Commits · 54089c2d7e97eb61c635fa4cb75575878fd0dc78 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Aug 13, 2003

Stas Bekman authored Aug 13, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100980 13f79535-47bb-0310-9956-ffa450edef68

54089c2d

Correct failure with Listen directives on machines with IPv6 enabled by · b363f441

Justin Erenkrantz authored Aug 13, 2003

removing find_default_family() and letting APR determine what should be done
without a hostname.

This patch requires the corollary APR patch to properly call getaddrinfo().

(Justin modified Colm's patch to always walk the old listeners even when
we have an address.  That part of the patch wasn't really relevant.)

Submitted by:	Colm MacC�rthaigh <colm@stdlib.net>
Reviewed by:	Justin Erenkrantz


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100978 13f79535-47bb-0310-9956-ffa450edef68

b363f441

Aug 12, 2003

· 4a59f36e

Cliff Woolley authored Aug 12, 2003

forgot this.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100971 13f79535-47bb-0310-9956-ffa450edef68

4a59f36e

Fix bug in mod_deflate, which was passing calling deflate() · 507a5653

Stas Bekman authored Aug 12, 2003

     without checkinig first whether it has something to deflate. (currently
     this causes deflate to generate a fatal error according to the zlib spec).
     PR 22259.
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100966 13f79535-47bb-0310-9956-ffa450edef68

507a5653

Aug 07, 2003

split ap_process_resource_config into two functions (since we don't wanna · 69f3cf03

Andre Malo authored Aug 07, 2003

change the api). Only the first one (the ap_ entry point) now checks
for fnmatch and the second one will be called for every file/directory
included.
This, however, avoids infinite recursions, if a filename contains
wildcard characters.

PR: 22194


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100931 13f79535-47bb-0310-9956-ffa450edef68

69f3cf03

Aug 06, 2003

use bucket brigades directly when reading PUT data. This avoids · a6b67009

Andre Malo authored Aug 06, 2003

problems with content-length-modifying input filter (like deflate).

PR: 22104
Some stuff submitted by: tim@robbins.dropbear.id.au (Tim Robbins)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100919 13f79535-47bb-0310-9956-ffa450edef68

a6b67009

Aug 05, 2003

hook mimetype-forcing into fixup/LAST. This leads to consistent · d3f8137f

Andre Malo authored Aug 05, 2003

behaviour (server context vs. directory context), overrides all statically
configured mime types and doesn't clobber multiviews any longer.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100913 13f79535-47bb-0310-9956-ffa450edef68

d3f8137f

Jul 31, 2003

sync · 3d2e8f45

Andre Malo authored Jul 31, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100885 13f79535-47bb-0310-9956-ffa450edef68

3d2e8f45

Jul 30, 2003

this patch was reverted. · d390f54e

Andre Malo authored Jul 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100863 13f79535-47bb-0310-9956-ffa450edef68

d390f54e

Jul 29, 2003

ab: Work over non-loopback on Unix again. · 5c454a16

Jeff Trawick authored Jul 29, 2003

(Broken as of 2.0.47 due to dependence on an APR bug which was fixed
in 2.0.47.)

PR:   21495


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100846 13f79535-47bb-0310-9956-ffa450edef68

5c454a16

cause a lookup failure in external rewrite maps if · c2a71bf4

Andre Malo authored Jul 29, 2003

the key contains a newline.

PR: 14453
Submitted originally by: Cedric Gavage <cedric.gavage@unixtech.be>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100833 13f79535-47bb-0310-9956-ffa450edef68

c2a71bf4

Jul 28, 2003

Install config.nice into the build/ directory to make · dfbd508e

Joshua Slive authored Jul 28, 2003

minor version upgrades easier.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100819 13f79535-47bb-0310-9956-ffa450edef68

dfbd508e

allow piped rewrite logs to be relative to serverroot · 067d7e1c

Andre Malo authored Jul 28, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100818 13f79535-47bb-0310-9956-ffa450edef68

067d7e1c

Sync changes with backported patches. · 231c2127

Justin Erenkrantz authored Jul 28, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100807 13f79535-47bb-0310-9956-ffa450edef68

231c2127

Jul 23, 2003

sync · 3d57cab6

Andre Malo authored Jul 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100752 13f79535-47bb-0310-9956-ffa450edef68

3d57cab6

sync · 21c9d289

Andre Malo authored Jul 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100750 13f79535-47bb-0310-9956-ffa450edef68

21c9d289

Jul 22, 2003

Don't attempt to hold all of the response until we're done. We'll pass data on · f8e2e5bc

Justin Erenkrantz authored Jul 22, 2003

when the zlib buffer becomes full and we need to reset the buffer anyway.

