Commits · 835d25c8da177bdd384e79a7da6b6440fcb05c57 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

08 Nov, 2011 22 commits

Regenerated style files after simplified chinese fix. · 835d25c8

Rainer Jung authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199486 13f79535-47bb-0310-9956-ffa450edef68

835d25c8

Change def timeout from a nasty 5 mins to a more reasonable 1min · 899619ab
Jim Jagielski authored Nov 08, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199485 13f79535-47bb-0310-9956-ffa450edef68
```
899619ab

Add "reallyall" and --enable-load-all-modules to · 9a588d75

Rainer Jung authored Nov 08, 2011

docs. Clarify LoadModule activation status.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199481 13f79535-47bb-0310-9956-ffa450edef68

9a588d75

Fix XML validation errors. · 47ce0591

Rainer Jung authored Nov 08, 2011

Order matters.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199479 13f79535-47bb-0310-9956-ffa450edef68

47ce0591

Fix docs generation for simplified chinese. · b42eac8a

Rainer Jung authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199478 13f79535-47bb-0310-9956-ffa450edef68

b42eac8a

Load all modules in the generated default configuration · f09019ed

Rainer Jung authored Nov 08, 2011

when using --enable-load-all-modules with configure.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199467 13f79535-47bb-0310-9956-ffa450edef68

f09019ed

update xforms · fc2043ec

Stefan Fritsch authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199448 13f79535-47bb-0310-9956-ffa450edef68

fc2043ec

mod_reqtimeout: Change the default to set some reasonable timeout values if loaded · 3aba51cf
Stefan Fritsch authored Nov 08, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199447 13f79535-47bb-0310-9956-ffa450edef68
```
3aba51cf

Don't send a 500 if there is a timeout · ef3e0183

Stefan Fritsch authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199444 13f79535-47bb-0310-9956-ffa450edef68

ef3e0183

Silence compiler warning about signedness differences. · f46efc95

Rainer Jung authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199435 13f79535-47bb-0310-9956-ffa450edef68

f46efc95

Fix make variable reference. · bcad459d

Rainer Jung authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199423 13f79535-47bb-0310-9956-ffa450edef68

bcad459d

Fix up some length limit calculation · f6a5685a

Stefan Fritsch authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199410 13f79535-47bb-0310-9956-ffa450edef68

f6a5685a

update xforms · cf0e26ae

Stefan Fritsch authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199088 13f79535-47bb-0310-9956-ffa450edef68

cf0e26ae

Change default FileETag to be "size mtime", i.e. remove the inode. Adjust the · ba86234a

Stefan Fritsch authored Nov 08, 2011

etag generation in mod_dav_fs to the new default.

PR 49623.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199086 13f79535-47bb-0310-9956-ffa450edef68

ba86234a

Point to list of undocumented modules in the docs subdirectory · 8ce4fb88
Sander Temme authored Nov 08, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199064 13f79535-47bb-0310-9956-ffa450edef68
```
8ce4fb88

add info about new early/late arguments and a note about · c2b45d73

Eric Covener authored Nov 08, 2011

the directives whose context is limited.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199063 13f79535-47bb-0310-9956-ffa450edef68

c2b45d73

Add some comments and another line length check · c36941d6

Stefan Fritsch authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199060 13f79535-47bb-0310-9956-ffa450edef68

c36941d6

mod_lua: Expose SSL variables via r:ssl_var_lookup() · 5e4c3043

Eric Covener authored Nov 08, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199056 13f79535-47bb-0310-9956-ffa450edef68

5e4c3043

We still have to pass the dependency check to APACHE_MODULE to ensure · 4e6394a9

Stefan Fritsch authored Nov 08, 2011

that mod_session_crypto is disabled with --enable-mods-shared=reallyall


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199046 13f79535-47bb-0310-9956-ffa450edef68

4e6394a9

allow some lua hooks to be run in "early" or "late" mode · 417e0348

Eric Covener authored Nov 08, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199031 13f79535-47bb-0310-9956-ffa450edef68

417e0348

correct return val, the char* is pushed on the lua stack. · d6280acf

Eric Covener authored Nov 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199028 13f79535-47bb-0310-9956-ffa450edef68

d6280acf

By default, only load those modules that are either required · a4dca8ee

Stefan Fritsch authored Nov 08, 2011

or explicitly selected by a configure --enable-foo argument. The
LoadModule statements for modules enabled by --enable-mods-shared=most
and friends will be commented out.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199027 13f79535-47bb-0310-9956-ffa450edef68

a4dca8ee

07 Nov, 2011 16 commits

Solaris doesn't support "test -e" in combination · 1ba5f0bc

Rainer Jung authored Nov 07, 2011

with "sh". We use "-f" in all other places.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199021 13f79535-47bb-0310-9956-ffa450edef68

1ba5f0bc

Link the modules that use it against the XML library so the server will start. · ce5fd44b
Sander Temme authored Nov 07, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199019 13f79535-47bb-0310-9956-ffa450edef68
```
ce5fd44b

