Commits · 88f261355a83c28097a18f9b15d92196ec290def · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

24 Nov, 2003 1 commit

SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the · 88f26135

Andre Malo authored Nov 24, 2003

errorlog.

Reviewed by: Mark J Cox


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101873 13f79535-47bb-0310-9956-ffa450edef68

88f26135

22 Nov, 2003 1 commit

· 1d0b9aba

Paul J. Reder authored Nov 22, 2003

A better solution than my previous commit as pointed out by Andre Malo.
mod_expires: Initialize ExpiresDefault to NULL instead of "" to
avoid reporting an Internal Server error if it is used without
having been set in the httpd.conf file. PR: 23748, 24459
Submitted: Andre Malo, Liam Quinn <liam htmlhelp.com>
Reviewed: Andre Malo, Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101846 13f79535-47bb-0310-9956-ffa450edef68

1d0b9aba

21 Nov, 2003 4 commits

sync · 73ac7215

Andre Malo authored Nov 21, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101845 13f79535-47bb-0310-9956-ffa450edef68

73ac7215

· 11a9e3b4

Paul J. Reder authored Nov 21, 2003

mod_expires: Don't report an Internal Server error if ExpiresDefault
is used and has not been set in the httpd.conf file. PR: 23748, 24459

Submitted: Liam Quinn <liam htmlhelp.com>
Reviewed: Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101839 13f79535-47bb-0310-9956-ffa450edef68

11a9e3b4

Account for some bytes handed to the network layer prior to · 2a3c2152

Jeff Trawick authored Nov 21, 2003

dropped connections.

Such bytes were counted on some paths but not on others.  If
these bytes are to be counted in some error paths, they should
be counted in the others.  We don't know if they were actually
presented to the client.

AFAIK, this only affects mod_logio.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101832 13f79535-47bb-0310-9956-ffa450edef68

2a3c2152

Fix a problem with the display of empty variables ("SetEnv foo") in · 70654fd8

Jeff Trawick authored Nov 21, 2003

mod_include.  Now it works like 1.3 (see PR for details).  Setting
of envvars for scripts was/is consistent with 1.3 for empty variables.

PR:           24734
Submitted by: Markus Julen <mj zermatt.net>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101830 13f79535-47bb-0310-9956-ffa450edef68

70654fd8

20 Nov, 2003 3 commits

sync with stable branch · 446f4dfb

Jeff Trawick authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101819 13f79535-47bb-0310-9956-ffa450edef68

446f4dfb

Win32: Make Win32 MPM transaction pools honor MaxMemFree · 4ae7b10a

Bill Stoddard authored Nov 20, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101817 13f79535-47bb-0310-9956-ffa450edef68

4ae7b10a

mod_autoindex: new directive IndexStyleSheet · bff3bad5

Ian Holsman authored Nov 20, 2003


PR:
Obtained from:
Submitted by: Tyler Riddle <triddle_1999 yahoo.com> and Paul Querna <chip force-elite.com>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101809 13f79535-47bb-0310-9956-ffa450edef68

bff3bad5

13 Nov, 2003 1 commit

sync with stable branch · 80a92a45

Jeff Trawick authored Nov 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101779 13f79535-47bb-0310-9956-ffa450edef68

80a92a45

12 Nov, 2003 1 commit

· 56fafca3

William A. Rowe Jr authored Nov 12, 2003

Normalize email addresses for the purpose of deliberate but simple-to-read
obscufication.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101763 13f79535-47bb-0310-9956-ffa450edef68

56fafca3

07 Nov, 2003 2 commits

Fix a long delay with CGI requests and keepalive connections on · fe0f3b56

Jeff Trawick authored Nov 07, 2003

AIX.

On AIX, for processes like mod_cgid's script children where
SIGCHLD is ignored, kill(pid,0) returns success for up to
one second after the script child exits, based on when a
daemon runs to clean up unnecessary process table entries.
getpgid() can report the proper info (-1/ESRCH) immediately.

