Commits · 35b7b898dcd2a9fbbe287c17a9be76df6651ec64 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

24 Jan, 1997 1 commit
- Fix type "perm" --> "permanent". Reported by dan.anderson@sierraclub.org · 35b7b898
  Roy T. Fielding authored Jan 24, 1997
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77474 13f79535-47bb-0310-9956-ffa450edef68
```
  35b7b898
22 Jan, 1997 3 commits

Configure patches: Fix OSF, SCO3 and 8space->tab · a5658f2c

Jim Jagielski authored Jan 22, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77472 13f79535-47bb-0310-9956-ffa450edef68

a5658f2c

HTML-escaped the code, otherwise < and > were interpreted as tag demarkers - eek. · 96f05d80
brian authored Jan 22, 1997
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77471 13f79535-47bb-0310-9956-ffa450edef68
```
96f05d80

Cleanups, looks like a placeholder was forgotten. Also, lines really · 4d344af1

brian authored Jan 22, 1997

shouldn't be more than 75 characters long, unless they need to be.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77470 13f79535-47bb-0310-9956-ffa450edef68

4d344af1

21 Jan, 1997 2 commits

Make PrintPath self-contained by placing test for -x · 8ad9a80a

Jim Jagielski authored Jan 21, 1997

inside of it. Fallback is using -r if -x doesn't exist


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77468 13f79535-47bb-0310-9956-ffa450edef68

8ad9a80a

Just fixing things · aca92893

Jim Jagielski authored Jan 21, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77467 13f79535-47bb-0310-9956-ffa450edef68

aca92893

20 Jan, 1997 8 commits

fix -Wall warning about ap_snprintf() and allow for · 0ee2c9c2

Jim Jagielski authored Jan 20, 1997

HAVE_SNPRINT use in conf.h


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77466 13f79535-47bb-0310-9956-ffa450edef68

0ee2c9c2

Reviewed by: Randy Terbush, Brian Behlendorf · b791fbd9

brian authored Jan 20, 1997

Submitted by:	Dean Gaudet

Subject: warning from irix 6.2 cc

cfe: Warning 851: util.c, line 109: constant initializer expression is
invalid (refers to automatic variables).
     struct tm gmt = *gmtime(&tt);
 ----^

Interesting.  I'd have to dig out my copy of the ansi c standard to see
if this is valid -- but I'm tempted to believe the compiler because this
is a structure initialization, not a scalar.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77465 13f79535-47bb-0310-9956-ffa450edef68

b791fbd9

Reviewed by: Randy Terbush, Brian Behlendorf · 69559091

brian authored Jan 20, 1997

Submitted by: Dean Gaudet

Two problems. The first is that every call to make_sub_request wasn't
copying the original request's request_time. The second was that
mod_log_config was defaulting to "do not want_orig" for %T (i.e. %>T was
default not %<T). Try the following patch or use %<T.

I considered copying the time right inside make_sub_request. I also
considered making make_sub_request a static function. Both may be the
right thing to do... In hotwired's code I keep track of time statistics
and other stuff that is "global" to a particular request in the conn_rec
structure. Mostly because I am lazy. But it does avoid this problem
where you have to copy the values from request to sub request.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77464 13f79535-47bb-0310-9956-ffa450edef68

69559091

Reviewed by: Rob Hartill, Brian Behlendorf · 95adfe86

brian authored Jan 20, 1997

Submitted by:	David J MacKenzie <djm@va.pubnix.com>

Clarification.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77463 13f79535-47bb-0310-9956-ffa450edef68

95adfe86

Reviewed by: Brian Behlendorf · f60a25fb

brian authored Jan 20, 1997

Submitted by:	Marc Slemko

Small bugfix due to think-o.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77461 13f79535-47bb-0310-9956-ffa450edef68

f60a25fb

MAX_STRING_LENGTH -> MAX_STRING_LEN · 1e428254

Randy Terbush authored Jan 20, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77460 13f79535-47bb-0310-9956-ffa450edef68

1e428254

Change from sprintf() to snprintf() to avoid · e8b60223

Jim Jagielski authored Jan 20, 1997

and possible prevent buffer overflows


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77459 13f79535-47bb-0310-9956-ffa450edef68

e8b60223

Remove mod_fastcgi from the distribution. · 7b931fb4

Randy Terbush authored Jan 20, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77458 13f79535-47bb-0310-9956-ffa450edef68

7b931fb4

19 Jan, 1997 6 commits

portabilities fixes · 6ec2cd3a

Jim Jagielski authored Jan 19, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77457 13f79535-47bb-0310-9956-ffa450edef68

6ec2cd3a

More bits. · 36247347

Randy Terbush authored Jan 19, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77456 13f79535-47bb-0310-9956-ffa450edef68

36247347

Get it right. · e0f88ef0

Randy Terbush authored Jan 19, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77455 13f79535-47bb-0310-9956-ffa450edef68

e0f88ef0

Update the supplied mod_fastcgi.c to the current 1.4.3 version. · 96a87104

Randy Terbush authored Jan 19, 1997

Submitted by: Stanley Gambarin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77454 13f79535-47bb-0310-9956-ffa450edef68

96a87104

Update docs. Note that I added a comment about the included patch · 7ed0e386

Randy Terbush authored Jan 19, 1997

being reversed and added the <!--#include for our footer.
Submitted by: Stanley Gambarin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77453 13f79535-47bb-0310-9956-ffa450edef68

7ed0e386

Make use of -x or -r in [] per-platform. · 6326a465

Ben Laurie authored Jan 19, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77452 13f79535-47bb-0310-9956-ffa450edef68

6326a465

18 Jan, 1997 3 commits

avoid prototype conflicts the right way now · 384c73cb

Jim Jagielski authored Jan 18, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77451 13f79535-47bb-0310-9956-ffa450edef68

