Commits · 80dab0849932735f0f8b7e95547345f82c629fcf · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Sep 16, 2009

* server/log.c: Update comment in piped_log structure, now it is · 80dab084

Joe Orton authored Sep 16, 2009

  has been made opaque.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815811 13f79535-47bb-0310-9956-ffa450edef68

80dab084

Just a little additional verbiage for the FallbackResource directive. · 1b181a72
Richard Bowen authored Sep 16, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815782 13f79535-47bb-0310-9956-ffa450edef68
```
1b181a72

* modules/ssl/ssl_util_ocsp.c, modules/ssl/ssl_engine_ocsp.c: · c63ba14c

Joe Orton authored Sep 16, 2009

  Move comment on I/O timeout to appropriate place, thanks to
  Steve Henson.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815741 13f79535-47bb-0310-9956-ffa450edef68

c63ba14c

* modules/ssl/ssl_util_ocsp.c (send_request, · 70d9bc7b

Joe Orton authored Sep 16, 2009

  modssl_dispatch_ocsp_request): Take timeout as argument, as pass through.
  
* modules/ssl/ssl_engine_ocsp.c (verify_ocsp_status): Pass server timeout
  to modssl_dispatch_ocsp_request.

Submitted by: Dr Stephen Henson <shenson oss-institute.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815719 13f79535-47bb-0310-9956-ffa450edef68

70d9bc7b

Sep 15, 2009

Change Fallback to FallbackResource after extensive discussion with · 4682444d

Nick Kew authored Sep 15, 2009

wrowe and DrBacchus.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815502 13f79535-47bb-0310-9956-ffa450edef68

4682444d

simplify reporting of the repeated argument error · eff6e1c0

Jeff Trawick authored Sep 15, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815448 13f79535-47bb-0310-9956-ffa450edef68

eff6e1c0

defined apr_status_t rv one time at entry of ap_core_output_filter() instead of · 988ad79c

Guenter Knauf authored Sep 15, 2009

multiple times within the code which caused compile break every now and then.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815405 13f79535-47bb-0310-9956-ffa450edef68

988ad79c

changed build of proxy modules to use common mod_proxy.imp file. · 83dbfb53
Guenter Knauf authored Sep 15, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815392 13f79535-47bb-0310-9956-ffa450edef68
```
83dbfb53

Change "DefaultHandler" to "Fallback" as discussed on list and · 2d8c34cb

Nick Kew authored Sep 15, 2009

today on IRC, in the hope that everyone will be satisfied.
PR: 47184 + subsequent veto of original directive name

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815380 13f79535-47bb-0310-9956-ffa450edef68

2d8c34cb

respect const-ness of string argument to ap_expr_string() · 4ab8f68e

Jeff Trawick authored Sep 15, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815304 13f79535-47bb-0310-9956-ffa450edef68

