Commits · 684388d3e4c38b7406dcd581c978ab658247de44 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Jan 02, 2008

Ruediger Pluem authored Jan 02, 2008


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@608070 13f79535-47bb-0310-9956-ffa450edef68

684388d3

* These are now backported. · f631711e

Ruediger Pluem authored Jan 02, 2008


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@608063 13f79535-47bb-0310-9956-ffa450edef68

f631711e

Jan 01, 2008

backported in 607929. · 18cd8eda

Eric Covener authored Jan 01, 2008


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607930 13f79535-47bb-0310-9956-ffa450edef68

18cd8eda

Modified default refresh value to 10 secs so that its possible to correct a typo. · 0c23f651
Guenter Knauf authored Jan 01, 2008
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607873 13f79535-47bb-0310-9956-ffa450edef68
```
0c23f651

Review comments from Ruediger on r607766: · e4c85712

Eric Covener authored Jan 01, 2008

  Don't allow the ldap calls to be evaluated (twice) in the macro


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607841 13f79535-47bb-0310-9956-ffa450edef68

e4c85712

* Avoid SEGFAULT as hooks->set_headers can be NULL. Furthermore do not set the · 42a66622

Ruediger Pluem authored Jan 01, 2008

ETag header permanently as setting it may not be desired for all responses.

Submitted by: niq, rpluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607838 13f79535-47bb-0310-9956-ffa450edef68

42a66622

Dec 31, 2007

When using the MS SDK, re-establish LDAP backend connections on a · b71d0a9b

Eric Covener authored Dec 31, 2007

return code of LDAP_UNAVAILABLE as if it were LDAP_SERVER_DOWN.

With this SDK, LDAP_UNAVAIALBLE is returned when the socket had been closed 
between LDAP API calls.

PR 39095



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607766 13f79535-47bb-0310-9956-ffa450edef68

b71d0a9b

updated NetWare OpenSSL build section. · 6824b14e

Guenter Knauf authored Dec 31, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607759 13f79535-47bb-0310-9956-ffa450edef68

6824b14e

fixed comment, added comment, added logic to build mod_ssl by default if USE_STDSOCKETS is defined. · 3e56a7a7
Guenter Knauf authored Dec 31, 2007
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607756 13f79535-47bb-0310-9956-ffa450edef68
```
3e56a7a7

Close the child_exit_event which lives only for the scope · 8ce2fbf7

William A. Rowe Jr authored Dec 31, 2007

of master_main and was orphaned on each soft or fatal restart.

PR: 40932 
Submitted by: Jeff Robbins <jeffr livedata.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607677 13f79535-47bb-0310-9956-ffa450edef68

8ce2fbf7

On win32, we must never, never close the parent's copy of the · c722f249

William A. Rowe Jr authored Dec 31, 2007

child's read end for a reliable piped logger. The child runs
and manages it's own logs, and even if the parent did instead,
the mpm would be adjusted to pass down the child write ends
without read ends to the pipes, so this forever makes no sense.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607666 13f79535-47bb-0310-9956-ffa450edef68

c722f249

Introduce the ProxyFtpDirCharset directive, allowing the administrator · 2f913fa1

William A. Rowe Jr authored Dec 31, 2007

to identify a default, or specific servers or paths which list their
contents in other-than ISO-8859-1 charset (e.g. utf-8).

Submitted by: Ruediger Pluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607638 13f79535-47bb-0310-9956-ffa450edef68

2f913fa1

Dec 30, 2007
- Updated to show "It Works!" as opposed to old, 1.3 style welcome page · 6609d26e
  Tony Stevenson authored Dec 30, 2007
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607611 13f79535-47bb-0310-9956-ffa450edef68
```
  6609d26e
Dec 29, 2007

* Style police. No functional changes. · 7b0cc017

Ruediger Pluem authored Dec 29, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607472 13f79535-47bb-0310-9956-ffa450edef68

7b0cc017

mod_dav: Fix evaluation of If-Match * and If-None-Match * conditionals. · 561a3bc9

Nick Kew authored Dec 29, 2007

PR 38034
Patch by Paritosh Shah
Explanation by Werner Baumann


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607466 13f79535-47bb-0310-9956-ffa450edef68

561a3bc9

* Change loglevel from ERROR to WARNING if the renaming of the vary, headers · 93843bf2

Ruediger Pluem authored Dec 29, 2007

  or data file fails.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607440 13f79535-47bb-0310-9956-ffa450edef68

93843bf2

* Update transformation · 5e4362b4

Ruediger Pluem authored Dec 29, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607439 13f79535-47bb-0310-9956-ffa450edef68

5e4362b4

* Adjust etag generation to produce identical results on 32-bit and 64-bit · 483258ad

Ruediger Pluem authored Dec 29, 2007

  platforms and avoid a regression with conditional PUT's on lock and etag.

  Add a warning to the documentation of FileETAG that changes of the ETAG
  format can cause conditionals to fail on mod_dav_fs provided backends.

PR: 44152
Submitted by: Michael Clark <michael metaparadigm.com>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607437 13f79535-47bb-0310-9956-ffa450edef68

483258ad

added empty line after var declaration. · c6d2b2fc

Guenter Knauf authored Dec 29, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607425 13f79535-47bb-0310-9956-ffa450edef68

c6d2b2fc

fixed code style, missing prototype warnings, disabled init for proxy, removed obsolete cast. · 8c425a73
Guenter Knauf authored Dec 29, 2007
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607420 13f79535-47bb-0310-9956-ffa450edef68
```
8c425a73

* Added missing CVE number · 6c7d80d3

Ruediger Pluem authored Dec 29, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607403 13f79535-47bb-0310-9956-ffa450edef68

6c7d80d3

* Added missing CVE number · c7752700

Ruediger Pluem authored Dec 29, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607402 13f79535-47bb-0310-9956-ffa450edef68

c7752700

Fix winnt bucket_alloc to borrow memory from the transaction · df7c6a6a

William A. Rowe Jr authored Dec 29, 2007

pool, instead of exhausting pchild memory over a number of
connections.

