Commits · 629458a8f07228529bd4410f14cadac198f0232f · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Nov 07, 2011

Check return value of ap_pregsub() · 629458a8

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198948 13f79535-47bb-0310-9956-ffa450edef68

629458a8

Fix integer overflow in ap_pregsub. This can be triggered e.g. · d265c519

Stefan Fritsch authored Nov 07, 2011

with mod_setenvif via a malicious .htaccess

CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198940 13f79535-47bb-0310-9956-ffa450edef68

d265c519

No need to zero memory that we will overwrite anyway · 845d5ca0

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198934 13f79535-47bb-0310-9956-ffa450edef68

845d5ca0

Only init the RNG once at startup. This saves some entropy and works around the APR bug · 5e59fd7b
Stefan Fritsch authored Nov 07, 2011
```
fixed in r1198921


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198930 13f79535-47bb-0310-9956-ffa450edef68
```
5e59fd7b

Also do length check if the last line is not LF terminated · 0874bc73

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198926 13f79535-47bb-0310-9956-ffa450edef68

0874bc73

s/IP6/IPv6/ · afa44b08

Jeff Trawick authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198904 13f79535-47bb-0310-9956-ffa450edef68

afa44b08

Call apr_random_after_fork() manually in the child processes because the MPMs · 5df04ac9

Stefan Fritsch authored Nov 07, 2011

use plain fork() and not apr_proc_fork().
Also add some workaround for APR not changing the RNG state in the parent.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198868 13f79535-47bb-0310-9956-ffa450edef68

5df04ac9

Nov 05, 2011

quick handlers and translate_name in lua can't be keyed off · cea182f3

Eric Covener authored Nov 05, 2011

Directory/Filename/htaccess



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197853 13f79535-47bb-0310-9956-ffa450edef68

cea182f3

provide ap_escape_html as r:escape_html() · f1708c33

Eric Covener authored Nov 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197838 13f79535-47bb-0310-9956-ffa450edef68

f1708c33

remove unneeded dependency to mod_proxy_html · 84fba766

Gregg Lewis Smith authored Nov 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197832 13f79535-47bb-0310-9956-ffa450edef68

84fba766

re-add apr_pool_clear accidentally removed in r1197405 · 0101bbb8

Stefan Fritsch authored Nov 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197830 13f79535-47bb-0310-9956-ffa450edef68