Remove ProxyHTMLLogVerbose in favor of trace loglevels · cbe20e53

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198995 13f79535-47bb-0310-9956-ffa450edef68

cbe20e53

if mod_session_crypto prereq isn't available, don't bail if · 1f179f81

Jeff Trawick authored Nov 07, 2011

the module was enabled implicitly


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198989 13f79535-47bb-0310-9956-ffa450edef68

1f179f81

More error checking for ap_pregsub · 24601f82

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198988 13f79535-47bb-0310-9956-ffa450edef68

24601f82

auto var verbose not used · 9347ea24

Jeff Trawick authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198975 13f79535-47bb-0310-9956-ffa450edef68

9347ea24

remove solved Windows AcceptFilter blocker · 620cf6cd

Stefan Fritsch authored Nov 07, 2011

add mod_lua blocker


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198968 13f79535-47bb-0310-9956-ffa450edef68

620cf6cd

More ap_pregsub error checking/logging · bd5a7e9c

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198966 13f79535-47bb-0310-9956-ffa450edef68

bd5a7e9c

More checks of ap_pregsub return values · c69f8dbf

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198959 13f79535-47bb-0310-9956-ffa450edef68

c69f8dbf

Check return value of ap_pregsub() · 629458a8

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198948 13f79535-47bb-0310-9956-ffa450edef68

629458a8

Fix integer overflow in ap_pregsub. This can be triggered e.g. · d265c519

Stefan Fritsch authored Nov 07, 2011

with mod_setenvif via a malicious .htaccess

CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198940 13f79535-47bb-0310-9956-ffa450edef68

d265c519

No need to zero memory that we will overwrite anyway · 845d5ca0

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198934 13f79535-47bb-0310-9956-ffa450edef68

845d5ca0

Only init the RNG once at startup. This saves some entropy and works around the APR bug · 5e59fd7b
Stefan Fritsch authored Nov 07, 2011
```
fixed in r1198921


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198930 13f79535-47bb-0310-9956-ffa450edef68
```
5e59fd7b

Also do length check if the last line is not LF terminated · 0874bc73

Stefan Fritsch authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198926 13f79535-47bb-0310-9956-ffa450edef68

0874bc73

s/IP6/IPv6/ · afa44b08

Jeff Trawick authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198904 13f79535-47bb-0310-9956-ffa450edef68

afa44b08

Call apr_random_after_fork() manually in the child processes because the MPMs · 5df04ac9

Stefan Fritsch authored Nov 07, 2011

use plain fork() and not apr_proc_fork().
Also add some workaround for APR not changing the RNG state in the parent.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198868 13f79535-47bb-0310-9956-ffa450edef68

5df04ac9

05 Nov, 2011 2 commits

quick handlers and translate_name in lua can't be keyed off · cea182f3

Eric Covener authored Nov 05, 2011

Directory/Filename/htaccess



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197853 13f79535-47bb-0310-9956-ffa450edef68

cea182f3

provide ap_escape_html as r:escape_html() · f1708c33

Eric Covener authored Nov 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197838 13f79535-47bb-0310-9956-ffa450edef68

f1708c33