One user had a page with a lot of embedded images created by
CGIs, and the browser fetched them on a keepalive connection,
and the cumulative delays were very noticeable by the clients.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101716 13f79535-47bb-0310-9956-ffa450edef68

fe0f3b56

Fix uninitialized gprof directory name in prefork MPM. · 826d0b0f

Jeff Trawick authored Nov 07, 2003

PR:           24450
Submitted by: Chris Knight <Christopher.D.Knight@nasa.gov>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101714 13f79535-47bb-0310-9956-ffa450edef68

826d0b0f

06 Nov, 2003 1 commit

mod_auth_ldap: Fix some segfaults in the cache logic. · 2d7f4054

Jeff Trawick authored Nov 06, 2003

PR:                18756
Submitted by:      Matthieu Estrade <apache@moresecurity.org>
Reviewed by:       Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101706 13f79535-47bb-0310-9956-ffa450edef68

2d7f4054

03 Nov, 2003 1 commit

darn, the patch for bug 9587 (wrong icon for directories shown) broke · 949596d3

Andre Malo authored Nov 03, 2003

the directory descriptions more or less completely. Fix it now.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101693 13f79535-47bb-0310-9956-ffa450edef68

949596d3

02 Nov, 2003 3 commits

no longer allow an ETag header in 304 responses. · 32bcbea1

Andre Malo authored Nov 02, 2003

PR: 19355
Submitted by: Geoffrey Young <geoff@apache.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101687 13f79535-47bb-0310-9956-ffa450edef68

32bcbea1

- add XHTML doctypes to httpd.h · 7523d8a7

Andre Malo authored Nov 02, 2003

- fix the (x)html output of mod_autoindex to be consistent
  and make it configurable to emit either HTML or XHTML

PR: 23747


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101683 13f79535-47bb-0310-9956-ffa450edef68

7523d8a7

fix optimizer to not throw away a regex if it stumbles over it. · 981b83ed

Andre Malo authored Nov 02, 2003

PR: 24219


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101665 13f79535-47bb-0310-9956-ffa450edef68

981b83ed

01 Nov, 2003 4 commits

Don't omit the initial <tr> if SuppressIcon is set. · 1f2ddd5b

Andre Malo authored Nov 01, 2003

Submitted by: Jesse Tie-Ten-Quee <highos@highos.com>
PR: 21668


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101661 13f79535-47bb-0310-9956-ffa450edef68

1f2ddd5b

Let mod_autoindex show filenames containing special chars like %. · b21bcca1

Andre Malo authored Nov 01, 2003

PR: 13598


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101659 13f79535-47bb-0310-9956-ffa450edef68

b21bcca1

sync with stable branch · aa762576

Jeff Trawick authored Nov 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101651 13f79535-47bb-0310-9956-ffa450edef68

aa762576

sync with stable branch · a3d76d1d

Jeff Trawick authored Nov 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101648 13f79535-47bb-0310-9956-ffa450edef68

a3d76d1d

30 Oct, 2003 1 commit

* modules/generators/mod_info.c: · d3f0f5ca

Thom May authored Oct 30, 2003

        (mod_info_module_cmds) ap_escape_html() all directives and
        arguments.
PR: 24232


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101626 13f79535-47bb-0310-9956-ffa450edef68

d3f0f5ca

29 Oct, 2003 1 commit

mod_status: Report total CPU time accurately when using a threaded · f5448c23

Jeff Trawick authored Oct 29, 2003

MPM.

Note: It worked before with linuxthreads and it still does.  But now
it works with normal thread implementations too.

PR:     23795


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101614 13f79535-47bb-0310-9956-ffa450edef68

f5448c23

26 Oct, 2003 1 commit

Forward port from 2.0: · 20784b13

Sander Striker authored Oct 26, 2003

SECURITY [CAN-2003-0789]: mod_cgid: Resolve some mishandling of
the AF_UNIX socket used to communicate with the cgid daemon and
the CGI script.

