Commits · 676ef8127d5ca6ac7a3413ba3d0854602c7f4aa6 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Jan 12, 2004

use the UNSAFE designation for unescaped errorlogs · d8099534

Andre Malo authored Jan 12, 2004

Submitted by: Geoffrey Young, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102306 13f79535-47bb-0310-9956-ffa450edef68

d8099534

make REMOTE_PORT available · 1e596673

Andre Malo authored Jan 12, 2004

PR: 25772


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102304 13f79535-47bb-0310-9956-ffa450edef68

1e596673

allow unescaped errorlogs via compile time switch · 1118993c

Andre Malo authored Jan 12, 2004

Submitted by: Geoffrey Young <geoff modperlcookbook.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102302 13f79535-47bb-0310-9956-ffa450edef68

1118993c

sync with 2.0.49-dev · d617611a

Jeff Trawick authored Jan 12, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102298 13f79535-47bb-0310-9956-ffa450edef68

d617611a

sync · 299dc9b6

Andre Malo authored Jan 12, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102293 13f79535-47bb-0310-9956-ffa450edef68

299dc9b6

Synch with 2.0 branch. · 43c28882

Joe Orton authored Jan 12, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102291 13f79535-47bb-0310-9956-ffa450edef68

43c28882

sync · b60b6058

Andre Malo authored Jan 12, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102280 13f79535-47bb-0310-9956-ffa450edef68

b60b6058

Jan 09, 2004

mod_proxy hangs when both KeepAlive and ProxyErrorOverride are enabled, · 6a563f02

Bill Stoddard authored Jan 09, 2004

and a non-200 response without a body is generated by the backend
server.

Submitted by: Graham Wiseman, Richard Reiner
Reviewed by: Richard Reiner, Bill Stoddard


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102239 13f79535-47bb-0310-9956-ffa450edef68

6a563f02

Jan 08, 2004

Add support to mod_ssl for a distributed session cache using · 8dfdaf79

Joe Orton authored Jan 08, 2004

distcache.

* LAYOUT: Update for removal of scache_shmht and addition of scache_dc.

* modules/ssl/config.m4: Check for libdistcache; build ssl_scache_dc.lo.

* modules/ssl/mod_ssl.dsp: Build ssl_scache_dc (with luck).

* modules/ssl/mod_ssl.h: Add SSL_SCMODE_DC and scache_dc_* prototypes.

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLSessionCache): Allow
use of dc: argument.

* modules/ssl/ssl_scache_dc.c: New file.

* modules/ssl/ssl_scache.c (ssl_scache_init, ssl_scache_kill,
ssl_scache_store, ssl_scache_retrieve, ssl_scache_remove,
ssl_ext_status_hook): Hook into scache_dc.

Submitted by: Geoff Thorpe <geoff@geoffthorpe.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102227 13f79535-47bb-0310-9956-ffa450edef68

8dfdaf79

Add some brackets. · 9a7275f9

Joe Orton authored Jan 08, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102225 13f79535-47bb-0310-9956-ffa450edef68

9a7275f9

* modules/dav/main/mod_dav.c (dav_handler): Reject request if the · edb3c3f7

Joe Orton authored Jan 08, 2004

Request-URI includes a fragment part, i.e. an unescaped #.

PR: 21779
Submitted by: Amit Athavale <amit_athavale@lycos.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102224 13f79535-47bb-0310-9956-ffa450edef68

edb3c3f7

Jan 07, 2004

· e76763d7

Paul J. Reder authored Jan 07, 2004

Synching with 2.0 branch after backport.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102211 13f79535-47bb-0310-9956-ffa450edef68

e76763d7

Jan 01, 2004

Add forensic logging. · f2092f16

Ben Laurie authored Jan 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102141 13f79535-47bb-0310-9956-ffa450edef68

f2092f16

Dec 27, 2003

sync with stable branch · 7a94b459

Jeff Trawick authored Dec 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102126 13f79535-47bb-0310-9956-ffa450edef68

7a94b459

Sync with 2.0.49-dev · 745b39c5

Justin Erenkrantz authored Dec 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102122 13f79535-47bb-0310-9956-ffa450edef68

