Commits · 3ba02090ef3d973c6b4d14d4078f519d8cce5fc0 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Mar 06, 2010

Sync Changelog · 3ba02090

William A. Rowe Jr authored Mar 06, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919690 13f79535-47bb-0310-9956-ffa450edef68

3ba02090

Mar 05, 2010

update transformation · 266de624

Andre Malo authored Mar 05, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919623 13f79535-47bb-0310-9956-ffa450edef68

266de624

try to get bug fix entries for future 2.3.7 alpha caught up with 2.2.15 · e09d6ae9

Jeff Trawick authored Mar 05, 2010

where appropriate


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919552 13f79535-47bb-0310-9956-ffa450edef68

e09d6ae9

Prevent future developers from being as easily confused; prefix the · ca4b6fa5

William A. Rowe Jr authored Mar 05, 2010

registered callback function names with regfnXxx.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919543 13f79535-47bb-0310-9956-ffa450edef68

ca4b6fa5

revert r918671; these four functions don't need to be · 4d6b67e6

Jeff Trawick authored Mar 05, 2010

addressible except via the function pointers in the
EXTENSION_CONTROL_BLOCK


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919531 13f79535-47bb-0310-9956-ffa450edef68

4d6b67e6

* Only log a 408 if it is no keepalive timeout. · 932a0d6e

Ruediger Pluem authored Mar 05, 2010

PR: 39785
Submitted by: Mark Montague <markmont umich.edu>, rpluem
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919323 13f79535-47bb-0310-9956-ffa450edef68

932a0d6e

Mar 04, 2010
- Small rearrangement, placing the explanatory text with the example it · 04a4aeec
  Richard Bowen authored Mar 04, 2010
```
explains.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918997 13f79535-47bb-0310-9956-ffa450edef68
```
  04a4aeec
Mar 03, 2010

follow up to r918665: · e080ce1a

Jeff Trawick authored Mar 03, 2010

These particular functions can't be static because they're 
part of ISAPI, so use a different mechanism to quiet the gcc 
warnings.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918671 13f79535-47bb-0310-9956-ffa450edef68

e080ce1a

fix these warnings: · 46e83ce8

Jeff Trawick authored Mar 03, 2010

mod_isapi.c:488: warning: no previous prototype for ‘GetServerVariable’
mod_isapi.c:590: warning: no previous prototype for ‘ReadClient’
mod_isapi.c:807: warning: no previous prototype for ‘WriteClient’
mod_isapi.c:863: warning: no previous prototype for ‘ServerSupportFunction’
mod_isapi.c:1407: warning: no previous prototype for ‘isapi_handler’

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918665 13f79535-47bb-0310-9956-ffa450edef68

46e83ce8

fix these warnings (and presumably a similar one in mod_socache_dc.c): · 1c35b7bc

Jeff Trawick authored Mar 03, 2010

mod_socache_shmcb.c:625: warning: no previous prototype for ‘socache_shmcb_iterate’
mod_socache_dbm.c:505: warning: no previous prototype for ‘socache_dbm_iterate’
mod_socache_memcache.c:290: warning: no previous prototype for ‘socache_mc_iterate’

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918655 13f79535-47bb-0310-9956-ffa450edef68

1c35b7bc

fix this warning: · 56fdf7e2

Jeff Trawick authored Mar 03, 2010

mod_example_hooks.c: In function ‘trace_nocontext’:
mod_example_hooks.c:494: warning: format not a string literal and no format arguments

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918654 13f79535-47bb-0310-9956-ffa450edef68

56fdf7e2

fix this error: · 6ecc05b1

Jeff Trawick authored Mar 03, 2010

mod_sed.c: In function ‘log_sed_errf’:
mod_sed.c:67: warning: format not a string literal and no format arguments

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918653 13f79535-47bb-0310-9956-ffa450edef68

6ecc05b1

use separate #error message when APR[-Util] is of a valid · dc95c4ab

Jeff Trawick authored Mar 03, 2010

version but wasn't built with crypto support


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918562 13f79535-47bb-0310-9956-ffa450edef68

dc95c4ab

Typo. Regenerating html · 5ce9d7c1

Richard Bowen authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918531 13f79535-47bb-0310-9956-ffa450edef68

5ce9d7c1

Typo · 60fcfb56

Richard Bowen authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918528 13f79535-47bb-0310-9956-ffa450edef68

60fcfb56

reflect assignment of CVE-2010-0434 · 9d130409

Jeff Trawick authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918428 13f79535-47bb-0310-9956-ffa450edef68

9d130409

Mar 02, 2010

Rebuild transformations. · 84d30561

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918034 13f79535-47bb-0310-9956-ffa450edef68

84d30561

Tell them how to increase ThreadLimit · d9b0c013

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918033 13f79535-47bb-0310-9956-ffa450edef68

d9b0c013

Rebuild transformations. · 0b4dd669

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918025 13f79535-47bb-0310-9956-ffa450edef68