4ab8f68e

Sep 14, 2009

* Follow the standard CHANGES format for security changes. · e0424d6b
Ruediger Pluem authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814866 13f79535-47bb-0310-9956-ffa450edef68
```
e0424d6b
Correct attribution for mod_dav options provider interface. · dddc7e2e
Graham Leggett authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814860 13f79535-47bb-0310-9956-ffa450edef68
```
dddc7e2e
* Replace brigade_move with apr_brigade_split_ex as spotted by pquerna. · 7add9b22
Ruediger Pluem authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814854 13f79535-47bb-0310-9956-ffa450edef68
```
7add9b22

Add attribution and CVE notices. · 3f24dca3

Graham Leggett authored Sep 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814850 13f79535-47bb-0310-9956-ffa450edef68

3f24dca3

mod_dav: Allow other modules to add things to the DAV or Allow headers · 41a29e6e

Graham Leggett authored Sep 14, 2009

of an OPTIONS request.
Submitted by: Brian France <brian brianfrance.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814832 13f79535-47bb-0310-9956-ffa450edef68

41a29e6e

* Lower memory usage by reusing the brigade instead of constantly · 63ae0b6f

Ruediger Pluem authored Sep 14, 2009

  recerating one.

Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814807 13f79535-47bb-0310-9956-ffa450edef68

63ae0b6f

* support/htdbm.c (htdbm_list): Fix compiler warning on x86_64. · 83c4dae6

Joe Orton authored Sep 14, 2009

  (the field width must always be passed as an int if using "%.*")


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814792 13f79535-47bb-0310-9956-ffa450edef68

83c4dae6

* modules/proxy/mod_proxy_ftp.c (parse_epsv_reply): Remove redundant · 89694393

Joe Orton authored Sep 14, 2009

check for !p[0], thanks rpluem. Also update to take const argument
and fix comment, since the string is not modified in-place.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814785 13f79535-47bb-0310-9956-ffa450edef68

89694393

htdbm: don't allocate more memory for every record we dump. · 4bffed6a

Daniel Earl Poirier authored Sep 14, 2009

Thanks to Jeff Trawick for flagging this.
Also ensure a space before all dumped comments.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814781 13f79535-47bb-0310-9956-ffa450edef68

4bffed6a

Move declaration to remove a compiler warning. · 65292f5f

Graham Leggett authored Sep 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814779 13f79535-47bb-0310-9956-ffa450edef68

65292f5f

mod_mime: detect invalid use of MultiviewsMatch inside Location and · 0b1033ce

Daniel Earl Poirier authored Sep 14, 2009

LocationMatch sections.  Document that such usage is not valid.
PR47754.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814728 13f79535-47bb-0310-9956-ffa450edef68

0b1033ce

Security fix - this is presumed to fix CVE-2009-3094 (the disclosed · 9881400c

Joe Orton authored Sep 14, 2009

information was limited so this has not been confirmed):

* modules/proxy/mod_proxy_ftp.c (parse_epsv_reply): New function.
  (proxy_ftp_handler): Fix possible NULL pointer deference in
  apr_socket_close(NULL) on error paths.  Fix possible buffer overread
  in EPSV response parser; use parse_epsv_reply instead.  Thanks to
  Jeff Trawick and Stefan Fritsch for analysis of this issue.

Submitted by: Stefan Fritsch <sf fritsch.de>, jorton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814652 13f79535-47bb-0310-9956-ffa450edef68

9881400c

Sep 13, 2009

Bring the LDAPCacheEntries and LDAPOpCacheEntries usage() in synch with · 50324b19

Eric Covener authored Sep 13, 2009

the manual and the implementation (0 and -1 both disable the cache).

PR 40948


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814441 13f79535-47bb-0310-9956-ffa450edef68

50324b19

mod_request: Make sure the KeptBodySize directive rejects values · 4979c0aa

Graham Leggett authored Sep 13, 2009

that aren't valid numbers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814337 13f79535-47bb-0310-9956-ffa450edef68

4979c0aa

Remove trailing whitespace from the mod_request module. · 9f67b81d

Graham Leggett authored Sep 13, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814336 13f79535-47bb-0310-9956-ffa450edef68

9f67b81d

mod_session_crypto: Sanity check should the potentially encrypted · 691b0692

Graham Leggett authored Sep 13, 2009

session cookie be too short.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814334 13f79535-47bb-0310-9956-ffa450edef68

691b0692

mod_session.c: Prevent a segfault when session is added but not · ca7c8b41

Graham Leggett authored Sep 13, 2009

configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814327 13f79535-47bb-0310-9956-ffa450edef68

ca7c8b41

Remove stray trailing whitespace from mod_session.c. · 929e0a12

Graham Leggett authored Sep 13, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814325 13f79535-47bb-0310-9956-ffa450edef68

929e0a12

Bring in support for an arbitrary list of mpms to the RPM spec file · abeb2271

Graham Leggett authored Sep 13, 2009

as per the fedora spec file.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814318 13f79535-47bb-0310-9956-ffa450edef68

abeb2271

Sep 12, 2009

* Add missing , to make it compile again. · c8a63b1c

Ruediger Pluem authored Sep 12, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814114 13f79535-47bb-0310-9956-ffa450edef68

c8a63b1c

* Detab. · 2f0e39a6

Ruediger Pluem authored Sep 12, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814113 13f79535-47bb-0310-9956-ffa450edef68

2f0e39a6

Sep 11, 2009

htcacheclean: 19 ways to fail, 1 error message. Fixed. · 32de8d5c

Graham Leggett authored Sep 11, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814091 13f79535-47bb-0310-9956-ffa450edef68

32de8d5c

Add an RPM init.d script to start the htcacheclean daemon, controlled · fec6e0bf

Graham Leggett authored Sep 11, 2009

by the optional /etc/sysconfig/htcacheclean configuration.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814079 13f79535-47bb-0310-9956-ffa450edef68

fec6e0bf

Catch the somewhat absurd combination of a 417 error where no Expect header · c72809d7
William A. Rowe Jr authored Sep 11, 2009
```
was present.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814048 13f79535-47bb-0310-9956-ffa450edef68
```
c72809d7

Security fix - this is presumed to fix CVE-2009-3095 (the disclosed · 40494782

Joe Orton authored Sep 11, 2009

information was limited so this has not been confirmed):

* modules/proxy/mod_proxy_ftp.c (proxy_ftp_handler): Fail if the
  decoded Basic credentials contain "special" characters.
  Thanks to Stefan Fritsch for analysis of this issue.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814045 13f79535-47bb-0310-9956-ffa450edef68

40494782

Fix the RPM init.d script to correctly take into account the pid file · 15656f6d

Graham Leggett authored Sep 11, 2009

when starting and stopping the server. This prevents the init script
from blowing away other instances of httpd that might be running on the
same machine when someone attempts to stop the server.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813972 13f79535-47bb-0310-9956-ffa450edef68

15656f6d

Sep 10, 2009

Fail server startup when mod_auth_digest is unable to · f8c7ff9c

Daniel Earl Poirier authored Sep 10, 2009

provide the security checks configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813396 13f79535-47bb-0310-9956-ffa450edef68

f8c7ff9c

hrmm · bf7e1c67

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813381 13f79535-47bb-0310-9956-ffa450edef68

bf7e1c67

doccs · 9d6b5385

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813379 13f79535-47bb-0310-9956-ffa450edef68

9d6b5385

veto-ed · 6876e93d

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813376 13f79535-47bb-0310-9956-ffa450edef68

6876e93d