Commits · 876386670776db5e72a601d828b8bedaba8d8263 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

May 25, 2004

Backported · 87638667

Graham Leggett authored May 25, 2004

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103759 13f79535-47bb-0310-9956-ffa450edef68

87638667

* modules/http/http_protocol.c (ap_setup_client_block, · 77f6fd8a

Joe Orton authored May 25, 2004

ap_http_filter): Use new apr_strtoff() to support request bodies as
large as apr_off_t allows (rather than as large as 'long' allows), and
simplify error handling.

PR: 27866


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103756 13f79535-47bb-0310-9956-ffa450edef68

77f6fd8a

* modules/ssl/ssl_util.c, modules/ssl/ssl_private.h: Remove unused · 85b5ed49

Joe Orton authored May 25, 2004

functions ssl_util_strupper, ssl_util_ptxtstub, and
ssl_util_uuencode*.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103755 13f79535-47bb-0310-9956-ffa450edef68

85b5ed49

* modules/ssl/ssl_engine_kernel.c (ssl_hook_UserCheck): Fix buffer · d8f71ba6

Joe Orton authored May 25, 2004

overflow in FakeBasicAuth code if client's subject DN exceeds 6K in
length (CVE CAN-2004-0488); switch to using apr-util base64 encoder
functions.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103754 13f79535-47bb-0310-9956-ffa450edef68

d8f71ba6

allow LimitRequestBody to be reset to unlimited · 081d24f0

Andre Malo authored May 25, 2004

PR: 29106


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103751 13f79535-47bb-0310-9956-ffa450edef68

081d24f0

May 24, 2004

use new apr_strtoff function to parse limitrequestbody · bfabf524

Andre Malo authored May 24, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103750 13f79535-47bb-0310-9956-ffa450edef68

bfabf524

May 23, 2004

Fix a segfault when requests for shared memory fails and returns · d05e574e

Graham Leggett authored May 23, 2004

NULL. Fix a segfault caused by a lack of bounds checking on the
cache.
PR:	24801
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103746 13f79535-47bb-0310-9956-ffa450edef68

d05e574e

adjust mod_file_cache.xml.ko · 1383482b

Andre Malo authored May 23, 2004

update transformation


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103745 13f79535-47bb-0310-9956-ffa450edef68

1383482b

typo; this fixes PR 29161 · b1eb55de

Astrid Kessler authored May 23, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103743 13f79535-47bb-0310-9956-ffa450edef68

b1eb55de

May 22, 2004

Throw an error message if an attempt is made to use the LDAPTrustedCA · 24a81be5

Graham Leggett authored May 22, 2004

or LDAPTrustedCAType directives in a VirtualHost.
PR:	26390
Obtained from:
Submitted by:	Brad Nicholes
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103736 13f79535-47bb-0310-9956-ffa450edef68

24a81be5

May 21, 2004

The backport list gets shorter. · 549e074d

Graham Leggett authored May 21, 2004

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103734 13f79535-47bb-0310-9956-ffa450edef68

549e074d

Small fix to allow reverse proxying to an ftp server. Previously · c2af62d3

Graham Leggett authored May 21, 2004

an attempt to do this would try and connect to 0.0.0.0, regardless
of the server specified.
PR:	24922
Obtained from:
Submitted by:	Pascal Terjan <pterjan@linuxfr.org>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103725 13f79535-47bb-0310-9956-ffa450edef68

c2af62d3

* modules/dav/main/mod_dav.c (dav_method_put): Fix segfault · 6a581be5

Joe Orton authored May 21, 2004

in auto-versioning error handling path.

PR: 29148


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103723 13f79535-47bb-0310-9956-ffa450edef68

6a581be5

Mr ldap_simple_bind_s() bug, with three votes, you are the weakest link, · ee27c3a9

Graham Leggett authored May 21, 2004

goodbye.
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103722 13f79535-47bb-0310-9956-ffa450edef68

ee27c3a9

update transformation · c833f422

Andre Malo authored May 21, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103719 13f79535-47bb-0310-9956-ffa450edef68

c833f422

Fix a potential segfault if the bind password in the LDAP cache · 6f520cfd

Graham Leggett authored May 21, 2004

is NULL.
PR:	26686
Obtained from:
Submitted by:	Jari Ahonen <jah@progress.com>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103713 13f79535-47bb-0310-9956-ffa450edef68

6f520cfd

Quotes cannot be used around require group and require dn · 9742ad2b

Graham Leggett authored May 21, 2004

directives, update the documentation to reflect this. Also add
quotes around the dn and group within debug messages, to make it
more obvious why authentication is failing if quotes are used in
error.
PR: 19304
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103711 13f79535-47bb-0310-9956-ffa450edef68

9742ad2b

Fix a cut and paste, doh! · 34e1f01c

Graham Leggett authored May 21, 2004

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103710 13f79535-47bb-0310-9956-ffa450edef68