745b39c5

Dec 18, 2003

Fix segfault in mod_mem_cache when caching streaming dynamic content. · d9b5bff6

Bill Stoddard authored Dec 18, 2003

PR: 21285, 21287


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102086 13f79535-47bb-0310-9956-ffa450edef68

d9b5bff6

Add Polish translation of error messages. · 083e7615

Jeff Trawick authored Dec 18, 2003

PR:             25101
Submitted by:	Tomasz Kepczynski <tomek jot23.org>
Reviewed by:	Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102085 13f79535-47bb-0310-9956-ffa450edef68

083e7615

Dec 15, 2003

mod_proxy with ProxyErrorOverride On in a reverse-proxy configuration attaches · d7707762

Ian Holsman authored Dec 15, 2003

a body to the 302 response and a wrong Content-Length header.


PR: 22951
Submitted by:	Ermanno Scaglione <scaglione ..at.. starnetone.de>
Reviewed by:	Blaise Tarr <blaise.tarr .. at .. cnet.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102069 13f79535-47bb-0310-9956-ffa450edef68

d7707762

Allow retention of header fields on non-200 responses · ec27e7c1

Ken Coar authored Dec 15, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102068 13f79535-47bb-0310-9956-ffa450edef68

ec27e7c1

Dec 14, 2003

sync · 74ac46b4

Andre Malo authored Dec 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102060 13f79535-47bb-0310-9956-ffa450edef68

74ac46b4

sync with stable branch · 399db922

Jeff Trawick authored Dec 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102052 13f79535-47bb-0310-9956-ffa450edef68

399db922

Dec 13, 2003

Fix some piped log problems: bogus "piped log program '(null)' · a9125080

Jeff Trawick authored Dec 13, 2003

failed" messages during restart and problem with the logger
respawning again after Apache is stopped.

PR:                21648, 24805


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102048 13f79535-47bb-0310-9956-ffa450edef68

a9125080

Dec 12, 2003

· 76abc32e

Paul J. Reder authored Dec 12, 2003

  *) Add a hook (insert_error_filter) to allow filters to re-insert
     themselves during processing of error responses. Enable mod_expires
     to use the new hook to include Expires headers in valid error
     responses. This addresses an RFC violation. It fixes PRs 19794,
     24884, and 25123. [Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102038 13f79535-47bb-0310-9956-ffa450edef68

76abc32e

Dec 11, 2003

Win32: Tweak MaxMemFree patch. Allocate ptrans specifying pchild · 3d58f96b

Bill Stoddard authored Dec 11, 2003

as the parent pool as we did prior to the MaxMemFree patch.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102025 13f79535-47bb-0310-9956-ffa450edef68

3d58f96b

Dec 10, 2003

Fix <Limit> and <LimitExcept> parsing to require a closing '>' · 9d8c1a54

Jeff Trawick authored Dec 10, 2003

in the initial container.

PR:                25414
Submitted by:	   Geoffrey Young <geoff apache.org>]
Reviewed by:	   Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102021 13f79535-47bb-0310-9956-ffa450edef68

9d8c1a54

Fix memory leak in handling of request bodies during reverse · 3cdc793b

Jeff Trawick authored Dec 10, 2003

proxy operations.

PR:      24991
Submitted by: Larry Toppi <larry.toppi citrix.com>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102017 13f79535-47bb-0310-9956-ffa450edef68

3cdc793b

· a7bcbb32

Paul J. Reder authored Dec 10, 2003

Synching with 2.0 branch after backport.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102016 13f79535-47bb-0310-9956-ffa450edef68

a7bcbb32

backported to 2.0.49 · 4af9c2cb

Stas Bekman authored Dec 10, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102011 13f79535-47bb-0310-9956-ffa450edef68

4af9c2cb

update the misconfigured INCLUDES skipping code to remove itself, so it'd complain · 7960b7ed

Stas Bekman authored Dec 10, 2003

only once
PR:
Obtained from:
Submitted by:
Reviewed by:	Jeff Trawick, Bill Rowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102005 13f79535-47bb-0310-9956-ffa450edef68

