Skip to content
  1. Oct 10, 2016
    • Evgeny Kotkov's avatar
      mod_dav: Fix a potential cause of unbounded memory usage or incorrect · 7d24a821
      Evgeny Kotkov authored
      behavior in a routine that sends <DAV:response>'s to the output filters.
      
      The dav_send_one_response() function accepts the current head of the output
      filter list as an argument, but the actual head can change between calls to
      ap_pass_brigade().  This can happen with self-removing filters, e.g., with
      the filter from mod_headers or mod_deflate.  Consequently, executing an
      already removed filter can either cause unwanted memory usage or incorrect
      behavior.
      
      This patch changes the signature of the existing mod_dav's public API,
      dav_send_one_response(), because this API is not yet a part of any 2.4.x
      release.
      
      * modules/dav/main/mod_dav.c
        (dav_send_one_response): Accept a request_rec instead of an ap_filter_t.
         Write the response to r->output_filters.
        (dav_send_multistatus, dav_stream_response): Update these calling sites
         of dav_send_one_response().
      
      * modules/dav/main/mod_dav.h
        (dav_send_one_response): Adjust definition.
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1764040 13f79535-47bb-0310-9956-ffa450edef68
      7d24a821
  2. Oct 09, 2016
  3. Oct 08, 2016
  4. Oct 07, 2016
  5. Oct 06, 2016
  6. Oct 04, 2016
  7. Oct 03, 2016
  8. Oct 01, 2016
  9. Sep 29, 2016
  10. Sep 28, 2016
  11. Sep 27, 2016
  12. Sep 24, 2016
  13. Sep 23, 2016
  14. Sep 21, 2016
  15. Sep 20, 2016
  16. Sep 19, 2016