Commits · 5e4c304312be657b988f9282f10ced4dea4f6ec7 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Nov 08, 2011

mod_lua: Expose SSL variables via r:ssl_var_lookup() · 5e4c3043

Eric Covener authored Nov 08, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199056 13f79535-47bb-0310-9956-ffa450edef68

5e4c3043

We still have to pass the dependency check to APACHE_MODULE to ensure · 4e6394a9

Stefan Fritsch authored Nov 08, 2011

that mod_session_crypto is disabled with --enable-mods-shared=reallyall


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199046 13f79535-47bb-0310-9956-ffa450edef68

4e6394a9

allow some lua hooks to be run in "early" or "late" mode · 417e0348

Eric Covener authored Nov 08, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199031 13f79535-47bb-0310-9956-ffa450edef68

417e0348

correct return val, the char* is pushed on the lua stack. · d6280acf

Eric Covener authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199028 13f79535-47bb-0310-9956-ffa450edef68

d6280acf

By default, only load those modules that are either required · a4dca8ee

Stefan Fritsch authored Nov 08, 2011

or explicitly selected by a configure --enable-foo argument. The
LoadModule statements for modules enabled by --enable-mods-shared=most
and friends will be commented out.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199027 13f79535-47bb-0310-9956-ffa450edef68

a4dca8ee

Nov 07, 2011

Solaris doesn't support "test -e" in combination · 1ba5f0bc

Rainer Jung authored Nov 07, 2011

with "sh". We use "-f" in all other places.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199021 13f79535-47bb-0310-9956-ffa450edef68

1ba5f0bc

Link the modules that use it against the XML library so the server will start. · ce5fd44b
Sander Temme authored Nov 07, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199019 13f79535-47bb-0310-9956-ffa450edef68
```
ce5fd44b

Remove ProxyHTMLLogVerbose in favor of trace loglevels · cbe20e53

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198995 13f79535-47bb-0310-9956-ffa450edef68

cbe20e53

if mod_session_crypto prereq isn't available, don't bail if · 1f179f81

Jeff Trawick authored Nov 07, 2011

the module was enabled implicitly


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198989 13f79535-47bb-0310-9956-ffa450edef68

1f179f81

More error checking for ap_pregsub · 24601f82

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198988 13f79535-47bb-0310-9956-ffa450edef68

24601f82

auto var verbose not used · 9347ea24

Jeff Trawick authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198975 13f79535-47bb-0310-9956-ffa450edef68

9347ea24

remove solved Windows AcceptFilter blocker · 620cf6cd

Stefan Fritsch authored Nov 07, 2011

add mod_lua blocker


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198968 13f79535-47bb-0310-9956-ffa450edef68

620cf6cd

More ap_pregsub error checking/logging · bd5a7e9c

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198966 13f79535-47bb-0310-9956-ffa450edef68

bd5a7e9c

More checks of ap_pregsub return values · c69f8dbf

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198959 13f79535-47bb-0310-9956-ffa450edef68

c69f8dbf

Check return value of ap_pregsub() · 629458a8

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198948 13f79535-47bb-0310-9956-ffa450edef68

629458a8

Fix integer overflow in ap_pregsub. This can be triggered e.g. · d265c519

Stefan Fritsch authored Nov 07, 2011

with mod_setenvif via a malicious .htaccess

CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198940 13f79535-47bb-0310-9956-ffa450edef68

d265c519

No need to zero memory that we will overwrite anyway · 845d5ca0

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198934 13f79535-47bb-0310-9956-ffa450edef68

845d5ca0

Only init the RNG once at startup. This saves some entropy and works around the APR bug · 5e59fd7b
Stefan Fritsch authored Nov 07, 2011
```
fixed in r1198921


