Commits · 8a7db7c02c34107ee5e113c6086ca688ab2efc0c · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Oct 09, 2011

Force base 10 when parsing the Content-Length. It doesn't matter in this · 8a7db7c0

Stefan Fritsch authored Oct 09, 2011

case, but in general using strto*(..., 0) for parsing HTTP headers is a bug.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180689 13f79535-47bb-0310-9956-ffa450edef68

8a7db7c0

Consistently use base 10 for numbers when parsing config options. It may be · 1cbfd00e

Stefan Fritsch authored Oct 09, 2011

confusing to the user if some directives treat a number with leading zero as
octal while most don't.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180687 13f79535-47bb-0310-9956-ffa450edef68

1cbfd00e

Add -D DUMP_RUN_CFG option to dump some configuration items · ff444d9c

Stefan Fritsch authored Oct 09, 2011

from the parsed (or default) config. This is useful for init scripts that
need to setup temporary directories and permissions, for example if those
temporary directories are located on a ram disk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180681 13f79535-47bb-0310-9956-ffa450edef68

ff444d9c

Consistenly use apr_file_* API instead of libc when dumping config because · 4e3b14c0

Stefan Fritsch authored Oct 09, 2011

mixing the two can give strange results due to buffering.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180671 13f79535-47bb-0310-9956-ffa450edef68

4e3b14c0

Remove ap_proxy_removestr(). It has been unused for a decade and has quadratic · 8e065037
Stefan Fritsch authored Oct 09, 2011
```
memory usage.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180654 13f79535-47bb-0310-9956-ffa450edef68
```
8e065037

Oct 08, 2011

Rebuild various xdocs · abc11fda

Richard Bowen authored Oct 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180504 13f79535-47bb-0310-9956-ffa450edef68

abc11fda

Rebuild various xdocs · 360ad58e

Richard Bowen authored Oct 08, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180503 13f79535-47bb-0310-9956-ffa450edef68

360ad58e

Note that hostname lookups will be performed for 'require from hostname' · 01e2444d

Richard Bowen authored Oct 08, 2011

directives, regardless of the setting of HostnameLookups. refs
https://issues.apache.org/bugzilla/show_bug.cgi?id=51967

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180502 13f79535-47bb-0310-9956-ffa450edef68

01e2444d

refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51967 Mention · ad9ea425

Richard Bowen authored Oct 08, 2011

that %h will sometimes log the IP address, and sometimes the hostname,
depending on HostNameLookup setting and the use of hostname-based
authorization directives.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180500 13f79535-47bb-0310-9956-ffa450edef68

ad9ea425

mod_authn_socache: fix it to enable initialisation to work if configured · ab9d5d15

Nick Kew authored Oct 08, 2011

only in .htaccess context, and provide a toggle for that.
PR 51991


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180384 13f79535-47bb-0310-9956-ffa450edef68

ab9d5d15

Updates. · 81517445

Lucien Gentis authored Oct 08, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180379 13f79535-47bb-0310-9956-ffa450edef68

81517445

Shut up gcc/glibc warning about ignoring write()'s return value. · 4f540f4a

Stefan Fritsch authored Oct 08, 2011

This may actually fix a real bug in case the error log is directed to a FIFO.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180334 13f79535-47bb-0310-9956-ffa450edef68