Also, tidy up a similar semantic when we see the EOS by returning an error
if ap_pass_brigade gets an error (we'd lose it otherwise).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100730 13f79535-47bb-0310-9956-ffa450edef68

f8e2e5bc

Jul 21, 2003

Fixed a trio of mod include bugs. The first two were · c1f1d9b8

Cliff Woolley authored Jul 21, 2003

reported and investigated by Ron Park on dev@httpd in msgid
<161E04AB9955D54E826FD86360578554D27087@169.32.17.10.nat.cnet.com>;
the third was reported by Kevin Varley in PR 21095.

Bug 1:  An incorrect parameter to bndm() was causing start sequences
        that spanned buckets to drop characters.
Bug 2:  Failed conditional text spanning brigades would cause portions
        of the text that should have been removed to be present anyway.
Bug 3:  Dropped characters when the end sequence spanned an
        8000-byte boundary with MMAP off.

PR: 21095
Submitted by:	Ron Park <ronald.park@cnet.com>, Andr� Malo, Cliff Woolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100728 13f79535-47bb-0310-9956-ffa450edef68

c1f1d9b8

Prevent segfaults after SSL renegotiation failures. · 006872c6

Joe Orton authored Jul 21, 2003

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Set aborted flag
after renegotiation failure.

* modules/ssl/ssl_engine_io.c (ssl_filter_write, ssl_io_filter_output):
Don't dereference BIOs in filter_ctx when filter_ctx->pssl is NULL.
(ssl_filter_io_shutdown): Set aborted flag on abortive shutdown.

PR: 21370
Submitted by: Hartmut Keil <Hartmut.Keil@adnovum.ch>
Cleaned up by: Jeff Trawick, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100720 13f79535-47bb-0310-9956-ffa450edef68

006872c6

reject overlong credentials from the commandline · 59b42e8c

Andre Malo authored Jul 21, 2003

Acked by: Cliff Woolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100718 13f79535-47bb-0310-9956-ffa450edef68

59b42e8c

Jul 16, 2003

· d8e3a94d

Paul J. Reder authored Jul 16, 2003

Just fixing some improperly formatted entries.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100649 13f79535-47bb-0310-9956-ffa450edef68

d8e3a94d

Jul 15, 2003

· 95855a2b

Paul J. Reder authored Jul 15, 2003

Update the header token parsing code to allow LWS between the
token word and the ':' seperator.  [PR 16520]
[submitted: Kris Verbeeck <kris.verbeeck@advalvas.be> and
            Nicel KM <mnicel@yahoo.com>]
[Reviewed: <coad@measurement-factory.com> and
           Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100642 13f79535-47bb-0310-9956-ffa450edef68

95855a2b

· 3481be6d

Paul J. Reder authored Jul 15, 2003

Eliminate creation of a temporary table in ap_get_mime_headers_core()
Submitted by:   Joe Schaefer <joe+gmane@sunstarsys.com>
Reviewed by:    Brian Pane
Backported by:  Paul J. Reder


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100638 13f79535-47bb-0310-9956-ffa450edef68

3481be6d

Ignore RewriteRules in .htaccess files if the directory · c6e61b1d

Andre Malo authored Jul 15, 2003

containing the .htaccess file is requested without a trailing slash.

PR: 20195

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100632 13f79535-47bb-0310-9956-ffa450edef68

c6e61b1d

If a directory contains a file listed in the · 3e2c6972

Andre Malo authored Jul 15, 2003

DirectoryIndex directive, the folder icon is no longer replaced
by the icon of that file.

