Commits · 88f261355a83c28097a18f9b15d92196ec290def · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Nov 24, 2003

SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the · 88f26135

Andre Malo authored Nov 24, 2003

errorlog.

Reviewed by: Mark J Cox


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101873 13f79535-47bb-0310-9956-ffa450edef68

88f26135

Hook the default_port so that mod_nw_ssl will return the correct port rather · 7e47b28d

Bradley Nicholes authored Nov 24, 2003

than defaulting to 80


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101872 13f79535-47bb-0310-9956-ffa450edef68

7e47b28d

fix comment · a1047df1

Cliff Woolley authored Nov 24, 2003

Submitted by:	Fitz


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101870 13f79535-47bb-0310-9956-ffa450edef68

a1047df1

remove calls to the apr_proc_other_child_read function that no longer exists · 8f3b2e0a
Brian Pane authored Nov 24, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101858 13f79535-47bb-0310-9956-ffa450edef68
```
8f3b2e0a

Nov 23, 2003

Several improvements: · 479028d5

Astrid Kessler authored Nov 23, 2003

- some better descriptions
- reorder the enable/disable module options
- add --with-dbm options
- some nits

note: this is 2.0. changes in 2.1, e.g. auth modules, are still missing


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101857 13f79535-47bb-0310-9956-ffa450edef68

479028d5

add another space, for the sake of Netscape 4 · a6a3aeb5

Andre Malo authored Nov 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101854 13f79535-47bb-0310-9956-ffa450edef68

a6a3aeb5

restore the space which broke all tests :-) · ca8eb973

Andre Malo authored Nov 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101853 13f79535-47bb-0310-9956-ffa450edef68

ca8eb973

add a note about the spelling of options · 9205acb7

Astrid Kessler authored Nov 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101851 13f79535-47bb-0310-9956-ffa450edef68

9205acb7

switch to new pollset api · 818cdea4

Jeff Trawick authored Nov 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101850 13f79535-47bb-0310-9956-ffa450edef68

818cdea4

switch to new pollset api · 498aa7a2

Jeff Trawick authored Nov 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101849 13f79535-47bb-0310-9956-ffa450edef68

498aa7a2

Nov 22, 2003

build with latest other-child API changes · 1e254945

Jeff Trawick authored Nov 22, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101848 13f79535-47bb-0310-9956-ffa450edef68

1e254945

· 1d0b9aba

Paul J. Reder authored Nov 22, 2003

A better solution than my previous commit as pointed out by Andre Malo.
mod_expires: Initialize ExpiresDefault to NULL instead of "" to
avoid reporting an Internal Server error if it is used without
having been set in the httpd.conf file. PR: 23748, 24459
Submitted: Andre Malo, Liam Quinn <liam htmlhelp.com>
Reviewed: Andre Malo, Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101846 13f79535-47bb-0310-9956-ffa450edef68

1d0b9aba

Nov 21, 2003

sync · 73ac7215

Andre Malo authored Nov 21, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101845 13f79535-47bb-0310-9956-ffa450edef68

73ac7215

Stop trying to copy headers out of directories that don't exist · bc632163
Bradley Nicholes authored Nov 21, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101843 13f79535-47bb-0310-9956-ffa450edef68
```
bc632163

· 11a9e3b4

Paul J. Reder authored Nov 21, 2003

mod_expires: Don't report an Internal Server error if ExpiresDefault
is used and has not been set in the httpd.conf file. PR: 23748, 24459

Submitted: Liam Quinn <liam htmlhelp.com>
Reviewed: Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101839 13f79535-47bb-0310-9956-ffa450edef68

11a9e3b4

Account for some bytes handed to the network layer prior to · 2a3c2152

Jeff Trawick authored Nov 21, 2003

dropped connections.

Such bytes were counted on some paths but not on others.  If
these bytes are to be counted in some error paths, they should
be counted in the others.  We don't know if they were actually
presented to the client.

AFAIK, this only affects mod_logio.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101832 13f79535-47bb-0310-9956-ffa450edef68

2a3c2152

Fix a problem with the display of empty variables ("SetEnv foo") in · 70654fd8

Jeff Trawick authored Nov 21, 2003

mod_include.  Now it works like 1.3 (see PR for details).  Setting
of envvars for scripts was/is consistent with 1.3 for empty variables.

PR:           24734
Submitted by: Markus Julen <mj zermatt.net>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101830 13f79535-47bb-0310-9956-ffa450edef68

70654fd8

axe a comment... as with so many things, the true part isn't · 2a1c99da

Jeff Trawick authored Nov 21, 2003

interesting and the interesting part isn't true


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101829 13f79535-47bb-0310-9956-ffa450edef68

2a1c99da

simplify just a bit · 1522df33

Jeff Trawick authored Nov 21, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101828 13f79535-47bb-0310-9956-ffa450edef68

1522df33

Nov 20, 2003

Rework OS/2 MPM to use the pollset API. · 8569b8a2

Brian Havard authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101826 13f79535-47bb-0310-9956-ffa450edef68

