Lua. · 5bd03679
Daniel Gruno authored Nov 25, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641661 13f79535-47bb-0310-9956-ffa450edef68
```
5bd03679

elaborate on a TRACE2 message about using the default reverse · 913cedee

Eric Covener authored Nov 25, 2014

proxy worker. 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641636 13f79535-47bb-0310-9956-ffa450edef68

913cedee

24 Nov, 2014 10 commits

· c45d5855

Eric Covener authored Nov 24, 2014

xforms


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641435 13f79535-47bb-0310-9956-ffa450edef68

c45d5855

move text outside of example for readability. · 62fec53d

Eric Covener authored Nov 24, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641434 13f79535-47bb-0310-9956-ffa450edef68

62fec53d

xforms · 52bd02f9

Eric Covener authored Nov 24, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641415 13f79535-47bb-0310-9956-ffa450edef68

52bd02f9

steal the sethandler example from mod_proxy.html and mention worker issue · 52b87ddc
Eric Covener authored Nov 24, 2014
```
 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641414 13f79535-47bb-0310-9956-ffa450edef68
```
52b87ddc

xforms · 747c919c

Eric Covener authored Nov 24, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641385 13f79535-47bb-0310-9956-ffa450edef68

747c919c

the next sentence says: · 0d6c195f

Eric Covener authored Nov 24, 2014

The URL argument must be parsable as a URL before regexp substitutions (as well as after). This limits the matches you can use. For instance, if we had used




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641384 13f79535-47bb-0310-9956-ffa450edef68

0d6c195f

test/document php-fpm with proxy_fcgi · 630d6173

Eric Covener authored Nov 24, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641382 13f79535-47bb-0310-9956-ffa450edef68

630d6173

Return a match whenever we get to the end of the worker name, regardless · bcd35f71

Eric Covener authored Nov 24, 2014

of whether there is URL left.

ProxyPassMatch had been using the default worker in trunk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641381 13f79535-47bb-0310-9956-ffa450edef68

bcd35f71

mod_reqtimeout: don't extend the timeout in speculative mode, wait for the · 8284fdfa

Yann Ylavic authored Nov 24, 2014

real (relevant) bytes to be asked later, within the currently alloted time.
This applies to blocking reads only since r1621453 already bypassed the
filter for nonblocking ones.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641376 13f79535-47bb-0310-9956-ffa450edef68

8284fdfa

surprising but confirmed by comment in mod_proxy · e952b933

Eric Covener authored Nov 24, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641311 13f79535-47bb-0310-9956-ffa450edef68

e952b933

22 Nov, 2014 2 commits

follow up to r1641077: · 0678fa7b

Jeff Trawick authored Nov 22, 2014

one bug was traded for another in r1641077; track the response
length and the cached object length separately to avoid such
confusion


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641095 13f79535-47bb-0310-9956-ffa450edef68

0678fa7b

mod_ssl: Fix recognition of OCSP stapling responses that are encoded · 8d5e0907

Jeff Trawick authored Nov 22, 2014

         improperly or too large.

The one byte "ok" flag stored with the response was accounted for in
the wrong condition.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641077 13f79535-47bb-0310-9956-ffa450edef68

8d5e0907

20 Nov, 2014 3 commits

mod_reqtimeout: revert r1640758. · 29dc0b77

Yann Ylavic authored Nov 20, 2014

Unexpected functional change.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640823 13f79535-47bb-0310-9956-ffa450edef68

29dc0b77

mpm_event(opt), mpm_worker, mpm_prefork: follow up to r1635521, r1640161. · a880f55f

Yann Ylavic authored Nov 20, 2014

Retain num_buckets and max_buckets accross restarts so that we can determine
whether new buckets were allocated and set their idle_spawn_rate at the same
level as the existing ones (max).

Also, adjust ap_daemons_limit and ap_daemons_to_start lower bounds at mpm_run()
time, once num_buckets is available for the current generation (previously done
at pre_config time, hence before num_buckets is computed, and then with the
previous generation's value).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640763 13f79535-47bb-0310-9956-ffa450edef68

a880f55f

mod_reqtimeout: avoid unnecessary calls to apr_socket_timeout_set(). · 5abdc4d7
Yann Ylavic authored Nov 20, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640758 13f79535-47bb-0310-9956-ffa450edef68
```
5abdc4d7

19 Nov, 2014 1 commit
- * mod_proxy_fcgi: Ignore body data from backend for 304 responses. PR 57198. · 570883b3
  Jan Kaluža authored Nov 19, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640495 13f79535-47bb-0310-9956-ffa450edef68
```
  570883b3
18 Nov, 2014 4 commits

mod_authnz_fcgi: we don't need to reserve an extra response header byte since r1640036. · 109d4763
Yann Ylavic authored Nov 18, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640345 13f79535-47bb-0310-9956-ffa450edef68
```
109d4763

mod_authnz_fcgi is not vulnerable to the CVE-2014-3583 bug · 894cf92e

Jeff Trawick authored Nov 18, 2014

(and it is too late to use the same CVE anyway).