PR:	9587
Submitted by:	David Shane Holden <dpejesh@yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100628 13f79535-47bb-0310-9956-ffa450edef68

3e2c6972

Jul 14, 2003

strip trailing spaces of groupnames. · 0457c9d6

Andre Malo authored Jul 14, 2003

PR:	12863


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100620 13f79535-47bb-0310-9956-ffa450edef68

0457c9d6

· 872f17a0

Paul J. Reder authored Jul 14, 2003

Remove some extraneous code committed as part of the fix for 13946 pointed
out by Andre Malo. [Paul J. Reder]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100615 13f79535-47bb-0310-9956-ffa450edef68

872f17a0

mod_ssl: Fix a problem setting variables that represent the · c97f0349

Jeff Trawick authored Jul 14, 2003

client certificate chain.

PR:  21371


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100605 13f79535-47bb-0310-9956-ffa450edef68

c97f0349

Remember an authenticated user during internal redirects if the · 4dc16beb

Andre Malo authored Jul 14, 2003

redirection target is not access protected and pass it
to scripts using the REDIRECT_REMOTE_USER environment variable.

PR: 10678, 11602.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100604 13f79535-47bb-0310-9956-ffa450edef68

4dc16beb

· a5aaa65c

Paul J. Reder authored Jul 14, 2003

Ooops, forgot the PR number for my recent mod_rewrite commit (PR #13946)...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100601 13f79535-47bb-0310-9956-ffa450edef68

a5aaa65c

· a6bf1186

Paul J. Reder authored Jul 14, 2003

mod_rewrite: fix a problem in the proxy support of mod_rewrite. The broken
code was inserting multiple "proxy:" fields in the rewritten URIs.
[Submitted by:  Eider Oliveira <eider@bol.com.br>]
[Updated and reviewed by: Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100600 13f79535-47bb-0310-9956-ffa450edef68

a6bf1186

Propagate the handler name to the action script via · 1a0f0edb

Andre Malo authored Jul 14, 2003

the REDIRECT_HANDLER environment variable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100598 13f79535-47bb-0310-9956-ffa450edef68

1a0f0edb

mod_ext_filter: Set additional environment variables for use by · c805df98

Jeff Trawick authored Jul 14, 2003

the external filter.

PR:    20944

The missing code was identified by Andrew Ho, coded/tested by Jeff
Trawick, and verified yet again by Neil Fraser.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100595 13f79535-47bb-0310-9956-ffa450edef68

c805df98

Introduce the "virtual" modifier to the Action directive, · 3521e6f0

Andre Malo authored Jul 14, 2003

which allows the use of handlers for virtual locations.

PR:	8431


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100589 13f79535-47bb-0310-9956-ffa450edef68

3521e6f0

Jul 12, 2003

let mod_speling use the current AcceptPathInfo setting. · 327c3e49

Andre Malo authored Jul 12, 2003

Default is: reject

PR: 21059


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100566 13f79535-47bb-0310-9956-ffa450edef68

327c3e49

sync · 9922f72a

Andre Malo authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100563 13f79535-47bb-0310-9956-ffa450edef68

9922f72a

Jul 09, 2003

Forward port patch for CAN-2003-0192 from 2.0. · cd2c6d3a

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences
of per-directory renegotiations and the SSLCipherSuite directive
being used to upgrade from a weak ciphersuite to a strong one
could result in the weak ciphersuite being used in place of the
strong one. [Ben Laurie]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100518 13f79535-47bb-0310-9956-ffa450edef68

cd2c6d3a

Forward port patch for CAN-2003-0253 from 2.0. · 9bc02aba

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing
temporary denial of service when accept() on a rarely accessed port
returns certain errors.  Reported by Saheed Akhtar
<S.Akhtar@talis.com>.  [Jeff Trawick]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100517 13f79535-47bb-0310-9956-ffa450edef68

9bc02aba

Forward port security patch for CAN-2003-0254 from 2.0. · 46e359cd

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial
of service when target host is IPv6 but proxy server can't create
IPv6 socket.  Fixed by the reporter.  [Yoshioka Tsuneo
<tsuneo.yoshioka@f-secure.com>]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100516 13f79535-47bb-0310-9956-ffa450edef68

46e359cd

Sync CHANGES entry for VU#379828 with 2.0 · 3f91f671

Sander Striker authored Jul 09, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100515 13f79535-47bb-0310-9956-ffa450edef68

3f91f671