Submitted by: Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101570 13f79535-47bb-0310-9956-ffa450edef68

20784b13

24 Oct, 2003 1 commit

Fold in the CAN-2003-0542 regex patch. · 49a9edff

Sander Striker authored Oct 24, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101556 13f79535-47bb-0310-9956-ffa450edef68

49a9edff

23 Oct, 2003 2 commits

sync · 5d57a16a

Andre Malo authored Oct 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101540 13f79535-47bb-0310-9956-ffa450edef68

5d57a16a

* modules/ssl/ssl_engine_vars.c (ssl_var_log_handler_c): Fix · daa2f29b

Joe Orton authored Oct 23, 2003

segfault on a non-SSL request.

PR: 22741
Submitted by: Gary E. Miller <gem@rellim.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101534 13f79535-47bb-0310-9956-ffa450edef68

daa2f29b

22 Oct, 2003 1 commit

Set the scoreboard state to indicate logging prior to running · 4a618b72

Jeff Trawick authored Oct 22, 2003

logging hooks so that server-status will show 'L' for hung loggers
instead of 'W'.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101517 13f79535-47bb-0310-9956-ffa450edef68

4a618b72

15 Oct, 2003 2 commits

sync with APACHE_2_0_BRANCH · e4a95b03

Jeff Trawick authored Oct 15, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101464 13f79535-47bb-0310-9956-ffa450edef68

e4a95b03

fix segfault which occured if the filename was not · 90261c34

Andre Malo authored Oct 15, 2003

set, for example, when processing some error conditions.

PR: 23836


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101461 13f79535-47bb-0310-9956-ffa450edef68

90261c34

14 Oct, 2003 1 commit

backported this change to 2.0: · 1f5da61f

Stas Bekman authored Oct 14, 2003

     fix the config parser to support <Foo>..</Foo> containers (no
     arguments in the opening tag) supported by httpd 1.3. Without
     this change mod_perl 2.0's <Perl> sections are broken.
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101445 13f79535-47bb-0310-9956-ffa450edef68

1f5da61f

11 Oct, 2003 2 commits

fix the config parser to support <Foo>..</Foo> containers (no · 695ab620

Stas Bekman authored Oct 11, 2003

arguments in the opening tag) supported by httpd 1.3. Without
this change mod_perl 2.0's <Perl> sections are broken.
PR:
Obtained from:
Submitted by:	"Philippe M. Chiasson" <gozer@cpan.org>
Reviewed by:	stas


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101415 13f79535-47bb-0310-9956-ffa450edef68

695ab620

reflect backported change · 31b9d816

Roy T. Fielding authored Oct 11, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101413 13f79535-47bb-0310-9956-ffa450edef68

31b9d816

10 Oct, 2003 1 commit

do sync. · 30894628

Andre Malo authored Oct 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101403 13f79535-47bb-0310-9956-ffa450edef68

30894628

02 Oct, 2003 1 commit

mod_cgid: fix a hash table corruption problem which could · 602f8cb2

Jeff Trawick authored Oct 02, 2003

result in the wrong script being cleaned up at the end of a
request.

Unique storage was not used for the key, as the code assumed
incorrectly that apr_hash_set() made a copy of the key.  Thus,
when the script pid was looked up at the end of the request,
some other script's pid could be found.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101374 13f79535-47bb-0310-9956-ffa450edef68

602f8cb2

30 Sep, 2003 3 commits

· b26c4d23

Paul J. Reder authored Sep 30, 2003

Update as a result of a backport.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101359 13f79535-47bb-0310-9956-ffa450edef68

b26c4d23

Typo · db1235cb

Martin Kraemer authored Sep 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101354 13f79535-47bb-0310-9956-ffa450edef68

db1235cb

Typo · f465548a

Martin Kraemer authored Sep 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101353 13f79535-47bb-0310-9956-ffa450edef68

f465548a

29 Sep, 2003 1 commit

· ce28b3f1

Paul J. Reder authored Sep 29, 2003

Update to document a completed backport


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101352 13f79535-47bb-0310-9956-ffa450edef68

ce28b3f1