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198930 13f79535-47bb-0310-9956-ffa450edef68
```
5e59fd7b

Also do length check if the last line is not LF terminated · 0874bc73

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198926 13f79535-47bb-0310-9956-ffa450edef68

0874bc73

s/IP6/IPv6/ · afa44b08

Jeff Trawick authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198904 13f79535-47bb-0310-9956-ffa450edef68

afa44b08

Call apr_random_after_fork() manually in the child processes because the MPMs · 5df04ac9

Stefan Fritsch authored Nov 07, 2011

use plain fork() and not apr_proc_fork().
Also add some workaround for APR not changing the RNG state in the parent.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198868 13f79535-47bb-0310-9956-ffa450edef68

5df04ac9

Nov 05, 2011

quick handlers and translate_name in lua can't be keyed off · cea182f3

Eric Covener authored Nov 05, 2011

Directory/Filename/htaccess



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197853 13f79535-47bb-0310-9956-ffa450edef68

cea182f3

provide ap_escape_html as r:escape_html() · f1708c33

Eric Covener authored Nov 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197838 13f79535-47bb-0310-9956-ffa450edef68

f1708c33

remove unneeded dependency to mod_proxy_html · 84fba766

Gregg Lewis Smith authored Nov 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197832 13f79535-47bb-0310-9956-ffa450edef68

84fba766

re-add apr_pool_clear accidentally removed in r1197405 · 0101bbb8

Stefan Fritsch authored Nov 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197830 13f79535-47bb-0310-9956-ffa450edef68

0101bbb8

Remove some copy and paste remnants, no libaprutil in APR2 · d82ec67e
Gregg Lewis Smith authored Nov 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197829 13f79535-47bb-0310-9956-ffa450edef68
```
d82ec67e

Nov 04, 2011

get the hello world of Handlers working again · 03b91cb7

Eric Covener authored Nov 04, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197782 13f79535-47bb-0310-9956-ffa450edef68

03b91cb7

Update transforms · 5df68a5c

Stefan Fritsch authored Nov 04, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197414 13f79535-47bb-0310-9956-ffa450edef68

5df68a5c

Unify syntax of config directives taking an expression as optional contition argument · feec1c1f
Stefan Fritsch authored Nov 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197413 13f79535-47bb-0310-9956-ffa450edef68
```
feec1c1f
To prevent overboarding memory usage, limit line length to 1MB · 3b58006e
Stefan Fritsch authored Nov 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197405 13f79535-47bb-0310-9956-ffa450edef68
```
3b58006e

Nov 03, 2011

Improve detection of libxml2 · 48d4e48c

Stefan Fritsch authored Nov 03, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1196955 13f79535-47bb-0310-9956-ffa450edef68

48d4e48c

Modify placement of PROXY_DECLARE_DATA to fix build problems with MSVC, · ad272db3

Stefan Fritsch authored Nov 03, 2011

reported by Gregg L. Smith


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1196946 13f79535-47bb-0310-9956-ffa450edef68

ad272db3

Somehow missed in r1196876 · 5d481e3b

Gregg Lewis Smith authored Nov 03, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1196883 13f79535-47bb-0310-9956-ffa450edef68

5d481e3b

Added proxy_html and xml2enc to Windows build · 2c12f3f8

Gregg Lewis Smith authored Nov 03, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1196876 13f79535-47bb-0310-9956-ffa450edef68

2c12f3f8

Oct 30, 2011

add new properties/constants · 4cc42219

Eric Covener authored Oct 30, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195173 13f79535-47bb-0310-9956-ffa450edef68

4cc42219

make r.handler and r.proxyreq readable too · 099845bb

Eric Covener authored Oct 30, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195172 13f79535-47bb-0310-9956-ffa450edef68

099845bb

add constants for PROXYREQ_* to the apache2 global, allow r.proxyreq and · 4c142f3d

Eric Covener authored Oct 30, 2011

r.handler to be writable.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195168 13f79535-47bb-0310-9956-ffa450edef68

4c142f3d

alphabetize writable lua properties and use strcmp() for the oddball that's · 7c975f0d

Eric Covener authored Oct 30, 2011

just testing quality of "user".



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195167 13f79535-47bb-0310-9956-ffa450edef68

7c975f0d

Updates. · 3dffac23

Lucien Gentis authored Oct 30, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195155 13f79535-47bb-0310-9956-ffa450edef68

3dffac23

Oct 29, 2011

Reverted r1194896. · 5cfe43c2

Guenter Knauf authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195057 13f79535-47bb-0310-9956-ffa450edef68

5cfe43c2