7960b7ed

Dec 09, 2003

complain via error_log when mod_include's INCLUDES filter is · 5c17d775

Stas Bekman authored Dec 09, 2003

     enabled, but the relevant Options flag allowing the filter to run
     for the specific resource wasn't set, so that the filter won't
     silently get skipped.
PR:
Obtained from:
Submitted by:
Reviewed by:	nd


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101999 13f79535-47bb-0310-9956-ffa450edef68

5c17d775

Dec 04, 2003

sync with APACHE_2_0_BRANCH · 09b85c15

Jeff Trawick authored Dec 04, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101983 13f79535-47bb-0310-9956-ffa450edef68

09b85c15

Clean up httpd -V output: Instead of displaying the MPM source · 26f3fbe5

Jeff Trawick authored Dec 04, 2003

directory, display the MPM name and some MPM properties.

Submitted by: Geoffrey Young <geoff apache.org>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101978 13f79535-47bb-0310-9956-ffa450edef68

26f3fbe5

Dec 02, 2003

sunny but frigid today in charlottesville... · 4e0451f2

Cliff Woolley authored Dec 02, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101959 13f79535-47bb-0310-9956-ffa450edef68

4e0451f2

Synch with 2.0 branch. · ff2c9532

Joe Orton authored Dec 02, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101956 13f79535-47bb-0310-9956-ffa450edef68

ff2c9532

Nov 26, 2003

Add fatal exception hook for use by debug modules. The hook is only · 5ead11c9

Jeff Trawick authored Nov 26, 2003

available if the --enable-exception-hook configure parm is used.

Sample users at http://httpd.apache.org/~trawick/exception_hook.html

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101899 13f79535-47bb-0310-9956-ffa450edef68

5ead11c9

Nov 25, 2003

· 2b048c5b

Paul J. Reder authored Nov 25, 2003

Sync with APACHE_2_0_BRANCH.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101891 13f79535-47bb-0310-9956-ffa450edef68

2b048c5b

Extend mod_status output to include SSL session cache status · c0125084

Joe Orton authored Nov 25, 2003

information:

* modules/ssl/mod_ssl.c (ssl_hook_pre_config): Call
ssl_scache_status_register.

* modules/ssl/ssl_scache.c (ssl_scache_status): Removed function.
(ssl_ext_status_hook): Renamed from ssl_ext_ms_display: switch to
2.1's mod_status "status_hook" API.
(ssl_scache_status_register): Register optional hook.

* modules/ssl/ssl_scache_dbm.c (ssl_scache_dbm_status): Adjust to use
new API.

* modules/ssl/ssl_scache_shmcb.c (ssl_scache_shmcb_status): Adjust
to use new API.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101889 13f79535-47bb-0310-9956-ffa450edef68

c0125084

Remove shmht session cache in favour of shmcb; shmht has had · b62df8d2

Joe Orton authored Nov 25, 2003

data corruption bugs since being apr_rmm'ified.

* config.m4, mod_ssl.dsp: Don't build ssl_util_table and
ssl_scache_shmht.

* ssl_util_table.h, ssl_util_table.c, ssl_scache_shmht.c: Removed
files.

* mod_ssl.h (SSLModConfigRec): Use a void * pointer for storing
the scache-specific data.

* ssl_engine_config.c (ssl_cmd_SSLSessionCache): Treat shmht: as
shmcb:.

* ssl_scache.c: Remove shmht hooks throughout.

* ssl_scache_shmcb.c: Remove casts to use the table_t * pointer as a
void *.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101888 13f79535-47bb-0310-9956-ffa450edef68

b62df8d2

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_version): · 29af1821

Joe Orton authored Nov 25, 2003

Determine the library version string at run-time rather than at
compile-time.

Submitted by: Eric Seidel <eseidel@apple.com>
PR: 23956


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101879 13f79535-47bb-0310-9956-ffa450edef68

29af1821

Nov 24, 2003

SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the · 88f26135

Andre Malo authored Nov 24, 2003

errorlog.

Reviewed by: Mark J Cox


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101873 13f79535-47bb-0310-9956-ffa450edef68

88f26135