Commits · 63ae0b6fb58c249f8ec295561f8f5f06bf6aade7 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

14 Sep, 2009 2 commits

* Lower memory usage by reusing the brigade instead of constantly · 63ae0b6f

Ruediger Pluem authored Sep 14, 2009

  recerating one.

Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814807 13f79535-47bb-0310-9956-ffa450edef68

63ae0b6f

mod_mime: detect invalid use of MultiviewsMatch inside Location and · 0b1033ce

Daniel Earl Poirier authored Sep 14, 2009

LocationMatch sections.  Document that such usage is not valid.
PR47754.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814728 13f79535-47bb-0310-9956-ffa450edef68

0b1033ce

13 Sep, 2009 3 commits

mod_request: Make sure the KeptBodySize directive rejects values · 4979c0aa

Graham Leggett authored Sep 13, 2009

that aren't valid numbers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814337 13f79535-47bb-0310-9956-ffa450edef68

4979c0aa

mod_session_crypto: Sanity check should the potentially encrypted · 691b0692

Graham Leggett authored Sep 13, 2009

session cookie be too short.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814334 13f79535-47bb-0310-9956-ffa450edef68

691b0692

mod_session.c: Prevent a segfault when session is added but not · ca7c8b41

Graham Leggett authored Sep 13, 2009

configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814327 13f79535-47bb-0310-9956-ffa450edef68

ca7c8b41

11 Sep, 2009 1 commit

htcacheclean: 19 ways to fail, 1 error message. Fixed. · 32de8d5c

Graham Leggett authored Sep 11, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814091 13f79535-47bb-0310-9956-ffa450edef68

32de8d5c

10 Sep, 2009 2 commits

Fail server startup when mod_auth_digest is unable to · f8c7ff9c

Daniel Earl Poirier authored Sep 10, 2009

provide the security checks configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813396 13f79535-47bb-0310-9956-ffa450edef68

f8c7ff9c

veto-ed · 6876e93d

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813376 13f79535-47bb-0310-9956-ffa450edef68

6876e93d

09 Sep, 2009 3 commits

mod_proxy_connect: The connect method doesn't work if the client is · 34aeb912

Graham Leggett authored Sep 09, 2009

connecting to the apache proxy through an ssl socket. Fixed.
PR: 29744.
Submitted by: Brad Boyer, Mark Cave-Ayland, Julian Gilbey, Fabrice Durand,
David Gence, Tim Dodge, Per Gunnar Hans, Emmanuel Elango, Kevin Croft,
Rudolf Cardinal


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813178 13f79535-47bb-0310-9956-ffa450edef68

34aeb912

mod_ssl: The error message when SSLCertificateFile is missing should at · e92fef18

Graham Leggett authored Sep 09, 2009

least give the name or position of the problematic virtual host definition.
[Stefan Fritsch sf sfritsch.de]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813105 13f79535-47bb-0310-9956-ffa450edef68

e92fef18

mod_auth_digest: When qop is none, client doesn't send nonce count, · b3706dc4

Daniel Earl Poirier authored Sep 09, 2009

but module was segfaulting trying to check the nonce count anyway.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@812934 13f79535-47bb-0310-9956-ffa450edef68

b3706dc4

06 Sep, 2009 1 commit

Add support for HTTP PUT to ab. · eba65d27

Graham Leggett authored Sep 06, 2009

Submiited by: Jeff Barnes <jbarnesweb yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@811806 13f79535-47bb-0310-9956-ffa450edef68

eba65d27

28 Aug, 2009 2 commits

And additional ServerTokens improvement... · 62541784

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808965 13f79535-47bb-0310-9956-ffa450edef68

62541784

OK, might as well finish this... Allow ServerTokens Off · 15f0f61c

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808895 13f79535-47bb-0310-9956-ffa450edef68

15f0f61c

27 Aug, 2009 1 commit

mod_headers: generalise the envclause to support conditional · 71bdb2b8

Nick Kew authored Aug 27, 2009

header rules via ap_expr.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808240 13f79535-47bb-0310-9956-ffa450edef68