0101bbb8

Remove some copy and paste remnants, no libaprutil in APR2 · d82ec67e
Gregg Lewis Smith authored Nov 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197829 13f79535-47bb-0310-9956-ffa450edef68
```
d82ec67e

Nov 04, 2011

get the hello world of Handlers working again · 03b91cb7

Eric Covener authored Nov 04, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197782 13f79535-47bb-0310-9956-ffa450edef68

03b91cb7

Update transforms · 5df68a5c

Stefan Fritsch authored Nov 04, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197414 13f79535-47bb-0310-9956-ffa450edef68

5df68a5c

Unify syntax of config directives taking an expression as optional contition argument · feec1c1f
Stefan Fritsch authored Nov 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197413 13f79535-47bb-0310-9956-ffa450edef68
```
feec1c1f
To prevent overboarding memory usage, limit line length to 1MB · 3b58006e
Stefan Fritsch authored Nov 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197405 13f79535-47bb-0310-9956-ffa450edef68
```
3b58006e

Nov 03, 2011

Improve detection of libxml2 · 48d4e48c

Stefan Fritsch authored Nov 03, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1196955 13f79535-47bb-0310-9956-ffa450edef68

48d4e48c

Modify placement of PROXY_DECLARE_DATA to fix build problems with MSVC, · ad272db3

Stefan Fritsch authored Nov 03, 2011

reported by Gregg L. Smith


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1196946 13f79535-47bb-0310-9956-ffa450edef68

ad272db3

Somehow missed in r1196876 · 5d481e3b

Gregg Lewis Smith authored Nov 03, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1196883 13f79535-47bb-0310-9956-ffa450edef68

5d481e3b

Added proxy_html and xml2enc to Windows build · 2c12f3f8

Gregg Lewis Smith authored Nov 03, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1196876 13f79535-47bb-0310-9956-ffa450edef68

2c12f3f8

Oct 30, 2011

add new properties/constants · 4cc42219

Eric Covener authored Oct 30, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195173 13f79535-47bb-0310-9956-ffa450edef68

4cc42219

make r.handler and r.proxyreq readable too · 099845bb

Eric Covener authored Oct 30, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195172 13f79535-47bb-0310-9956-ffa450edef68

099845bb

add constants for PROXYREQ_* to the apache2 global, allow r.proxyreq and · 4c142f3d

Eric Covener authored Oct 30, 2011

r.handler to be writable.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195168 13f79535-47bb-0310-9956-ffa450edef68

4c142f3d

alphabetize writable lua properties and use strcmp() for the oddball that's · 7c975f0d

Eric Covener authored Oct 30, 2011

just testing quality of "user".



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195167 13f79535-47bb-0310-9956-ffa450edef68

7c975f0d

Updates. · 3dffac23

Lucien Gentis authored Oct 30, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195155 13f79535-47bb-0310-9956-ffa450edef68

3dffac23

Oct 29, 2011

Reverted r1194896. · 5cfe43c2

Guenter Knauf authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195057 13f79535-47bb-0310-9956-ffa450edef68

5cfe43c2

r.args can be written · 5d5e95a9

Eric Covener authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1195007 13f79535-47bb-0310-9956-ffa450edef68

5d5e95a9

make r.args read/write for rewrite refugees. · 91a211f4

Eric Covener authored Oct 29, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194997 13f79535-47bb-0310-9956-ffa450edef68

91a211f4

Some NetWare build tweaks. · 16ae8b2a

Guenter Knauf authored Oct 29, 2011

Added check for APR_HAS_LDAP; renamed some build vars.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194967 13f79535-47bb-0310-9956-ffa450edef68

16ae8b2a

Removed prototype which had no implementation. · 63088103

Guenter Knauf authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194940 13f79535-47bb-0310-9956-ffa450edef68

63088103

Fixed NetWare build check for APU_HAVE_CRYPTO. · 7c519a19

Guenter Knauf authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194935 13f79535-47bb-0310-9956-ffa450edef68

7c519a19

Added check for APU_HAVE_CRYPTO to NetWare build. · 3d55db9b

Guenter Knauf authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194930 13f79535-47bb-0310-9956-ffa450edef68

3d55db9b

Remove magic numbers; ensure that an invalid nmatch is corrected · e601b598

Jim Jagielski authored Oct 29, 2011

tagged

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194912 13f79535-47bb-0310-9956-ffa450edef68

e601b598

Some NetWare build tweaks: generate proxy import list. · dd4d728b

Guenter Knauf authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194896 13f79535-47bb-0310-9956-ffa450edef68

dd4d728b

Some NetWare build tweaks: removed obsolete include paths. · 7784e188

Guenter Knauf authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194893 13f79535-47bb-0310-9956-ffa450edef68

7784e188

Added proxy_html and xml2enc to NetWare build. · 34cfcab8

Guenter Knauf authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194885 13f79535-47bb-0310-9956-ffa450edef68

34cfcab8

Update transformations. · 360ec0d1

Graham Leggett authored Oct 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194876 13f79535-47bb-0310-9956-ffa450edef68

360ec0d1

mod_include: Add support for application/x-www-form-urlencoded encoding · e06f408a

Graham Leggett authored Oct 29, 2011

and decoding.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194870 13f79535-47bb-0310-9956-ffa450edef68

e06f408a

Oct 27, 2011

Improve handling of maxlen = APR_SIZE_MAX, noticed by Jim. · 6cf82fb0

Stefan Fritsch authored Oct 27, 2011

Use apr_pregsub_ex() and maxlen = 0 for unlimited in mod_substitute.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1189985 13f79535-47bb-0310-9956-ffa450edef68

6cf82fb0

XSLT transformation · eaad1e18

Richard Bowen authored Oct 27, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1189743 13f79535-47bb-0310-9956-ffa450edef68

eaad1e18