Commits · 29dc0b770e14596aa100a2f4121056d967cb05ef · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

20 Nov, 2014 3 commits

mod_reqtimeout: revert r1640758. · 29dc0b77

Yann Ylavic authored Nov 20, 2014

Unexpected functional change.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640823 13f79535-47bb-0310-9956-ffa450edef68

29dc0b77

mpm_event(opt), mpm_worker, mpm_prefork: follow up to r1635521, r1640161. · a880f55f

Yann Ylavic authored Nov 20, 2014

Retain num_buckets and max_buckets accross restarts so that we can determine
whether new buckets were allocated and set their idle_spawn_rate at the same
level as the existing ones (max).

Also, adjust ap_daemons_limit and ap_daemons_to_start lower bounds at mpm_run()
time, once num_buckets is available for the current generation (previously done
at pre_config time, hence before num_buckets is computed, and then with the
previous generation's value).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640763 13f79535-47bb-0310-9956-ffa450edef68

a880f55f

mod_reqtimeout: avoid unnecessary calls to apr_socket_timeout_set(). · 5abdc4d7
Yann Ylavic authored Nov 20, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640758 13f79535-47bb-0310-9956-ffa450edef68
```
5abdc4d7

19 Nov, 2014 1 commit
- * mod_proxy_fcgi: Ignore body data from backend for 304 responses. PR 57198. · 570883b3
  Jan Kaluža authored Nov 19, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640495 13f79535-47bb-0310-9956-ffa450edef68
```
  570883b3
18 Nov, 2014 4 commits

mod_authnz_fcgi: we don't need to reserve an extra response header byte since r1640036. · 109d4763
Yann Ylavic authored Nov 18, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640345 13f79535-47bb-0310-9956-ffa450edef68
```
109d4763

mod_authnz_fcgi is not vulnerable to the CVE-2014-3583 bug · 894cf92e

Jeff Trawick authored Nov 18, 2014

(and it is too late to use the same CVE anyway).

The code changes to mod_authnz_fcgi are retained in order
to keep the similar code in sync between the two modules.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640331 13f79535-47bb-0310-9956-ffa450edef68

894cf92e

Rebuild. · bd4ea346

Lucien Gentis authored Nov 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640296 13f79535-47bb-0310-9956-ffa450edef68

bd4ea346

XML update. · f1877bf5

Lucien Gentis authored Nov 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640295 13f79535-47bb-0310-9956-ffa450edef68

f1877bf5

17 Nov, 2014 3 commits

mpm_prefork: follow up to r1635521. · c2c923c3

Yann Ylavic authored Nov 17, 2014

Avoid oddity on bucket_make_child_record overflow.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640184 13f79535-47bb-0310-9956-ffa450edef68

c2c923c3

mpm_event(opt), mpm_worker, mpm_prefork: follow up to r1635521. · fdb80793

Yann Ylavic authored Nov 17, 2014

Allocate retained idle_spawn_rate vector on the process pool.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640161 13f79535-47bb-0310-9956-ffa450edef68

fdb80793

mpm_worker, mpm_prefork: follow up to r1635521. · 3ad5c948

Yann Ylavic authored Nov 17, 2014

Use one dedicated accept mutex per listeners bucket.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640145 13f79535-47bb-0310-9956-ffa450edef68

3ad5c948

16 Nov, 2014 6 commits

Follow up to r1640040: CHANGES entry. · 02c5af8d

Yann Ylavic authored Nov 16, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640042 13f79535-47bb-0310-9956-ffa450edef68

02c5af8d

mod_proxy_fcgi, mod_authnz_fcgi: stop reading the response and issue an error · 1ba340bc

Yann Ylavic authored Nov 16, 2014

when parsing or forwarding the response fails.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640040 13f79535-47bb-0310-9956-ffa450edef68

1ba340bc

mod_proxy_fcgi, mod_authnz_fcgi: SECURITY: CVE-2014-3583 (cve.mitre.org) · f392bdef

Yann Ylavic authored Nov 16, 2014

Fix a potential crash with response headers' size above 8K.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640036 13f79535-47bb-0310-9956-ffa450edef68

f392bdef

Revert r1638818, r1639812, r1639717 and r1639814 for new staging. · f38a4cc8
Yann Ylavic authored Nov 16, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640034 13f79535-47bb-0310-9956-ffa450edef68
```
f38a4cc8

event, eventopt: follow up to r1638879 and r1639960. · 8a5fa570

Yann Ylavic authored Nov 16, 2014

Clear the pool in ap_push_pool() before recycling.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640031 13f79535-47bb-0310-9956-ffa450edef68

8a5fa570

avoid dereferencing a recently apr_pool_clear()'ed event_conn_state_t *cs · 787b2b4f

Christophe Jaillet authored Nov 16, 2014

in several paths where ptrans is being recycled at the end of a request.