PR: 11427
Submitted by: Alex Varju <alex varju.ca>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607393 13f79535-47bb-0310-9956-ffa450edef68

df7c6a6a

Sander pointed out to me that as we added ENGINE logic support · 33a46c14

William A. Rowe Jr authored Dec 29, 2007

for 0.9.8, we never touched win32. Resolve this for all of the
common win32 HAVE SSL related macros building against 0.9.8.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607383 13f79535-47bb-0310-9956-ffa450edef68

33a46c14

It turns out copy concat didn't work as I expected, · 30ddfb47

William A. Rowe Jr authored Dec 29, 2007

it does concat to the first named file, but not the
first filepath.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607371 13f79535-47bb-0310-9956-ffa450edef68

30ddfb47

Avoid build directory pollution · ca9c80d1

William A. Rowe Jr authored Dec 29, 2007

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607369 13f79535-47bb-0310-9956-ffa450edef68

ca9c80d1

Believe this or not, not every machine uses "C:\Documents and Settings", · 2b24cc59

William A. Rowe Jr authored Dec 29, 2007

split off the current user's name from USERPROFILE envvar.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607367 13f79535-47bb-0310-9956-ffa450edef68

2b24cc59

Dec 28, 2007

Win32 doesn't like \t# · c295009a

William A. Rowe Jr authored Dec 28, 2007

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607319 13f79535-47bb-0310-9956-ffa450edef68

c295009a

Add a placeholder to remind us that fcgistarter.exe, once · 69a69d7f

William A. Rowe Jr authored Dec 28, 2007

an implemention exists for apr_proc_create, needs to be added
to the build/install schema.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607316 13f79535-47bb-0310-9956-ffa450edef68

69a69d7f

* Ensure refresh parameter is numeric to prevent a possible XSS attack caused · 0d32dc95

Ruediger Pluem authored Dec 28, 2007

  by redirecting to other URLs. Reported by SecurityReason.

Submitted by: Mark Cox, Joe Orton
Reviewed by: security@httpd.apache.org


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607282 13f79535-47bb-0310-9956-ffa450edef68

0d32dc95

* Fix CHANGES wording for r606693. · 42da2d46

Ruediger Pluem authored Dec 28, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607276 13f79535-47bb-0310-9956-ffa450edef68

42da2d46

* Correctly escape the worker route and the worker redirect string in the HTML · 26e37ff4

Ruediger Pluem authored Dec 28, 2007

  output of the balancer manager.

Reported by SecurityReason.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607275 13f79535-47bb-0310-9956-ffa450edef68

26e37ff4

* Prevent crash in balancer manager if invalid balancer name is passed as · 69905a57
Ruediger Pluem authored Dec 28, 2007
```
  parameter.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607273 13f79535-47bb-0310-9956-ffa450edef68
```
69905a57

* Make loglevel consistent for similar situations. As this really should not · 531ac105

Ruediger Pluem authored Dec 28, 2007

  happen set it to error.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607245 13f79535-47bb-0310-9956-ffa450edef68

531ac105

PR 39727: Fixup ETag handling in mod deflate (updated following extensive · 531aa1f0

Nick Kew authored Dec 28, 2007

discussion on-list).
This is not a full-and-final fix, because we don't ourselves do anything
useful with these ETags. But at least we're no longer screwing up clients.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607219 13f79535-47bb-0310-9956-ffa450edef68

531aa1f0

Fix typo in error message (noticed by gryzor on IRC) · 2b1553bc

Nick Kew authored Dec 28, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@607145 13f79535-47bb-0310-9956-ffa450edef68

2b1553bc

Dec 25, 2007

Enable to configure the https port - missing pieces. · dd26ca19

Guenter Knauf authored Dec 25, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@606806 13f79535-47bb-0310-9956-ffa450edef68

dd26ca19

* Revert to old behaviour: Even if we detect a bad character: Formally decode · 97ee35c9

Ruediger Pluem authored Dec 25, 2007

string correctly and do not mess up the string. Let the caller decide what
it wants to do with the result according to our return code.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@606776 13f79535-47bb-0310-9956-ffa450edef68

97ee35c9

Dec 24, 2007

As per PR 43890. Fixed location paths to point to /usr/local/apache2/bin/ · 971d13ff
Tony Stevenson authored Dec 24, 2007
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@606748 13f79535-47bb-0310-9956-ffa450edef68
```
971d13ff

* Set character set for HTML outputs generated by mod_ldap, · 843bc0ee

Ruediger Pluem authored Dec 24, 2007

  mod_proxy_balancer, mod_proxy_ftp, mod_info, mod_dav without a character
  set to ISO-8859-1.

Submitted by: jorton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@606693 13f79535-47bb-0310-9956-ffa450edef68

843bc0ee