Commits · 62f9304b0253fec959b9064a4fbbde29a86ec184 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

04 Oct, 2002 1 commit

This is worthy of a CVE name, thanks to Joe for the headsup and text · 62f9304b

Mark J. Cox authored Oct 04, 2002

PR:
Obtained from: Joe Orton
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97095 13f79535-47bb-0310-9956-ffa450edef68

62f9304b

03 Oct, 2002 12 commits

moved a warning to the correct section · 377c1a30

Astrid Kessler authored Oct 03, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97092 13f79535-47bb-0310-9956-ffa450edef68

377c1a30

Fix a problem with streaming script output and mod_cgid. We have · 156b9dd0

Jeff Trawick authored Oct 03, 2002

to tell APR that the socket can be treated as a pipe so that the
apr_file_t is initialized properly.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97087 13f79535-47bb-0310-9956-ffa450edef68

156b9dd0

Fixed the import and export lists between authldap and utilldap · 1e8fe32f
Bradley Nicholes authored Oct 03, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97083 13f79535-47bb-0310-9956-ffa450edef68
```
1e8fe32f

· 26e30917

William A. Rowe Jr authored Oct 03, 2002

  Get ready for a potential release this afternoon


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97080 13f79535-47bb-0310-9956-ffa450edef68

26e30917

· b8bfa3ca

William A. Rowe Jr authored Oct 03, 2002

  On to .44


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97074 13f79535-47bb-0310-9956-ffa450edef68

b8bfa3ca

· 79eadf56

William A. Rowe Jr authored Oct 03, 2002

  They are still here, they didn't make it into 2.0.43 however


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97073 13f79535-47bb-0310-9956-ffa450edef68

79eadf56

· d3d0a19b

William A. Rowe Jr authored Oct 03, 2002

  On to the 2.0.43 candidate


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97071 13f79535-47bb-0310-9956-ffa450edef68

d3d0a19b

ok, starting this: turn bogus <em> to <var> · 4ad18bdb

Andre Malo authored Oct 03, 2002

also:
- several markup improvements (I hope)
- remove &nbsp; from c&p examples, because:
  - if you want preformatted text, use <pre>
  - they may lead to invisible errors (\xA0 = &nbsp;
    is not recognized by the config parser as whitespace)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97069 13f79535-47bb-0310-9956-ffa450edef68

4ad18bdb

Add mod_logio to the NetWare project file · 7134f8c0

Bradley Nicholes authored Oct 03, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97068 13f79535-47bb-0310-9956-ffa450edef68

7134f8c0

Don't bother destroying the memory pools and buckets for each thread at · b414eb0a

Bradley Nicholes authored Oct 03, 2002

during shutdown since it will all be cleaned up at termination anyway.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97067 13f79535-47bb-0310-9956-ffa450edef68

b414eb0a

Add mod_logio to the NetWare build · 94133bab

Bradley Nicholes authored Oct 03, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97066 13f79535-47bb-0310-9956-ffa450edef68

94133bab

Add logic to the default_handler to enable script delivery to script · d1581f56

Greg Stein authored Oct 03, 2002

processors located in the output filter stack. This is on by default,
but will change "soon" to off -- the processors will then need to
enable it when they are installed into the filter chain.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97065 13f79535-47bb-0310-9956-ffa450edef68

d1581f56

02 Oct, 2002 6 commits

*) SECURITY: [CAN-2002-0840] HTML-escape the address produced by · deaeb140

William A. Rowe Jr authored Oct 02, 2002

     ap_server_signature() against this cross-site scripting
     vulnerability exposed by the directive 'UseCanonicalName Off'.
     Also HTML-escape the SERVER_NAME environment variable for CGI
     and SSI requests.  It's safe to escape as only the '<', '>',
     and '&' characters are affected, which won't appear in a valid
     hostname.  Reported by Matthew Murphy <mattmurphy@kc.rr.com>.
     [Brian Pane]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97064 13f79535-47bb-0310-9956-ffa450edef68

deaeb140

· f439188f

William A. Rowe Jr authored Oct 02, 2002

Until we have a mechanism to allow PHP and others to 'raise their hand'
and claim 'POST' we have to continue to accept POST in the default
handler. Revert to rev 1.206 per Rbb's and wrowe's veto.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97063 13f79535-47bb-0310-9956-ffa450edef68

f439188f

I can't use England for my generic location anymore! · 45166c67

Mark J. Cox authored Oct 02, 2002

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97062 13f79535-47bb-0310-9956-ffa450edef68

45166c67

· b11bd150

Paul J. Reder authored Oct 02, 2002

Fix a core dump in mod_cache when it attemtped to store uncopyable
buckets. This happened, for instance, when a file to be cached
contained SSI tags to execute a CGI script (passed as a pipe
bucket). [Paul J. Reder]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97058 13f79535-47bb-0310-9956-ffa450edef68

b11bd150

Sander reminded me that this was out of date. · edb96f2e

Ryan Bloom authored Oct 02, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97055 13f79535-47bb-0310-9956-ffa450edef68

edb96f2e

Ensure that output already available is flushed to the network · eaa02495

Jeff Trawick authored Oct 02, 2002

when the content-length filter realizes that no new output will
be available for a while. This helps some streaming CGIs as
well as some other dynamically-generated content.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97054 13f79535-47bb-0310-9956-ffa450edef68

eaa02495

01 Oct, 2002 9 commits

i was born a rambling man... · 9e033fc1

Justin Erenkrantz authored Oct 01, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97050 13f79535-47bb-0310-9956-ffa450edef68

9e033fc1

Fix a mutex problem in mod_ssl session cache support which · 43799666

Jeff Trawick authored Oct 01, 2002

could lead to an infinite loop.

PR:                     12705
Diagnosis submitted by: amund.elstad@ergo.no (Amund Elstad)
Coded by:               Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97048 13f79535-47bb-0310-9956-ffa450edef68

43799666

bleeble blooble blam · 08b5530b

Greg Stein authored Oct 01, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97047 13f79535-47bb-0310-9956-ffa450edef68

08b5530b

Fix bug in the default handler. POST is not allowed on regular files. · 47617c4f

Greg Stein authored Oct 01, 2002

The resource must be handled by something *other* than the default
handler.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97046 13f79535-47bb-0310-9956-ffa450edef68

47617c4f

Some thoughts on file-agnostic Apache. (more thoughts later...) · 3b5a1ad3
Justin Erenkrantz authored Oct 01, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97045 13f79535-47bb-0310-9956-ffa450edef68
```
3b5a1ad3

