Commits · 396e4d394972713e04a4dfebaeb64659eda70760 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Jul 21, 2003

Prevent segfaults after SSL renegotiation failures. · 006872c6

Joe Orton authored Jul 21, 2003

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Set aborted flag
after renegotiation failure.

* modules/ssl/ssl_engine_io.c (ssl_filter_write, ssl_io_filter_output):
Don't dereference BIOs in filter_ctx when filter_ctx->pssl is NULL.
(ssl_filter_io_shutdown): Set aborted flag on abortive shutdown.

PR: 21370
Submitted by: Hartmut Keil <Hartmut.Keil@adnovum.ch>
Cleaned up by: Jeff Trawick, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100720 13f79535-47bb-0310-9956-ffa450edef68

006872c6

reject overlong credentials from the commandline · 59b42e8c

Andre Malo authored Jul 21, 2003

Acked by: Cliff Woolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100718 13f79535-47bb-0310-9956-ffa450edef68

59b42e8c

Jul 16, 2003

· d8e3a94d

Paul J. Reder authored Jul 16, 2003

Just fixing some improperly formatted entries.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100649 13f79535-47bb-0310-9956-ffa450edef68

d8e3a94d

Jul 15, 2003

· 95855a2b

Paul J. Reder authored Jul 15, 2003

Update the header token parsing code to allow LWS between the
token word and the ':' seperator.  [PR 16520]
[submitted: Kris Verbeeck <kris.verbeeck@advalvas.be> and
            Nicel KM <mnicel@yahoo.com>]
[Reviewed: <coad@measurement-factory.com> and
           Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100642 13f79535-47bb-0310-9956-ffa450edef68

95855a2b

· 3481be6d

Paul J. Reder authored Jul 15, 2003

Eliminate creation of a temporary table in ap_get_mime_headers_core()
Submitted by:   Joe Schaefer <joe+gmane@sunstarsys.com>
Reviewed by:    Brian Pane
Backported by:  Paul J. Reder


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100638 13f79535-47bb-0310-9956-ffa450edef68

3481be6d

Ignore RewriteRules in .htaccess files if the directory · c6e61b1d

Andre Malo authored Jul 15, 2003

containing the .htaccess file is requested without a trailing slash.

PR: 20195

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100632 13f79535-47bb-0310-9956-ffa450edef68

c6e61b1d

If a directory contains a file listed in the · 3e2c6972

Andre Malo authored Jul 15, 2003

DirectoryIndex directive, the folder icon is no longer replaced
by the icon of that file.

PR:	9587
Submitted by:	David Shane Holden <dpejesh@yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100628 13f79535-47bb-0310-9956-ffa450edef68

3e2c6972

Jul 14, 2003

strip trailing spaces of groupnames. · 0457c9d6

Andre Malo authored Jul 14, 2003

PR:	12863


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100620 13f79535-47bb-0310-9956-ffa450edef68

0457c9d6

· 872f17a0

Paul J. Reder authored Jul 14, 2003

Remove some extraneous code committed as part of the fix for 13946 pointed
out by Andre Malo. [Paul J. Reder]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100615 13f79535-47bb-0310-9956-ffa450edef68

872f17a0

mod_ssl: Fix a problem setting variables that represent the · c97f0349

Jeff Trawick authored Jul 14, 2003

client certificate chain.

PR:  21371


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100605 13f79535-47bb-0310-9956-ffa450edef68

c97f0349

Remember an authenticated user during internal redirects if the · 4dc16beb

Andre Malo authored Jul 14, 2003

redirection target is not access protected and pass it
to scripts using the REDIRECT_REMOTE_USER environment variable.

PR: 10678, 11602.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100604 13f79535-47bb-0310-9956-ffa450edef68

4dc16beb

· a5aaa65c

Paul J. Reder authored Jul 14, 2003

Ooops, forgot the PR number for my recent mod_rewrite commit (PR #13946)...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100601 13f79535-47bb-0310-9956-ffa450edef68

a5aaa65c

· a6bf1186

Paul J. Reder authored Jul 14, 2003

mod_rewrite: fix a problem in the proxy support of mod_rewrite. The broken
code was inserting multiple "proxy:" fields in the rewritten URIs.
[Submitted by:  Eider Oliveira <eider@bol.com.br>]
[Updated and reviewed by: Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100600 13f79535-47bb-0310-9956-ffa450edef68

a6bf1186

Propagate the handler name to the action script via · 1a0f0edb

Andre Malo authored Jul 14, 2003

the REDIRECT_HANDLER environment variable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100598 13f79535-47bb-0310-9956-ffa450edef68

1a0f0edb

mod_ext_filter: Set additional environment variables for use by · c805df98

Jeff Trawick authored Jul 14, 2003

the external filter.