The code changes to mod_authnz_fcgi are retained in order
to keep the similar code in sync between the two modules.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640331 13f79535-47bb-0310-9956-ffa450edef68

894cf92e

Rebuild. · bd4ea346

Lucien Gentis authored Nov 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640296 13f79535-47bb-0310-9956-ffa450edef68

bd4ea346

XML update. · f1877bf5

Lucien Gentis authored Nov 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640295 13f79535-47bb-0310-9956-ffa450edef68

f1877bf5

17 Nov, 2014 3 commits

mpm_prefork: follow up to r1635521. · c2c923c3

Yann Ylavic authored Nov 17, 2014

Avoid oddity on bucket_make_child_record overflow.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640184 13f79535-47bb-0310-9956-ffa450edef68

c2c923c3

mpm_event(opt), mpm_worker, mpm_prefork: follow up to r1635521. · fdb80793

Yann Ylavic authored Nov 17, 2014

Allocate retained idle_spawn_rate vector on the process pool.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640161 13f79535-47bb-0310-9956-ffa450edef68

fdb80793

mpm_worker, mpm_prefork: follow up to r1635521. · 3ad5c948

Yann Ylavic authored Nov 17, 2014

Use one dedicated accept mutex per listeners bucket.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640145 13f79535-47bb-0310-9956-ffa450edef68

3ad5c948

16 Nov, 2014 6 commits

Follow up to r1640040: CHANGES entry. · 02c5af8d

Yann Ylavic authored Nov 16, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640042 13f79535-47bb-0310-9956-ffa450edef68

02c5af8d

mod_proxy_fcgi, mod_authnz_fcgi: stop reading the response and issue an error · 1ba340bc

Yann Ylavic authored Nov 16, 2014

when parsing or forwarding the response fails.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640040 13f79535-47bb-0310-9956-ffa450edef68

1ba340bc

mod_proxy_fcgi, mod_authnz_fcgi: SECURITY: CVE-2014-3583 (cve.mitre.org) · f392bdef

Yann Ylavic authored Nov 16, 2014

Fix a potential crash with response headers' size above 8K.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640036 13f79535-47bb-0310-9956-ffa450edef68

f392bdef

Revert r1638818, r1639812, r1639717 and r1639814 for new staging. · f38a4cc8
Yann Ylavic authored Nov 16, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640034 13f79535-47bb-0310-9956-ffa450edef68
```
f38a4cc8

event, eventopt: follow up to r1638879 and r1639960. · 8a5fa570

Yann Ylavic authored Nov 16, 2014

Clear the pool in ap_push_pool() before recycling.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640031 13f79535-47bb-0310-9956-ffa450edef68

8a5fa570

avoid dereferencing a recently apr_pool_clear()'ed event_conn_state_t *cs · 787b2b4f

Christophe Jaillet authored Nov 16, 2014

in several paths where ptrans is being recycled at the end of a request.

Same as r1638879 which was for the event MPM.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639960 13f79535-47bb-0310-9956-ffa450edef68

787b2b4f

15 Nov, 2014 2 commits

mod_authnz_fcgi: follow up to r1639717. · 0de137d1

Yann Ylavic authored Nov 15, 2014

Let ap_scan_script_header*() validate the headers.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639814 13f79535-47bb-0310-9956-ffa450edef68

0de137d1

mod_proxy_fcgi: follow up to r1638818. · abe27fa6

Yann Ylavic authored Nov 15, 2014

Let ap_scan_script_header*() validate the headers.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639812 13f79535-47bb-0310-9956-ffa450edef68

abe27fa6

14 Nov, 2014 3 commits

mod_authnz_fcgi: Fix a potential crash with response headers' size above 8K. · ae458daf

Yann Ylavic authored Nov 14, 2014

(similar to r1638818 for mod_proxy_fcgi).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639717 13f79535-47bb-0310-9956-ffa450edef68

ae458daf

don't call notify_suspend() in a worker thread after · dfccdb0b

Eric Covener authored Nov 14, 2014

start_lingering_close_common may have put the socket back
into the pollset. 

If it becomes readable too quickly, cs can be
free'ed or accessed concurrently.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639614 13f79535-47bb-0310-9956-ffa450edef68

dfccdb0b

revert r1638691, more comprehensive followup planned shortly. · a61813bd

Eric Covener authored Nov 14, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639564 13f79535-47bb-0310-9956-ffa450edef68

a61813bd

12 Nov, 2014 2 commits

avoid dereferencing a recently apr_pool_clear()'ed event_conn_state_t *cs · 59eea59c

Eric Covener authored Nov 12, 2014

in several paths where ptrans is being recycled at the end of a request.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638879 13f79535-47bb-0310-9956-ffa450edef68

59eea59c

mod_proxy_fcgi: CVE-2014-3583: Fix a potential crash with response headers' · 1245aa5f

Yann Ylavic authored Nov 12, 2014

size above 8K.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638818 13f79535-47bb-0310-9956-ffa450edef68

1245aa5f