34e1f01c

The Microsoft LDAP SDK escapes filters for us, stop util_ldap · 458ba1d7

Graham Leggett authored May 21, 2004

from escaping filters twice when the backslash character is used.
PR: 24437
Obtained from:
Submitted by:	Jess Holle <jessh@ptc.com>
Reviewed by:	minfrin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103708 13f79535-47bb-0310-9956-ffa450edef68

458ba1d7

May 20, 2004

Overhaul handling of LDAP error conditions, so that the util_ldap_* · 29e81fc3

Graham Leggett authored May 20, 2004

functions leave the connections in a sane state after errors have
occurred.
PR: 27748, 17274, 17599, 18661, 21787, 24595, 24683, 27134, 27271
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103706 13f79535-47bb-0310-9956-ffa450edef68

29e81fc3

RPM spec file changes: changed default dependancy to link to db4 · 272d5aa4

Graham Leggett authored May 20, 2004

instead of db3. Fixed complaints about unpackaged files.
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103704 13f79535-47bb-0310-9956-ffa450edef68

272d5aa4

May 19, 2004

apr_pstrcat() needs NULL at end of parameter list to know · f33b5161

Jeff Trawick authored May 19, 2004

when to stop (mississi^#@75UiSIGSEGV)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103699 13f79535-47bb-0310-9956-ffa450edef68

f33b5161

Fix handling of IPv6 numeric strings in mod_proxy. · 53f35324

Jeff Trawick authored May 19, 2004

(Some such operations would work if port was specified
in url due to way parsing was performed, finding last ':'
and considering everything after as the port.)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103698 13f79535-47bb-0310-9956-ffa450edef68

53f35324

May 18, 2004
- replaced tabs with spaces and aligned indentation within brackets · 454a3d4f
  Jean-Jacques Clar authored May 18, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103697 13f79535-47bb-0310-9956-ffa450edef68
```
  454a3d4f
May 17, 2004

external map responses were cut at 2048 bytes (and possibly got out of sync that · ed71f009

Andre Malo authored May 17, 2004

way). Now they are unlimited.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103691 13f79535-47bb-0310-9956-ffa450edef68

ed71f009

update transformation · fa0c4647

Andre Malo authored May 17, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103690 13f79535-47bb-0310-9956-ffa450edef68

fa0c4647

Translation submitted by Vincent Deffontaines <vincent@gryzor.com>, · 7e208d97

Jean-Jacques Clar authored May 17, 2004

reviewed by Jean-Jacques Clar


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103689 13f79535-47bb-0310-9956-ffa450edef68

7e208d97

* modules/ssl/ssl_engine_config.c (ssl_config_global_create): Fix gcc · 919fdb81

Joe Orton authored May 17, 2004

strict-aliasing warning.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103688 13f79535-47bb-0310-9956-ffa450edef68

919fdb81

* server/core.c (core_output_filter): Don't explicitly delete the EOC · d4e228d1

Joe Orton authored May 17, 2004

bucket, and don't buffer the brigade if it ends in an EOC.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103686 13f79535-47bb-0310-9956-ffa450edef68

d4e228d1

May 13, 2004

sync with stable branch · 9d8aa2c2

Jeff Trawick authored May 13, 2004

  (there was never a CHANGES entry in 2.1-dev)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103681 13f79535-47bb-0310-9956-ffa450edef68

9d8aa2c2

if the call to ldap_simple_bind_s() fails, the connection is left in an... · af407dc2

Bradley Nicholes authored May 13, 2004

if the call to ldap_simple_bind_s() fails, the connection is left in an unbound state.  Make sure that the connection record is updated to show the current state.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103678 13f79535-47bb-0310-9956-ffa450edef68

af407dc2

May 12, 2004

Fix SEGV in 'shmcb' session cache: · 8fef9cb2

Madhusudan Mathihalli authored May 12, 2004

When a 'read' or 'write' to session cache is done, we need to check the size
of the data being 'read' or 'written' to avoid buffer over-run.

PR: 27751
Submitted by: Geoff Thorpe
Reviewed by: Madhusudan Mathihalli


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103669 13f79535-47bb-0310-9956-ffa450edef68

8fef9cb2

* modules/experimental/util_ldap.c (util_ldap_cache_compare): Fix · 981be02c

Joe Orton authored May 12, 2004

uninitialized variable warning from gcc -Wall.
(util_ldap_set_cache_bytes, util_ldap_post_config): Use correct APR
printf format string macros.
(util_ldap_set_cert_type): Make static to fix gcc warning.
(util_ldap_cleanup_module): Fix unused variable warning.

* modules/experimental/mod_auth_ldap.c (derive_codepage_from_lang):
Remove unused variable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103664 13f79535-47bb-0310-9956-ffa450edef68

981be02c

update transformation · 63421930