Commits · 7cb04b6449f0c782a884b451de2f9294d233f7bd · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

14 Jul, 2015 1 commit

remove dependency to store.h removed from OpenSSL 1.0.x · 7cb04b64

Gregg L. Smith authored Jul 14, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1691074 13f79535-47bb-0310-9956-ffa450edef68

7cb04b64

13 Jul, 2015 2 commits

Easy vote. · 828b6a41

Yann Ylavic authored Jul 13, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1690841 13f79535-47bb-0310-9956-ffa450edef68

828b6a41

fix silly warning? · 403863e3

Jeff Trawick authored Jul 13, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1690840 13f79535-47bb-0310-9956-ffa450edef68

403863e3

12 Jul, 2015 2 commits

Rebuild. · 07e4f9f0

Lucien Gentis authored Jul 12, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1690460 13f79535-47bb-0310-9956-ffa450edef68

07e4f9f0

XML updates. · 28ed09ae

Lucien Gentis authored Jul 12, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1690459 13f79535-47bb-0310-9956-ffa450edef68

28ed09ae

11 Jul, 2015 2 commits

On to 2.2.31-dev · 9f5ec18d

William A. Rowe Jr authored Jul 11, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1690342 13f79535-47bb-0310-9956-ffa450edef68

9f5ec18d

Prepare to tag 2.2.30 · e8dbb5d6

William A. Rowe Jr authored Jul 11, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1690339 13f79535-47bb-0310-9956-ffa450edef68

e8dbb5d6

08 Jul, 2015 2 commits

Rebuild all of httpd-2.2 docs · 7943237f

William A. Rowe Jr authored Jul 08, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1689891 13f79535-47bb-0310-9956-ffa450edef68

7943237f

Add CHANGES entry for r1678698. · b3e3e23f

Yann Ylavic authored Jul 08, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1689858 13f79535-47bb-0310-9956-ffa450edef68

b3e3e23f

06 Jul, 2015 3 commits

Merge r1688536 and r1688538 from trunk. · 9cc6534f

Yann Ylavic authored Jul 06, 2015

http: follow up to r1686271, also needed in 2.4.x/2.2.x by r1686271/r1687339.
Handle reentrance of state BODY_CHUNK_CR to avoid AH02901 when we eat BWS
from multiple reads.

http: follow up to r1686271.
Be lenient up to 10 (room for 32bit decimals) Bad White Spaces (BWS)
between chunk-size and chunk-ext/CRLF.

Submitted by: ylavic
Reviewed by: ylavic, wrowe, mrumph


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1689522 13f79535-47bb-0310-9956-ffa450edef68

9cc6534f

Vote for http_filters fix · 4823e1d8

Mike Rumph authored Jul 06, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1689519 13f79535-47bb-0310-9956-ffa450edef68

4823e1d8

Vote up one patch across two branches · 08a8538f

William A. Rowe Jr authored Jul 06, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1689397 13f79535-47bb-0310-9956-ffa450edef68

08a8538f

04 Jul, 2015 2 commits

Rebuild. · 59e4db2d

Lucien Gentis authored Jul 04, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1689169 13f79535-47bb-0310-9956-ffa450edef68

59e4db2d

XML update. · 956b4974

Lucien Gentis authored Jul 04, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1689167 13f79535-47bb-0310-9956-ffa450edef68

