Skip to content
  1. Oct 27, 2016
  2. Oct 26, 2016
    • Jim Jagielski's avatar
      Merge r1764040 from trunk: · 6d57c7e3
      Jim Jagielski authored
      mod_dav: Fix a potential cause of unbounded memory usage or incorrect
      behavior in a routine that sends <DAV:response>'s to the output filters.
      
      The dav_send_one_response() function accepts the current head of the output
      filter list as an argument, but the actual head can change between calls to
      ap_pass_brigade().  This can happen with self-removing filters, e.g., with
      the filter from mod_headers or mod_deflate.  Consequently, executing an
      already removed filter can either cause unwanted memory usage or incorrect
      behavior.
      
      This patch changes the signature of the existing mod_dav's public API,
      dav_send_one_response(), because this API is not yet a part of any 2.4.x
      release.
      
      * modules/dav/main/mod_dav.c
        (dav_send_one_response): Accept a request_rec instead of an ap_filter_t.
         Write the response to r->output_filters.
        (dav_send_multistatus, dav_stream_response): Update these calling sites
         of dav_send_one_response().
      
      * modules/dav/main/mod_dav.h
        (dav_send_one_response): ...
      6d57c7e3
  3. Oct 24, 2016
  4. Oct 23, 2016
  5. Oct 22, 2016
  6. Oct 21, 2016
  7. Oct 20, 2016
  8. Oct 18, 2016
  9. Oct 17, 2016
  10. Oct 15, 2016
  11. Oct 14, 2016
  12. Oct 11, 2016
  13. Oct 10, 2016
  14. Oct 09, 2016
  15. Oct 08, 2016