71bdb2b8

26 Aug, 2009 2 commits

mod_cache: Introduce the thundering herd lock, a mechanism to keep · 39034684

Graham Leggett authored Aug 26, 2009

the flood of requests at bay that strike a backend webserver as
a cached entity goes stale.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808212 13f79535-47bb-0310-9956-ffa450edef68

39034684

Fix shm, rmm, and lock problems. · c2d772c3

Daniel Earl Poirier authored Aug 26, 2009

PR: 16057


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808150 13f79535-47bb-0310-9956-ffa450edef68

c2d772c3

23 Aug, 2009 2 commits

Preserve port over internal redirection · b8a218f6

Nick Kew authored Aug 23, 2009

PR#35999
A four-year-old buglet!


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@807015 13f79535-47bb-0310-9956-ffa450edef68

b8a218f6

Return consistent error status for proxy unable to connect · 6680ce39

Nick Kew authored Aug 23, 2009

PR 46971


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@806920 13f79535-47bb-0310-9956-ffa450edef68

6680ce39

16 Aug, 2009 1 commit

* Do better checking of pollset operations in various places to avoid segfaults. · 5b09c5da

Ruediger Pluem authored Aug 16, 2009

PR: 46467
Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@804764 13f79535-47bb-0310-9956-ffa450edef68

5b09c5da

12 Aug, 2009 1 commit

* Correctly create an empty cell if the description for a file is missing. · 512f915c

Ruediger Pluem authored Aug 12, 2009

PR: 47682
Submitted by: Peter Poeml <poeml suse.de>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@803704 13f79535-47bb-0310-9956-ffa450edef68

512f915c

29 Jul, 2009 1 commit

ab: Fix broken error messages after resolver or connect() failures. · 1dc7bd6c

Jeff Trawick authored Jul 29, 2009

The APR error code was truncated because ab used an incorrect data
type.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@798943 13f79535-47bb-0310-9956-ffa450edef68

1dc7bd6c

24 Jul, 2009 1 commit

htdbm: Fix possible buffer overflow if dbm database has very · f8a8f3c5

Daniel Earl Poirier authored Jul 24, 2009

long values.  PR 30586 [Dan Poirier]

PR 30586
Reported by: Ulf Harnhammar, Swedish IT Incident Centre


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@797563 13f79535-47bb-0310-9956-ffa450edef68

f8a8f3c5

09 Jul, 2009 1 commit

* Return APR_EOF if request body is shorter than the length announced by the · a52bf4f4

Ruediger Pluem authored Jul 09, 2009

  client.

PR: 33098
Submitted by: Stefan Fritsch <sf sfritsch.de>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@792409 13f79535-47bb-0310-9956-ffa450edef68

a52bf4f4

05 Jul, 2009 1 commit

Correctly set suexec_enabled when httpd is run by non-root · 3cd0c3b1

Nick Kew authored Jul 05, 2009

PR 42175


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@791337 13f79535-47bb-0310-9956-ffa450edef68

3cd0c3b1

02 Jul, 2009 1 commit

Security fix for CVE-2009-1890: · 4685944e

Joe Orton authored Jul 02, 2009

* modules/proxy/mod_proxy_http.c (stream_reqbody_cl): Specify the base
  passed to apr_strtoff, and validate the Content-Length in the same
  way the HTTP_IN filter does.  If the number of bytes streamed
  exceeds the expected body length, bail out of the loop.

Submitted by: niq, jorton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@790587 13f79535-47bb-0310-9956-ffa450edef68

4685944e

23 Jun, 2009 1 commit

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_dn_rec): Map · def0588e

Joe Orton authored Jun 23, 2009

  the _UID variable to NID_userId, where defined by OpenSSL.

