Commits · 815174457f949c08d365ef2257b7570e0dda998e · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

08 Oct, 2011 8 commits

Updates. · 81517445

Lucien Gentis authored Oct 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180379 13f79535-47bb-0310-9956-ffa450edef68

81517445

Shut up gcc/glibc warning about ignoring write()'s return value. · 4f540f4a

Stefan Fritsch authored Oct 08, 2011

This may actually fix a real bug in case the error log is directed to a FIFO.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180334 13f79535-47bb-0310-9956-ffa450edef68

4f540f4a

Fix format string bugs in mod_lua. Found by gcc and pointed out by Igor Galic. · 79847a41
Stefan Fritsch authored Oct 08, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180332 13f79535-47bb-0310-9956-ffa450edef68
```
79847a41

Add some CFLAGS in maintainer mode if supported by gcc: · 2befe171

Stefan Fritsch authored Oct 08, 2011

-Wformat
-Wformat-security
-Werror=format-security
-Werror=declaration-after-statement

Add new macro APACHE_ADD_GCC_CFLAGS to do the compatibility check.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180331 13f79535-47bb-0310-9956-ffa450edef68

2befe171

Add another AP_DEBUG_ASSERT to document some assumptions in the code, · 434985f0

Stefan Fritsch authored Oct 08, 2011

for the benefit of code analyzers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180330 13f79535-47bb-0310-9956-ffa450edef68

434985f0

Fix a potential NULL pointer dereference found by clang. · e7a12918

Stefan Fritsch authored Oct 08, 2011

Add a AP_DEBUG_ASSERT to quiet a clang false positive.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180329 13f79535-47bb-0310-9956-ffa450edef68

e7a12918

Downgrade error log messages which accompany a 404 request status from loglevel · 8104f18b

Stefan Fritsch authored Oct 08, 2011

error to info.

List thread at
http://mail-archives.apache.org/mod_mbox/httpd-dev/201110.mbox/%3Calpine.DEB.2.00.1110041948280.664@eru.sfritsch.de%3E

PR: 35768


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180328 13f79535-47bb-0310-9956-ffa450edef68

8104f18b

Sort hooks twice, once before pre_config, once after ap_process_config_tree. · 701c0370

Stefan Fritsch authored Oct 08, 2011

This fixes a regression with perl modules introduced by r1032002

PR: 45076
Submitted by: Torsten Foertsch <torsten foertsch gmx net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180325 13f79535-47bb-0310-9956-ffa450edef68

701c0370

07 Oct, 2011 2 commits

Rebuild doc transformations. · 1feb3eee

Richard Bowen authored Oct 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179914 13f79535-47bb-0310-9956-ffa450edef68

1feb3eee

Refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51967 Clarify · 3bdc4422

Richard Bowen authored Oct 07, 2011

that %h logs the IP address when HostnameLookup is set Off.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179913 13f79535-47bb-0310-9956-ffa450edef68

3bdc4422

06 Oct, 2011 3 commits

re-add "extern" accidentally removed by r1179448 · 7ea8317e

Stefan Fritsch authored Oct 06, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179715 13f79535-47bb-0310-9956-ffa450edef68

7ea8317e

Rebuild doc transform · a0a5a3bd

Richard Bowen authored Oct 06, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179617 13f79535-47bb-0310-9956-ffa450edef68

a0a5a3bd

Patch from Description Mathijs Schmittmann - Corrected syntax for && (vs &)... · 2d3477a1

Richard Bowen authored Oct 06, 2011

Patch from Description Mathijs Schmittmann - Corrected syntax for && (vs &) expression. Refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51976


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179614 13f79535-47bb-0310-9956-ffa450edef68

2d3477a1

05 Oct, 2011 7 commits

Export ap_max_mem_free, needed by r1178079, as pointed out by Gregg L. Smith · 7065098b
Stefan Fritsch authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179448 13f79535-47bb-0310-9956-ffa450edef68
```
7065098b

- `build.sh all` · 163289ae

Joe Orton authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179273 13f79535-47bb-0310-9956-ffa450edef68

163289ae

- add note here in light of CVE-2011-3368 · f8a11311

Joe Orton authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179272 13f79535-47bb-0310-9956-ffa450edef68

f8a11311

- add a security warning, and tweak the example, in light of CVE-2011-3368 · b10aeb17
Joe Orton authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179266 13f79535-47bb-0310-9956-ffa450edef68
```
b10aeb17

SECURITY (CVE-2011-3368): Prevent unintended pattern expansion in some · 2125cb1b

Joe Orton authored Oct 05, 2011

reverse proxy configurations by strictly validating the request-URI:

* server/protocol.c (read_request_line): Send a 400 response if the
  request-URI does not match the grammar from RFC 2616.  This ensures
  the input string for RewriteRule et al really is an absolute path.

Reviewed by: rpluem, wrowe, covener, fielding


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179239 13f79535-47bb-0310-9956-ffa450edef68

2125cb1b

Rebuild html. · a8d4d567

Richard Bowen authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179184 13f79535-47bb-0310-9956-ffa450edef68

a8d4d567

Fix link to Friedl's book. (refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51959) · 58acd380
Richard Bowen authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179179 13f79535-47bb-0310-9956-ffa450edef68
```
58acd380