Same as r1638879 which was for the event MPM.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639960 13f79535-47bb-0310-9956-ffa450edef68

787b2b4f

15 Nov, 2014 2 commits

mod_authnz_fcgi: follow up to r1639717. · 0de137d1

Yann Ylavic authored Nov 15, 2014

Let ap_scan_script_header*() validate the headers.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639814 13f79535-47bb-0310-9956-ffa450edef68

0de137d1

mod_proxy_fcgi: follow up to r1638818. · abe27fa6

Yann Ylavic authored Nov 15, 2014

Let ap_scan_script_header*() validate the headers.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639812 13f79535-47bb-0310-9956-ffa450edef68

abe27fa6

14 Nov, 2014 3 commits

mod_authnz_fcgi: Fix a potential crash with response headers' size above 8K. · ae458daf

Yann Ylavic authored Nov 14, 2014

(similar to r1638818 for mod_proxy_fcgi).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639717 13f79535-47bb-0310-9956-ffa450edef68

ae458daf

don't call notify_suspend() in a worker thread after · dfccdb0b

Eric Covener authored Nov 14, 2014

start_lingering_close_common may have put the socket back
into the pollset. 

If it becomes readable too quickly, cs can be
free'ed or accessed concurrently.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639614 13f79535-47bb-0310-9956-ffa450edef68

dfccdb0b

revert r1638691, more comprehensive followup planned shortly. · a61813bd

Eric Covener authored Nov 14, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1639564 13f79535-47bb-0310-9956-ffa450edef68

a61813bd

12 Nov, 2014 5 commits

avoid dereferencing a recently apr_pool_clear()'ed event_conn_state_t *cs · 59eea59c

Eric Covener authored Nov 12, 2014

in several paths where ptrans is being recycled at the end of a request.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638879 13f79535-47bb-0310-9956-ffa450edef68

59eea59c

mod_proxy_fcgi: CVE-2014-3583: Fix a potential crash with response headers' · 1245aa5f

Yann Ylavic authored Nov 12, 2014

size above 8K.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638818 13f79535-47bb-0310-9956-ffa450edef68

1245aa5f

* mod_ssl: call ERR_free_strings() with OpenSSL >= 0.9.8e. Fixes memory leak · 94651c0e

Jan Kaluža authored Nov 12, 2014

in mod_ssl on graceful restart. PR 53435.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638772 13f79535-47bb-0310-9956-ffa450edef68

94651c0e

Fix a bug in r1604350 that can lead to crashes in the event MPM under load. · 71812aab

Eric Covener authored Nov 12, 2014

if start_lingering_close_blocking() returns 0, notify_suspend() will
write a 1 into some potentially recently free'd memory from
ptrans (cs->suspended).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638691 13f79535-47bb-0310-9956-ffa450edef68

71812aab

see your doctor about any rashes since r1608202. · 2f9d3659

Eric Covener authored Nov 12, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638687 13f79535-47bb-0310-9956-ffa450edef68

2f9d3659

11 Nov, 2014 5 commits

tab vs space · b5dfff5c

Christophe Jaillet authored Nov 11, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638412 13f79535-47bb-0310-9956-ffa450edef68

b5dfff5c

Fix style · 0cae8d7f

Christophe Jaillet authored Nov 11, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638188 13f79535-47bb-0310-9956-ffa450edef68

0cae8d7f

Fix indent. · 9dd5a440

Christophe Jaillet authored Nov 11, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638159 13f79535-47bb-0310-9956-ffa450edef68

9dd5a440

* server/scoreboard.c: Check for child_num < 0 also in ap_update_child_status · d73d4951

Jan Kaluža authored Nov 11, 2014

and ap_update_child_status_from_conn. PR 56767.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638073 13f79535-47bb-0310-9956-ffa450edef68

d73d4951

mod_auth_basic: Fix comment mentioning 403 instead of 401. · c19dce2c

Jan Kaluža authored Nov 11, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1638072 13f79535-47bb-0310-9956-ffa450edef68

c19dce2c

10 Nov, 2014 3 commits

Resolve rashes with LDAP authz and non-LDAP authn since r1608202. · 299d5987
Eric Covener authored Nov 10, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1637990 13f79535-47bb-0310-9956-ffa450edef68
```
299d5987

xforms · d94c4038

Eric Covener authored Nov 10, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1637771 13f79535-47bb-0310-9956-ffa450edef68

d94c4038

fix copy/paste error for CacheSocacheMinTime, rest of content is correct. · 5dcb3e8e

Eric Covener authored Nov 10, 2014

  http://httpd.apache.org/docs/trunk/mod/mod_cache_socache.html#comment_3247



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1637768 13f79535-47bb-0310-9956-ffa450edef68

5dcb3e8e

09 Nov, 2014 2 commits

Rebuild. · 82c88764

Lucien Gentis authored Nov 09, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1637697 13f79535-47bb-0310-9956-ffa450edef68

82c88764

XML updates. · 0568d311

Lucien Gentis authored Nov 09, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1637696 13f79535-47bb-0310-9956-ffa450edef68

0568d311

06 Nov, 2014 2 commits

make docs · 8251a17c

Jeff Trawick authored Nov 06, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1637113 13f79535-47bb-0310-9956-ffa450edef68

8251a17c

mention the cmake-based build · 8a376383

Jeff Trawick authored Nov 06, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1637112 13f79535-47bb-0310-9956-ffa450edef68

8a376383

02 Nov, 2014 1 commit

namded captures show up in the env with a MATCH_ prefix. · 6e8256e1

Eric Covener authored Nov 02, 2014

   http://httpd.apache.org/docs/2.4/sections.html#comment_3193


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1636195 13f79535-47bb-0310-9956-ffa450edef68

6e8256e1