PR:    20944

The missing code was identified by Andrew Ho, coded/tested by Jeff
Trawick, and verified yet again by Neil Fraser.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100595 13f79535-47bb-0310-9956-ffa450edef68

c805df98

Introduce the "virtual" modifier to the Action directive, · 3521e6f0

Andre Malo authored Jul 14, 2003

which allows the use of handlers for virtual locations.

PR:	8431


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100589 13f79535-47bb-0310-9956-ffa450edef68

3521e6f0

Jul 12, 2003

let mod_speling use the current AcceptPathInfo setting. · 327c3e49

Andre Malo authored Jul 12, 2003

Default is: reject

PR: 21059


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100566 13f79535-47bb-0310-9956-ffa450edef68

327c3e49

sync · 9922f72a

Andre Malo authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100563 13f79535-47bb-0310-9956-ffa450edef68

9922f72a

Jul 09, 2003

Forward port patch for CAN-2003-0192 from 2.0. · cd2c6d3a

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences
of per-directory renegotiations and the SSLCipherSuite directive
being used to upgrade from a weak ciphersuite to a strong one
could result in the weak ciphersuite being used in place of the
strong one. [Ben Laurie]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100518 13f79535-47bb-0310-9956-ffa450edef68

cd2c6d3a

Forward port patch for CAN-2003-0253 from 2.0. · 9bc02aba

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing
temporary denial of service when accept() on a rarely accessed port
returns certain errors.  Reported by Saheed Akhtar
<S.Akhtar@talis.com>.  [Jeff Trawick]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100517 13f79535-47bb-0310-9956-ffa450edef68

9bc02aba

Forward port security patch for CAN-2003-0254 from 2.0. · 46e359cd

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial
of service when target host is IPv6 but proxy server can't create
IPv6 socket.  Fixed by the reporter.  [Yoshioka Tsuneo
<tsuneo.yoshioka@f-secure.com>]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100516 13f79535-47bb-0310-9956-ffa450edef68

46e359cd

Sync CHANGES entry for VU#379828 with 2.0 · 3f91f671

Sander Striker authored Jul 09, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100515 13f79535-47bb-0310-9956-ffa450edef68

3f91f671

Jul 08, 2003

· 9c2f26b8

Paul J. Reder authored Jul 08, 2003

Update the header token parsing code to allow LWS between the token word
and the ':' seperator.  [PR 16520]
[submitted: Kris Verbeeck <kris.verbeeck@advalvas.be> and
            Nicel KM <mnicel@yahoo.com>]
[Reviewed: <coad@measurement-factory.com> and
           Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100492 13f79535-47bb-0310-9956-ffa450edef68

9c2f26b8

Jul 07, 2003

move the entry for a fix just merged into 2.0.48-dev · ada59358

Jeff Trawick authored Jul 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100482 13f79535-47bb-0310-9956-ffa450edef68

ada59358

move the entry for a fix just merged into 2.0.48-dev · 16029d16

Jeff Trawick authored Jul 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100480 13f79535-47bb-0310-9956-ffa450edef68

16029d16

Jul 01, 2003

mod_ext_filter: Add the ability to filter request bodies. · 49b175b2

Jeff Trawick authored Jul 01, 2003

Submitted by: Philipp Reisner <philipp.reisner@linbit.com>
Reviewed by: Jeff Trawick

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100429 13f79535-47bb-0310-9956-ffa450edef68

49b175b2

Note backport. · d09dd5ad

Sander Striker authored Jul 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100427 13f79535-47bb-0310-9956-ffa450edef68

d09dd5ad

Note backport. · 683a6edf

Sander Striker authored Jul 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100425 13f79535-47bb-0310-9956-ffa450edef68

683a6edf

Jun 29, 2003

Fix NULL-pointer issue in ab when parsing an incomplete or non-HTTP · 4e7d3f6a

Andre Malo authored Jun 29, 2003

response.