04 Oct, 2011 2 commits

Add SSLCARevocationCheck directive to default mod_ssl config · 4865b878
Kaspar Brand authored Oct 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178695 13f79535-47bb-0310-9956-ffa450edef68
```
4865b878

fix indentation · 6ad30a0b

Kaspar Brand authored Oct 04, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178694 13f79535-47bb-0310-9956-ffa450edef68

6ad30a0b

03 Oct, 2011 2 commits

Enforce LimitRequestFieldSize after multiple headers with the same · 230803c5

Stefan Fritsch authored Oct 03, 2011

name have been merged.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178566 13f79535-47bb-0310-9956-ffa450edef68

230803c5

TODO note regarding the LimitInternalRecursion error message. · 051e2018
Richard Bowen authored Oct 03, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178523 13f79535-47bb-0310-9956-ffa450edef68
```
051e2018

01 Oct, 2011 3 commits

update xforms · 2a754fe3

Stefan Fritsch authored Oct 01, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178089 13f79535-47bb-0310-9956-ffa450edef68

2a754fe3

grammar fix · 9b0045d5

Stefan Fritsch authored Oct 01, 2011

point to SSLRequire docs


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178088 13f79535-47bb-0310-9956-ffa450edef68

9b0045d5

If MaxMemFree is set, set SSL_MODE_RELEASE_BUFFERS in mod_ssl. · 2fee69e6

Stefan Fritsch authored Oct 01, 2011

Always set SSL_MODE_RELEASE_BUFFERS in ab.

PR: 51618
Submitted by: Cristian Rodríguez <crrodriguez opensuse org>, Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178079 13f79535-47bb-0310-9956-ffa450edef68

2fee69e6

30 Sep, 2011 1 commit

Remove trailing comma on last enum member for authz_status · de741d92

Paul Querna authored Sep 30, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1177497 13f79535-47bb-0310-9956-ffa450edef68

de741d92

29 Sep, 2011 1 commit

Clarify configuration comment. · 46c7ddbe

Rainer Jung authored Sep 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1177210 13f79535-47bb-0310-9956-ffa450edef68

46c7ddbe

28 Sep, 2011 2 commits

In ssl_check_public_cert(), also take dNSNames in the subjectAltName · 0d8b38a8

Kaspar Brand authored Sep 28, 2011

extension into account when checking the cert against the configured
ServerName. PR 32652, PR 47051.

Replace SSL_X509_getCN() by SSL_X509_getIDs(), which returns an array
of a cert's DNS-IDs and CN-IDs (terms as coined by RFC 6125).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176752 13f79535-47bb-0310-9956-ffa450edef68

0d8b38a8

Some NetWare ssl module build tweaks. · d31c40eb

Guenter Knauf authored Sep 28, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176670 13f79535-47bb-0310-9956-ffa450edef68

d31c40eb

26 Sep, 2011 7 commits

Make mod_substitute more efficient: · e38adfbe

Stefan Fritsch authored Sep 26, 2011

- Use varbuf resizable buffer instead of constantly allocating pool
  memory and copying data around. This changes the memory requirement from
  quadratic in ((number of substitutions in line) * (length of line)) to
  linear in (length of line).
- Instead of copying buckets just to append a \0, use new ap_regexec_len()
  function

PR: 50559


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176019 13f79535-47bb-0310-9956-ffa450edef68

e38adfbe

Some varbuf enhancements: · 8e27e800

Stefan Fritsch authored Sep 26, 2011

- Introduce new ap_varbuf_pdup() and ap_varbuf_regsub() functions.
- Fix some bugs in ap_varbuf_strmemcat().
- Make ap_varbuf.buf point to an empty string if no buffer has been allocated,
  yet.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176018 13f79535-47bb-0310-9956-ffa450edef68

8e27e800

Adjust log message to reflect changed behaviour · b66f8dd1

Stefan Fritsch authored Sep 26, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175992 13f79535-47bb-0310-9956-ffa450edef68

b66f8dd1

Put 0- on the fast-track · 379baf08

Jim Jagielski authored Sep 26, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175980 13f79535-47bb-0310-9956-ffa450edef68

379baf08

No longer do double duty... · 6c58ddf0

Jim Jagielski authored Sep 26, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175979 13f79535-47bb-0310-9956-ffa450edef68

6c58ddf0

Final update to SSLProxyMachineCertificateChainFile · 5af8f8a4

Daniel Ruggeri authored Sep 26, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175946 13f79535-47bb-0310-9956-ffa450edef68

5af8f8a4

replace another occurence of X509_NAME_oneline by SSL_X509_NAME_to_string · 68831218
Kaspar Brand authored Sep 26, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175905 13f79535-47bb-0310-9956-ffa450edef68
```
68831218

25 Sep, 2011 2 commits

enable the SNI extension for proxy connections · b6f24a8b

Kaspar Brand authored Sep 25, 2011

to TLS backends (but avoid for pure SSLv2/SSLv3)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175416 13f79535-47bb-0310-9956-ffa450edef68

b6f24a8b

Updates. · bb827fc4

Lucien Gentis authored Sep 25, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175407 13f79535-47bb-0310-9956-ffa450edef68

bb827fc4