I'm borderline obsessive compulsive regarding tabs, but you knew that... · 0697bc49

Justin Erenkrantz authored Oct 01, 2002

(Also correct directive usage)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97044 13f79535-47bb-0310-9956-ffa450edef68

0697bc49

added a clarification about separation of proxy functionality and mod_cache; · 8bc1e962

Astrid Kessler authored Oct 01, 2002

added a link to mod_ssl (for proxy directives)

submitted by Irmund Thum <i.t@ithum.de>

with two minor corrections from me


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97043 13f79535-47bb-0310-9956-ffa450edef68

8bc1e962

· ac675d8c

William A. Rowe Jr authored Oct 01, 2002

  Offer more thoughts


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97041 13f79535-47bb-0310-9956-ffa450edef68

ac675d8c

some thoughts on reaching repos-agnostic behavior in apache · 19ee7b76

Greg Stein authored Oct 01, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97040 13f79535-47bb-0310-9956-ffa450edef68

19ee7b76

30 Sep, 2002 12 commits

back out the stuff from mod_ssl that shouldn't have been committed. · 9af2c9ac

Ryan Bloom authored Sep 30, 2002

/me wonders why we have generated content in CVS.    :-(


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97039 13f79535-47bb-0310-9956-ffa450edef68

9af2c9ac

Call out the success cases when we don't get APR_SUCCESS back from the · 6f7e871c

Ryan Bloom authored Sep 30, 2002

network write. All other status codes result in c->aborted being set,
which allows the logs to note that the connection was aborted. Previous
to this patch, if the network cable was unplugged on the client, the server
would get APR_ETIMEUP, but we wouldn't note that the connection was
aborted.

Submitted by: Ryan Morgan <rmorgan@covalent.net>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97038 13f79535-47bb-0310-9956-ffa450edef68

6f7e871c

Update place of work. · 22b2d553

Aaron Bannert authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97035 13f79535-47bb-0310-9956-ffa450edef68

22b2d553

"Make install" would fail for released versions because they do not contain · 443db330

Martin Kraemer authored Sep 30, 2002

CVS directories....

Noticed by Marco Lorig, mlorig at gmx dot net.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97031 13f79535-47bb-0310-9956-ffa450edef68

443db330

Fix typo. · e6d01b47

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97030 13f79535-47bb-0310-9956-ffa450edef68

e6d01b47

New transformations. · 80358d14

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97027 13f79535-47bb-0310-9956-ffa450edef68

80358d14

Fix a broken URL. · fd1f42d6

Cliff Woolley authored Sep 30, 2002

Submitted by:  Sameer Manek <manek@ghur.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97026 13f79535-47bb-0310-9956-ffa450edef68

fd1f42d6

New Japanese translations. · fcc9f9d1

Yoshiki Hayashi authored Sep 30, 2002

Forward port from 1.3.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97025 13f79535-47bb-0310-9956-ffa450edef68

fcc9f9d1

Update transformations. · 25fdf181

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97024 13f79535-47bb-0310-9956-ffa450edef68

25fdf181

Update Japanese translations. · fab76cd1

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97023 13f79535-47bb-0310-9956-ffa450edef68

fab76cd1

New XML. · d0327dd3

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97022 13f79535-47bb-0310-9956-ffa450edef68

d0327dd3

Update transformations. · 3c138ebe

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97020 13f79535-47bb-0310-9956-ffa450edef68

3c138ebe