0b4dd669

Reference Min/MaxSpareServers/Threads when talking about dynamically · 68d2d1d6

Richard Bowen authored Mar 02, 2010

configuring the side of the server pool.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918024 13f79535-47bb-0310-9956-ffa450edef68

68d2d1d6

Not sure if this is actually useful, but I've been asked often enough · cf39e73d

Richard Bowen authored Mar 02, 2010

that I think it's probably worth mentioning. On the other hand, if
someone can't grep the source code for '20000', I'm not sure they should
be encouraged ... ;-)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918022 13f79535-47bb-0310-9956-ffa450edef68

cf39e73d

Awkward phrasing. · 48561372

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918018 13f79535-47bb-0310-9956-ffa450edef68

48561372

Awkward phrasing. · f6fea86e

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918015 13f79535-47bb-0310-9956-ffa450edef68

f6fea86e

Cross-linking between (Min|Max)Spare(Servers|Threads). · 908a90b3

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918011 13f79535-47bb-0310-9956-ffa450edef68

908a90b3

'Address already in use' error message. · 36b560b7

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918003 13f79535-47bb-0310-9956-ffa450edef68

36b560b7

Another occurance of 'processes'. Rebuild transformations. · b1e60aae

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918002 13f79535-47bb-0310-9956-ffa450edef68

b1e60aae

Rebuild transformation. · 7927c652

Richard Bowen authored Mar 02, 2010



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917997 13f79535-47bb-0310-9956-ffa450edef68

7927c652

None of the supposedly correct forms of the possessive of process sound · 889ea07e

Richard Bowen authored Mar 02, 2010

very awkward in this sentence. Rephrasing.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917996 13f79535-47bb-0310-9956-ffa450edef68

889ea07e

SECURITY: CVE-2010-0408 (cve.mitre.org) · 2fe8ec85

William A. Rowe Jr authored Mar 02, 2010

mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent after
request headers indicate a request body is incoming; this is not a case of
HTTP_INTERNAL_SERVER_ERROR.

Submitted by: Niku Toivola <niku.toivola sulake.com>

rpluem, jim, wrowe



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917875 13f79535-47bb-0310-9956-ffa450edef68

2fe8ec85

SECURITY: CVE-2010-0425 (cve.mitre.org) · e9602aec

William A. Rowe Jr authored Mar 02, 2010

mod_isapi: Do not unload an isapi .dll module until the request
processing is completed, avoiding orphaned callback pointers.

Submitted by: Brett Gervasoni <brettg senseofsecurity.com>, trawick
Reviewed by: trawick, wrowe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917870 13f79535-47bb-0310-9956-ffa450edef68

e9602aec

Mar 01, 2010

Make sure we request the APR_FINFO_TYPE on the apr_dir_read() for wildcard · 3e64d02b
Graham Leggett authored Mar 01, 2010
```
configuration.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917759 13f79535-47bb-0310-9956-ffa450edef68
```
3e64d02b

When loading wildcards that are part of a path, only consider directories · ef549917

Graham Leggett authored Mar 01, 2010

and ignore other files. [Dan Poirier, Graham Leggett]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917735 13f79535-47bb-0310-9956-ffa450edef68

ef549917

overlooked for 10 years, impressive ;-) · 41fe4bae

William A. Rowe Jr authored Mar 01, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917615 13f79535-47bb-0310-9956-ffa450edef68

41fe4bae

in preparation of fixing 2.2 branch, change again, now to a cast-less solution · 91fdaf5d
William A. Rowe Jr authored Mar 01, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917611 13f79535-47bb-0310-9956-ffa450edef68
```
91fdaf5d

test svn update · 7e61d6c0

Philip M. Gollucci authored Mar 01, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917386 13f79535-47bb-0310-9956-ffa450edef68

7e61d6c0

Feb 28, 2010

Update transformation. · 55a908e4

Rainer Jung authored Feb 28, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917242 13f79535-47bb-0310-9956-ffa450edef68

55a908e4

Correct referenced OpenSSL version now that 0.9.8m · 8d0a0238

Rainer Jung authored Feb 28, 2010

was released.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917235 13f79535-47bb-0310-9956-ffa450edef68

8d0a0238

Add mod_reqtimeout line to Windows default configuration. · 24ba779e

Stefan Fritsch authored Feb 28, 2010

Submitted by: Gregg L. Smith <lists glewis com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917151 13f79535-47bb-0310-9956-ffa450edef68

24ba779e

Feb 27, 2010

Use portable apr_snprintf in rotatelogs. · e76d6bb5

Graham Leggett authored Feb 27, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917029 13f79535-47bb-0310-9956-ffa450edef68

e76d6bb5

Create the pidfile world readable by adding APR_FPROT_WREAD. Use · 4b86d701

Graham Leggett authored Feb 27, 2010

non-deprecated versions of the APR constants.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917005 13f79535-47bb-0310-9956-ffa450edef68

4b86d701