384c73cb

start of the great snprintf() migration · f986512a

Jim Jagielski authored Jan 18, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77450 13f79535-47bb-0310-9956-ffa450edef68

f986512a

Trim arguments passed to CGI program. · 18f4a351

Randy Terbush authored Jan 18, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77449 13f79535-47bb-0310-9956-ffa450edef68

18f4a351

16 Jan, 1997 4 commits

Update about modules/Makefile change for multiple subdirs. · 4138ce95

Chuck Murcko authored Jan 16, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77448 13f79535-47bb-0310-9956-ffa450edef68

4138ce95

Submitted by: Jeremy.Laidman@cit.act.edu.au · 94ad8a56

Chuck Murcko authored Jan 16, 1997

Fix bug for using multiple subdirectories under modules. I also added the
bug fix to the clean production, since it would also be a problem there.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77447 13f79535-47bb-0310-9956-ffa450edef68

94ad8a56

Reviewed by: Randy Terbush, Chuck Murcko · bcb6d59c

brian authored Jan 16, 1997

Submitted by: Rodent of Unusual Size <coar@decus.org>

This patch (to mod_log_config and mod_rewrite) puts "\"\"" into the
logfile for the %u substitution IFF there's a remote user but of
zero length (as opposed to none at all). That should keep the
logfile analysers from getting indigestion if an authentication is
done with a null username.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77446 13f79535-47bb-0310-9956-ffa450edef68

bcb6d59c

Reviewed by: Rob Hartill, Jim Jagielski, Jason A. Dour · 648bab7f

brian authored Jan 16, 1997

Submitted by:	Alexei Kosut


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77445 13f79535-47bb-0310-9956-ffa450edef68

648bab7f

14 Jan, 1997 3 commits

Clean up some cruft that was left over from a malloc(). · 1e5ca3dc

Randy Terbush authored Jan 14, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77444 13f79535-47bb-0310-9956-ffa450edef68

1e5ca3dc

Complete fix for directoryindex problem. · 9fb748e8

Randy Terbush authored Jan 14, 1997

Reviewed by: Marc Slemko, Sameer, Parekh, Randy Terbush
Submitted by: Marc Slemko

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77443 13f79535-47bb-0310-9956-ffa450edef68

9fb748e8

NEXTSTEP 2.0 doesn't have unistd.h · 5acbb209

Jim Jagielski authored Jan 14, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77438 13f79535-47bb-0310-9956-ffa450edef68

5acbb209

12 Jan, 1997 10 commits

Hah, *squish*! mod_info.c is making the assumption that the config · 14d05d85

Randy Terbush authored Jan 12, 1997

files are relative to ServerRoot.  Looking at the /serv-info, it's
clear that www.apache.org's server is started with -f and an
absolute pathname.
Reviewed by: Randy Terbush, Rasmus Lerdorf
Submitted by: Ken the Rodent of Unusual Size


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77437 13f79535-47bb-0310-9956-ffa450edef68

14d05d85

Check another return value and do a bit more error logging in · adc8e0d0

Randy Terbush authored Jan 12, 1997

lingering_close().
Reviewed by: Chuck Murcko


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77436 13f79535-47bb-0310-9956-ffa450edef68

adc8e0d0

A POST request to a CGI script that fails can be redirected to another · fbb93c1e

Randy Terbush authored Jan 12, 1997

CGI to handle via ErrorDocument 500.

Apache uses:
	     if (!r->read_chunked && (r->remaining <= 0))

to decide if it should read the POSTed data, but the 2nd script can't
find any POSTed data so it'll hang. If the script doesn't look for POSTed
data Apache does, so it hangs.
Reviewed by: Alexei Kosut, Randy Terbush, Rob Hartill
Submitted by: Rob Hartill


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77435 13f79535-47bb-0310-9956-ffa450edef68

fbb93c1e

Log reason when mod_dir returns access HTTP_FORBIDDEN · 4766b40c

Randy Terbush authored Jan 12, 1997

Reviewed by: Rob Hartill, Randy Terbush
Submitted by: Ken the Rodent of Unusual Size

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77434 13f79535-47bb-0310-9956-ffa450edef68

4766b40c

Properly check errno to prevent display of a directory index · 874147f0

Randy Terbush authored Jan 12, 1997

when server receives a long enough URL to confuse stat().
Reviewed by: Randy Terbush, Marc Slemko
Submitted by: Marc Slemko


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77433 13f79535-47bb-0310-9956-ffa450edef68

874147f0

Make constants agree with CHANGES · 026fa271

Randy Terbush authored Jan 12, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77432 13f79535-47bb-0310-9956-ffa450edef68

026fa271

Add serveral security enhancements. · 4ca6862b

Randy Terbush authored Jan 12, 1997

        - ~user execution now properly restricted to ~user's home
          directory and below.
        - execution restricted to UID/GID > 100
        - restrict passed environment to known variables
        - call setgid() before initgroups() (portability fix)
        - remove use of setenv() (portability fix)

Reviewed-by: Marc Slemko, Jason Dour, Randy Terbush


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77431 13f79535-47bb-0310-9956-ffa450edef68

4ca6862b

Add suexec CHANGES · 12d0bb42

Randy Terbush authored Jan 12, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77430 13f79535-47bb-0310-9956-ffa450edef68

12d0bb42

Document HTTP/1.0 response and env var access control. · d1fb4b30

Ben Laurie authored Jan 12, 1997


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77429 13f79535-47bb-0310-9956-ffa450edef68

d1fb4b30

Add HTTP/1.0 response forcing, and access control via environment variables. · 2e37f471
Ben Laurie authored Jan 12, 1997
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@77428 13f79535-47bb-0310-9956-ffa450edef68
```
2e37f471