PR: 21085
Submitted by:	Glenn Nielsen <glenn@apache.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100399 13f79535-47bb-0310-9956-ffa450edef68

4e7d3f6a

Add FreeBSD directory layout · 38ee4e99

Andre Malo authored Jun 29, 2003

PR: 21100
Submitted by: info@orangexl.com (Sander Holthaus)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100397 13f79535-47bb-0310-9956-ffa450edef68

38ee4e99

Jun 27, 2003

· 4eecfa1c

Paul J. Reder authored Jun 27, 2003

Correct the code in ap_check_cache_feshness to check max_age, smax_age,
and expires correctly.
Submitted by:   Thomas Castelle  <tcastelle@generali.fr>
Reviewed and altered by: Paul J. Reder


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100380 13f79535-47bb-0310-9956-ffa450edef68

4eecfa1c

Jun 25, 2003

Ben's streamy PROPFIND patch has been backported. · 9d31e6af

Greg Stein authored Jun 25, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100362 13f79535-47bb-0310-9956-ffa450edef68

9d31e6af

Jun 23, 2003

mod_cgid: Restart the cgid daemon if it crashes. · b71d643d

Jeff Trawick authored Jun 23, 2003

PR:             19849
Submitted by:   Glenn Nielsen <glenn@apache.org>
Reviewed by:    Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100343 13f79535-47bb-0310-9956-ffa450edef68

b71d643d

update to reflect a merged fix · acf5bbe2

Jeff Trawick authored Jun 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100338 13f79535-47bb-0310-9956-ffa450edef68

acf5bbe2

Jun 20, 2003

mod_cgid: Eliminate a double-close of a socket. This resolves · cbbc7735

Jeff Trawick authored Jun 20, 2003

various operational problems in a threaded MPM, since on the
second attempt to close the socket, the same descriptor was
often already in use by another thread for another purpose.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100320 13f79535-47bb-0310-9956-ffa450edef68

cbbc7735

Jun 07, 2003

Unix: Handle permissions settings for flock-based mutexes in · b704f57c

Jeff Trawick authored Jun 07, 2003

unixd_set_global|proc_mutex_perms().  Allow the functions to be
called for any type of mutex.

This resolves a fatal problem with mod_rewrite on systems where
APR uses flock-based mutex.

It simplifies mod_ssl as well, which had special logic to perform
the chown().  It fixed an init error with mod_ssl on systems where
flock is used when the user had no SSLMutex directive.

The Unix MPMs continue to call unixd_set_global|proc_mutex_perms()
only for SysV sems.  There is no permission problem with flock-based
accept mutexes since the child init logic for the MPMs is done
prior to switching identity.

PR:              20312


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100189 13f79535-47bb-0310-9956-ffa450edef68

b704f57c

mod_rewrite: Perform child initialization on the rewrite log lock. · dd0522a5

Jeff Trawick authored Jun 07, 2003

This fixes a log corruption issue when flock-based serialization
is used (e.g., FreeBSD).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100187 13f79535-47bb-0310-9956-ffa450edef68

dd0522a5

Jun 06, 2003

Don't respect the Server header field as set by modules and CGIs. · ec92bc44

Jeff Trawick authored Jun 06, 2003

As with 1.3, for proxy requests any such field is from the origin
server; otherwise it will have our server info as controlled by
the ServerTokens directive.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100182 13f79535-47bb-0310-9956-ffa450edef68

ec92bc44

Jun 05, 2003

Fix some broken log messages in WinNT MPM. · 22b28442

Jeff Trawick authored Jun 05, 2003

Submitted by: Juan Rivera <Juan.Rivera@citrix.com>
Reviewed by: Jeff Trawick

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100175 13f79535-47bb-0310-9956-ffa450edef68

22b28442

Jun 03, 2003

add Ben's streamy PROPFIND change · b8bbfc67

Greg Stein authored Jun 03, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100165 13f79535-47bb-0310-9956-ffa450edef68

b8bbfc67