8569b8a2

spell check · d18daba9

Jeff Trawick authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101822 13f79535-47bb-0310-9956-ffa450edef68

d18daba9

Win32: MaxMemFree works with mpm_winnt · 64417e08

Bill Stoddard authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101820 13f79535-47bb-0310-9956-ffa450edef68

64417e08

sync with stable branch · 446f4dfb

Jeff Trawick authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101819 13f79535-47bb-0310-9956-ffa450edef68

446f4dfb

Win32: Make Win32 MPM transaction pools honor MaxMemFree · 4ae7b10a

Bill Stoddard authored Nov 20, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101817 13f79535-47bb-0310-9956-ffa450edef68

4ae7b10a

Reference the bug database in the STATUS file. · 13c002be

Joshua Slive authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101813 13f79535-47bb-0310-9956-ffa450edef68

13c002be

Fix a few typos and change the description a bit. · 4a615b31

David Shane Holden authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101810 13f79535-47bb-0310-9956-ffa450edef68

4a615b31

mod_autoindex: new directive IndexStyleSheet · bff3bad5

Ian Holsman authored Nov 20, 2003


PR:
Obtained from:
Submitted by: Tyler Riddle <triddle_1999 yahoo.com> and Paul Querna <chip force-elite.com>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101809 13f79535-47bb-0310-9956-ffa450edef68

bff3bad5

Nov 17, 2003

improve this document step by step: · 24a2fece

Astrid Kessler authored Nov 17, 2003

- use --enable-layout description from install.xml

further contributions and comments are welcome


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101805 13f79535-47bb-0310-9956-ffa450edef68

24a2fece

Unless anyone strenuously objects, I'm adding back the comments · 03ab10e7

Richard Bowen authored Nov 17, 2003

regarding ScriptInterpreterSource. We're getting an increasing number of
questions about this.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101802 13f79535-47bb-0310-9956-ffa450edef68

03ab10e7

Nov 16, 2003

Switch over to the new pollset API. · 054a8a46

Greg Stein authored Nov 16, 2003

* server/mpm/worker/worker.c:
  (listener_thread): create and add sockets to the pollset using the new
    APIs. rearrange the round-robin a little bit to work with the new
    pollset return values.
    cleaning: get rid of an extraneous status variable. get rid of
      obsoleted round-robin code.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101801 13f79535-47bb-0310-9956-ffa450edef68

054a8a46

Switch the prefork MPM over to the new pollset interface. · 2864197f

Greg Stein authored Nov 16, 2003

* server/mpm/prefork/prefork.c:
  (listensocks[]): removed. not required.
  (child_main): stop using listensocks[] in favor of an apr_pollset_t. if
    there is just one listener, then always refer to that listener's
    listen_rec for further processing, otherwise poll and pick up the
    listen_rec pointer from the polling structure's client_data. tweaked
    the round-robin for the new pollset API (and documented).
    cleaning: removed 'offset' which is obviated by the use of a pointer
      to a listen_rec. tighten the block-scope of several variables.
      switch to use a 'status' variable name rather than three separately
      named variables. rename n->numdesc to be more obvious.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101799 13f79535-47bb-0310-9956-ffa450edef68

2864197f

Sync with APR-util deprecated functions. · 176c79a2

Justin Erenkrantz authored Nov 16, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101789 13f79535-47bb-0310-9956-ffa450edef68

176c79a2

get rid of _FOREACH · ee95acbd

Cliff Woolley authored Nov 16, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101788 13f79535-47bb-0310-9956-ffa450edef68

ee95acbd

stop using deprecated apr_atomic functions · 4ba97b4d

Jeff Trawick authored Nov 16, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101786 13f79535-47bb-0310-9956-ffa450edef68

4ba97b4d

Nov 15, 2003

fix the EBCDIC path in send_all_header_fields() to actually return something · af2bf0a9

Jeff Trawick authored Nov 15, 2003

the caller ignores it, but still...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101784 13f79535-47bb-0310-9956-ffa450edef68

af2bf0a9

Nov 13, 2003

Forwardport Kess' fixes (r. 1.1.2.3). · 4c6a6bcf

Erik Abele authored Nov 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101780 13f79535-47bb-0310-9956-ffa450edef68

4c6a6bcf

sync with stable branch · 80a92a45

Jeff Trawick authored Nov 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101779 13f79535-47bb-0310-9956-ffa450edef68

80a92a45

parsed_uri.port is only valid iff parsed_uri.port_str != NULL. · fa1cb2bb

Jim Jagielski authored Nov 13, 2003

Old code simply checked if it was non-zero, not if it
was *valid*

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101774 13f79535-47bb-0310-9956-ffa450edef68

fa1cb2bb

Nov 12, 2003

· 56fafca3

William A. Rowe Jr authored Nov 12, 2003

Normalize email addresses for the purpose of deliberate but simple-to-read
obscufication.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101763 13f79535-47bb-0310-9956-ffa450edef68

56fafca3

Remove manual/search due to consensus ;) · 274a264f

Erik Abele authored Nov 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101761 13f79535-47bb-0310-9956-ffa450edef68

274a264f