956b4974

03 Jul, 2015 2 commits

I guess this is also a showstopper in 2.2.x, some framework tests fail without it. · fcea3347
Yann Ylavic authored Jul 03, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688938 13f79535-47bb-0310-9956-ffa450edef68
```
fcea3347

Merge r1688274 from trunk. · 9094d73b

Yann Ylavic authored Jul 03, 2015

http: Fix LimitRequestBody checks when there is no more bytes to read.

Submitted by: Michael Kaufmann <mail michael-kaufmann.ch>
Committed by: ylavic
Reviewed  by: ylavic, mrumph, wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688936 13f79535-47bb-0310-9956-ffa450edef68

9094d73b

02 Jul, 2015 3 commits

Accept patches against showstopper · c9046954

William A. Rowe Jr authored Jul 02, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688902 13f79535-47bb-0310-9956-ffa450edef68

c9046954

Generated doc changes · 21b46dbf

Mike Rumph authored Jul 02, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688767 13f79535-47bb-0310-9956-ffa450edef68

21b46dbf

Grammar, spelling, and other minor corrections · f12e0c88

Mike Rumph authored Jul 02, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688765 13f79535-47bb-0310-9956-ffa450edef68

f12e0c88

01 Jul, 2015 1 commit

Propose follow up to r1686271 (chunk-size parsing) for 2.2.x. · 158cbc02

Yann Ylavic authored Jul 01, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688540 13f79535-47bb-0310-9956-ffa450edef68

158cbc02

30 Jun, 2015 2 commits

Add Bill's fixes to SubstituteInheritBefore proposal. · abd59101

Yann Ylavic authored Jun 30, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688427 13f79535-47bb-0310-9956-ffa450edef68

abd59101

Address wrowe's -1. · d24e9d96

Yann Ylavic authored Jun 30, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688333 13f79535-47bb-0310-9956-ffa450edef68

d24e9d96

29 Jun, 2015 3 commits

This patch is a no-go, will defer to post-2.2.30 · fe5a65da

William A. Rowe Jr authored Jun 29, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688325 13f79535-47bb-0310-9956-ffa450edef68

fe5a65da

Vote for fix to LimitRequestBody · 5056bdae

Mike Rumph authored Jun 29, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688287 13f79535-47bb-0310-9956-ffa450edef68

5056bdae

Propose fix for LimitRequestBody check. · 0255886d

Yann Ylavic authored Jun 29, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1688280 13f79535-47bb-0310-9956-ffa450edef68

0255886d

26 Jun, 2015 2 commits
- Note discarded vote and refer to 2.2.x instead of 2.4.x for the backport. · e27a05b5
  Yann Ylavic authored Jun 26, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1687698 13f79535-47bb-0310-9956-ffa450edef68
```
  e27a05b5
- Update mod_substitute proposal with r1687539 and r1687680, plus the backport patch. · 952296ac
  Yann Ylavic authored Jun 26, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1687697 13f79535-47bb-0310-9956-ffa450edef68
```
  952296ac
25 Jun, 2015 1 commit

Note objection · dcd227a4

William A. Rowe Jr authored Jun 25, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1687664 13f79535-47bb-0310-9956-ffa450edef68

dcd227a4

24 Jun, 2015 4 commits

Merge r1685345, r1685347, r1685349 and r1685350 from trunk. · 46a23c4d

Yann Ylavic authored Jun 24, 2015

core: Allow spaces after chunk-size for compatibility with implementations
using a pre-filled buffer.

Proposed by: ylavic, trawick
Reviewed by: ylavic, wrowe, minfrin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1687339 13f79535-47bb-0310-9956-ffa450edef68

46a23c4d

SECURITY: CVE-2015-3183 (cve.mitre.org) · 29779fd0

Yann Ylavic authored Jun 24, 2015

core: Fix chunk header parsing defect.
Remove apr_brigade_flatten(), buffering and duplicated code from
the HTTP_IN filter, parse chunks in a single pass with zero copy.
Limit accepted chunk-size to 2^63-1 and be strict about chunk-ext
authorized characters.

Submitted by: minfrin, ylavic
Reviewed by: ylavic, wrowe, minfrin
Reported by: regilero <regis.leroy makina-corpus.com>
Backports: 1484852, 1684513


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1687338 13f79535-47bb-0310-9956-ffa450edef68

29779fd0

Votes. · 90e465e3

Graham Leggett authored Jun 24, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1687325 13f79535-47bb-0310-9956-ffa450edef68

90e465e3

Vote and promote. · 33fec7bf

Graham Leggett authored Jun 24, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1687323 13f79535-47bb-0310-9956-ffa450edef68

33fec7bf

18 Jun, 2015 1 commit
- Upvote, clarify that -v6 is applied before -v3 (confusing, yes) · 11ba2a60
  William A. Rowe Jr authored Jun 18, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1686254 13f79535-47bb-0310-9956-ffa450edef68
```
  11ba2a60
17 Jun, 2015 3 commits

Propose same v3 patch as 2.4.x which adjusts CHANGES entry. · 2971adfe

Yann Ylavic authored Jun 17, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1685990 13f79535-47bb-0310-9956-ffa450edef68

2971adfe

Add PR to CHANGES entry. · 02e94d17

Yann Ylavic authored Jun 17, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1685982 13f79535-47bb-0310-9956-ffa450edef68

02e94d17

Propose mod_substitute merge order fix. · 2bdc9243

Yann Ylavic authored Jun 17, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1685978 13f79535-47bb-0310-9956-ffa450edef68

2bdc9243

14 Jun, 2015 1 commit

Propose same fix as of 2.4.14's regression. · 60ecc9cc

Yann Ylavic authored Jun 14, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1685355 13f79535-47bb-0310-9956-ffa450edef68

60ecc9cc

12 Jun, 2015 1 commit

Fix missing lib (.mak was previously updated) · 8862f1bb

William A. Rowe Jr authored Jun 12, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1685125 13f79535-47bb-0310-9956-ffa450edef68

8862f1bb

11 Jun, 2015 1 commit

Adjust IDs. · c1ad4e8d

Yann Ylavic authored Jun 11, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1684821 13f79535-47bb-0310-9956-ffa450edef68

c1ad4e8d

09 Jun, 2015 1 commit

Adjust URL for public consumption · b916f4bc

William A. Rowe Jr authored Jun 09, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1684520 13f79535-47bb-0310-9956-ffa450edef68

b916f4bc