PR: 45107
Submitted by: Michael Ströder <michael stroeder.com>,
     Peter Sylvester <peter.sylvester edelweb.fr>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@787683 13f79535-47bb-0310-9956-ffa450edef68

def0588e

17 Jun, 2009 2 commits

mod_proxy_http: fix case sensitivity checking transfer encoding · fa70d245

Nick Kew authored Jun 17, 2009

PR 47383 [Ryuzo Yamamoto]



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@785661 13f79535-47bb-0310-9956-ffa450edef68

fa70d245

mod_alias: Ensure Redirect issues a valid URL · 04889aa0

Nick Kew authored Jun 17, 2009

PR 44020
Patch by Håkon Stordahl


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@785575 13f79535-47bb-0310-9956-ffa450edef68

04889aa0

16 Jun, 2009 1 commit

Add DefaultHandler directive to mod_dir. · 0d0ae994

Nick Kew authored Jun 16, 2009

PR 47184


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@785425 13f79535-47bb-0310-9956-ffa450edef68

0d0ae994

11 Jun, 2009 2 commits

* Close the listening Unix socket of the mod_cgid daemon in the CGI scripts. · 1ae8a736

Ruediger Pluem authored Jun 11, 2009

PR: 47335
Submitted by: Kornél Pál <kornelpal gmail.com>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@783740 13f79535-47bb-0310-9956-ffa450edef68

1ae8a736

* Remove locking for writing to the rewritelog. There seems to be no reason · a63e6517

Ruediger Pluem authored Jun 11, 2009

  why locking is required here.
  See also: http://marc.info/?l=apache-httpd-dev&m=124282193217344&w=2

PR: 46942
Submitted by:  Dan Poirier <poirier pobox.com>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@783734 13f79535-47bb-0310-9956-ffa450edef68

a63e6517

01 Jun, 2009 1 commit

Fix error with arg counting · 00490ac6

Jim Jagielski authored Jun 01, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@780648 13f79535-47bb-0310-9956-ffa450edef68

00490ac6

27 May, 2009 1 commit

mod_alias: Enforce sanity in args to Redirect · 1955f737

Nick Kew authored May 27, 2009

PR 44729


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@778942 13f79535-47bb-0310-9956-ffa450edef68

1955f737

25 May, 2009 1 commit

Fix IPv6 literal addresses passed to a proxied backend. · d41b15cb

Nick Kew authored May 25, 2009

PR 47211
Patch by Carlos Garcia Braschi


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@778531 13f79535-47bb-0310-9956-ffa450edef68

d41b15cb

21 May, 2009 1 commit

* Add CacheIgnoreURLSessionIdentifiers directive to ignore · 6257dd8b

Ruediger Pluem authored May 21, 2009

  defined session identifiers encoded in the URL when caching.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@777042 13f79535-47bb-0310-9956-ffa450edef68

6257dd8b

19 May, 2009 1 commit

Fix the error string returned by RewriteRule. RewriteRule returned... · 309eb8a6

Takashi Sato authored May 19, 2009

Fix the error string returned by RewriteRule. RewriteRule returned "RewriteCond: bad flag delimiters" when the 3rd argument of RewriteRule was not started with "[" or not ended with "]".

PR: 45082
Submitted by: Vitaly Polonetsky <m_vitaly topixoft.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@776325 13f79535-47bb-0310-9956-ffa450edef68

309eb8a6

14 May, 2009 2 commits

Revert second part of r774755. · cab02774

Rainer Jung authored May 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@774888 13f79535-47bb-0310-9956-ffa450edef68

cab02774

Allow relative pathnames for piped loggers in ErrorLog. · 950efc88

Rainer Jung authored May 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@774755 13f79535-47bb-0310-9956-ffa450edef68

950efc88

06 May, 2009 1 commit

Fix usage message on the Windows platform. · fa851e0a

Rainer Jung authored May 06, 2009

- do not include graceful commands and duplicate
  start|restart|stop
- add ServerRoot to the parameters encapsulated by "-n"


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@772356 13f79535-47bb-0310-9956-ffa450edef68

fa851e0a