git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86304 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86303 13f79535-47bb-0310-9956-ffa450edef68

If the result of a RewriteRule is a filename that contains expansion
specifiers, especially regexp backreferences $0..$9 and %0..%9, then it
may be possible for an attacker to access any file on the web server.
The fix replaces a multi-pass string expander with a one-pass expander,
and includes the code quality improvements that were committed separately
to 1.3.

Message-Id: <E13OQB5-0004Xs-00@hand.dotat.at>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86302 13f79535-47bb-0310-9956-ffa450edef68

but it is an improvement over the previous implementation.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86298 13f79535-47bb-0310-9956-ffa450edef68

implemented) format.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86294 13f79535-47bb-0310-9956-ffa450edef68

Note 1: Only needed for BSD/OS.
Note 2: Invent better heuristic (timestamp checks for build/*.mk).
Note 3: Conversion is currently one-way
Note 4: Don't package on BSD/OS.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86284 13f79535-47bb-0310-9956-ffa450edef68

only *subsequent* filters from the original request are inherited.
Previously, *all* filters from the original request were inherited.

Currently, any filter which runs a subrequest should do the same
thing (though a cleaner interface may be appropriate.)

With this change, subrequests are properly filtered much more often.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86283 13f79535-47bb-0310-9956-ffa450edef68

systems have unsigned sockaddr len parameters; others have signed.
When passing the length by address (as to accept()) a warning is
generated if the sign is not correct.

This patch assumes that, if no native socklen_t is provided,
apr_socklen_t is always signed; that can be easily tweaked for
certain platforms later.

Inside APR, apr_socklen_t is only used currently in the Unix
implementation.
Submitted by:	Victor J. Orlikowski <v.j.orlikowski@gte.net>
Reviewed by:	Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86282 13f79535-47bb-0310-9956-ffa450edef68

noted in this commit. Thanks Jeff!


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86281 13f79535-47bb-0310-9956-ffa450edef68

syntax.  Oh well.)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86280 13f79535-47bb-0310-9956-ffa450edef68

across the buckets internally.  This gets rid of a compile warning
but doesn't change the behavior.
Inspired by: "Victor J. Orlikowski" <v.j.orlikowski@gte.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86279 13f79535-47bb-0310-9956-ffa450edef68

of apr_sendfile(). Modify ap_send_fd() to use the new file bucket.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86278 13f79535-47bb-0310-9956-ffa450edef68

send_parsed_content() needs to see the new brigade representing the
rest of the content.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86270 13f79535-47bb-0310-9956-ffa450edef68

     Overhaul of dbmmanage to allow a groups arg (as in Apache 1.2)
     as well as a comment arg to the add, adduser and update cmds.
     update allows the user to clear or preserve pw/groups/comment.
     Fixed a bug in dbmmanage that prevented the check option from
     parsing a password followed by :group... text.  Corrected the
     seed calcualation for Win32 systems, and added -lsdbm support.
     PR: 3810, 5527


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86268 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86266 13f79535-47bb-0310-9956-ffa450edef68

uninitialized tree pointer was passed to ap_build_config().


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86265 13f79535-47bb-0310-9956-ffa450edef68

  Correct dbmmanage pwfile check behavior to ignore [:grp...] contents.
  Also add SDBM_File for -lsdbm.

PR:             4695
Submitted by:	arnez@raleigh.ibm.com
Reviewed by:	wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86264 13f79535-47bb-0310-9956-ffa450edef68

  Never carried forward from 1.3.13

PR:             4973
Submitted by:	Andrew McRae <andrew@liquid.com>
Reviewed by:	Ralf S. Engelschall


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86262 13f79535-47bb-0310-9956-ffa450edef68

  could be bad - no dav here yet

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86261 13f79535-47bb-0310-9956-ffa450edef68

(No, this doesn't get mod_info to compile...  No, I'm not working
on mod_info...  I happened to notice the bad call so I fixed it.)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86260 13f79535-47bb-0310-9956-ffa450edef68

  Transposed return values between conditions, oops.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86258 13f79535-47bb-0310-9956-ffa450edef68

  Get mod_auth_dbm building using Apache's sdbmlib under WinNT.

  Bad conditional... need a better test to determine if we are using sdbm.

  Also - consistify linkage for expat-lite/sdmb to the same model as all
  the modules (no more nasty "conflicting linkage, use /nodefaultlib" msg.)

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86257 13f79535-47bb-0310-9956-ffa450edef68

list.  We start over with only core_filter just like a fresh request.
Processing of the new URI will determine what filters (if any) are
appropriate.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86256 13f79535-47bb-0310-9956-ffa450edef68

registrations is actually modified.  This allows Apache to server
pages again.  (Before this, every ap_add_filter() silently failed
and so output content went to the bit bucket.)

Also, repair some comments and un-namespace-protect a now-static
function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86255 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86254 13f79535-47bb-0310-9956-ffa450edef68

HTTP_BAD_REQUEST) don't send any error message content to the browser.
The core_filter wasn't present this early in request parsing, so the output
went into the bit bucket via r[v]puts->ap_pass_brigade.

The chunking filter takes care of itself nicely, because it is added in
ap_send_http_header if it's needed.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86253 13f79535-47bb-0310-9956-ffa450edef68

a brigade split function for quite some time.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86252 13f79535-47bb-0310-9956-ffa450edef68

is add part of the infrastructure.  Namely:

1) filter list in the conn_rec, which is where the input filter list
   must live

2) Split the register_filter into multiple functions, one to register
   input filters the other to register output filters.

3) Modify existing modules so they still work.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86251 13f79535-47bb-0310-9956-ffa450edef68

Set up the context in the filter in case the filter was inserted via
AddOutputFilter.

Provide a temporary hack to avoid having the module and core both
insert the output translation filter.  For now, code
"CharsetOptions NoImplicitAdd" in a container with "AddOutputFilter."

Make a few cosmetic changes (e.g., rename the mis-named
xlate_register_filter routine).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86250 13f79535-47bb-0310-9956-ffa450edef68

ap_method_list_do().


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86249 13f79535-47bb-0310-9956-ffa450edef68

RemoveType to 2.0.  (--with-maintainer-mode works wonders!)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86248 13f79535-47bb-0310-9956-ffa450edef68

PR: 6451

Clarification / grammar fix.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86247 13f79535-47bb-0310-9956-ffa450edef68

put input filters into Apache.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86246 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86245 13f79535-47bb-0310-9956-ffa450edef68

a zero length bucket and a bucket containing the original text.  Later
filters will either throw away the zero length bucket, or they will just
ignore it.  The problem is that if we return an error in those conditions,
then all filters need special logic whenever they are going to split a
bucket.  By always splitting, only a few selected buckets need the special
logic to deal with zero-length buckets.  This also fixes mod_include to not
have the special logic around it's split call.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86242 13f79535-47bb-0310-9956-ffa450edef68

the bug fix that was recently committed to the 2.0 tree.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86240 13f79535-47bb-0310-9956-ffa450edef68

Get rid of an endless loop (waiting for dptr2 to become NULL instead of
AP_BRIGADE_SENTINEL()).

Add to a to-do comment.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86239 13f79535-47bb-0310-9956-ffa450edef68

PR: 4976
Obtained from: Claus "F�rber" <claus@faerber.muc.de>

Fix Compatibility statement.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86238 13f79535-47bb-0310-9956-ffa450edef68

PR: 5040

Fix an AddHandler example.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86237 13f79535-47bb-0310-9956-ffa450edef68

PR: 5289

Be a little less negative about the slowness of SSI.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86236 13f79535-47bb-0310-9956-ffa450edef68