4f540f4a

Fix format string bugs in mod_lua. Found by gcc and pointed out by Igor Galic. · 79847a41
Stefan Fritsch authored Oct 08, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180332 13f79535-47bb-0310-9956-ffa450edef68
```
79847a41

Add some CFLAGS in maintainer mode if supported by gcc: · 2befe171

Stefan Fritsch authored Oct 08, 2011

-Wformat
-Wformat-security
-Werror=format-security
-Werror=declaration-after-statement

Add new macro APACHE_ADD_GCC_CFLAGS to do the compatibility check.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180331 13f79535-47bb-0310-9956-ffa450edef68

2befe171

Add another AP_DEBUG_ASSERT to document some assumptions in the code, · 434985f0

Stefan Fritsch authored Oct 08, 2011

for the benefit of code analyzers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180330 13f79535-47bb-0310-9956-ffa450edef68

434985f0

Fix a potential NULL pointer dereference found by clang. · e7a12918

Stefan Fritsch authored Oct 08, 2011

Add a AP_DEBUG_ASSERT to quiet a clang false positive.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180329 13f79535-47bb-0310-9956-ffa450edef68

e7a12918

Downgrade error log messages which accompany a 404 request status from loglevel · 8104f18b

Stefan Fritsch authored Oct 08, 2011

error to info.

List thread at
http://mail-archives.apache.org/mod_mbox/httpd-dev/201110.mbox/%3Calpine.DEB.2.00.1110041948280.664@eru.sfritsch.de%3E

PR: 35768


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180328 13f79535-47bb-0310-9956-ffa450edef68

8104f18b

Sort hooks twice, once before pre_config, once after ap_process_config_tree. · 701c0370

Stefan Fritsch authored Oct 08, 2011

This fixes a regression with perl modules introduced by r1032002

PR: 45076
Submitted by: Torsten Foertsch <torsten foertsch gmx net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180325 13f79535-47bb-0310-9956-ffa450edef68

701c0370

Oct 07, 2011

Rebuild doc transformations. · 1feb3eee

Richard Bowen authored Oct 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179914 13f79535-47bb-0310-9956-ffa450edef68

1feb3eee

Refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51967 Clarify · 3bdc4422

Richard Bowen authored Oct 07, 2011

that %h logs the IP address when HostnameLookup is set Off.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179913 13f79535-47bb-0310-9956-ffa450edef68

3bdc4422

Oct 06, 2011

re-add "extern" accidentally removed by r1179448 · 7ea8317e

Stefan Fritsch authored Oct 06, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179715 13f79535-47bb-0310-9956-ffa450edef68

7ea8317e

Rebuild doc transform · a0a5a3bd

Richard Bowen authored Oct 06, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179617 13f79535-47bb-0310-9956-ffa450edef68

a0a5a3bd

Patch from Description Mathijs Schmittmann - Corrected syntax for && (vs &)... · 2d3477a1

Richard Bowen authored Oct 06, 2011

Patch from Description Mathijs Schmittmann - Corrected syntax for && (vs &) expression. Refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51976


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179614 13f79535-47bb-0310-9956-ffa450edef68

2d3477a1

Oct 05, 2011

Export ap_max_mem_free, needed by r1178079, as pointed out by Gregg L. Smith · 7065098b
Stefan Fritsch authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179448 13f79535-47bb-0310-9956-ffa450edef68
```
7065098b

- `build.sh all` · 163289ae

Joe Orton authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179273 13f79535-47bb-0310-9956-ffa450edef68

163289ae

- add note here in light of CVE-2011-3368 · f8a11311

Joe Orton authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179272 13f79535-47bb-0310-9956-ffa450edef68

f8a11311

- add a security warning, and tweak the example, in light of CVE-2011-3368 · b10aeb17
Joe Orton authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179266 13f79535-47bb-0310-9956-ffa450edef68
```
b10aeb17

SECURITY (CVE-2011-3368): Prevent unintended pattern expansion in some · 2125cb1b

Joe Orton authored Oct 05, 2011

reverse proxy configurations by strictly validating the request-URI:

* server/protocol.c (read_request_line): Send a 400 response if the
  request-URI does not match the grammar from RFC 2616.  This ensures
  the input string for RewriteRule et al really is an absolute path.

Reviewed by: rpluem, wrowe, covener, fielding


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179239 13f79535-47bb-0310-9956-ffa450edef68

2125cb1b

Rebuild html. · a8d4d567

Richard Bowen authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179184 13f79535-47bb-0310-9956-ffa450edef68

a8d4d567

Fix link to Friedl's book. (refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51959) · 58acd380
Richard Bowen authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179179 13f79535-47bb-0310-9956-ffa450edef68
```
58acd380

Oct 04, 2011

Add SSLCARevocationCheck directive to default mod_ssl config · 4865b878
Kaspar Brand authored Oct 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178695 13f79535-47bb-0310-9956-ffa450edef68
```
4865b878

fix indentation · 6ad30a0b

Kaspar Brand authored Oct 04, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178694 13f79535-47bb-0310-9956-ffa450edef68

6ad30a0b

Oct 03, 2011

Enforce LimitRequestFieldSize after multiple headers with the same · 230803c5

Stefan Fritsch authored Oct 03, 2011

name have been merged.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178566 13f79535-47bb-0310-9956-ffa450edef68

230803c5

TODO note regarding the LimitInternalRecursion error message. · 051e2018
Richard Bowen authored Oct 03, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178523 13f79535-47bb-0310-9956-ffa450edef68
```
051e2018

Oct 01, 2011

update xforms · 2a754fe3

Stefan Fritsch authored Oct 01, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178089 13f79535-47bb-0310-9956-ffa450edef68

2a754fe3

grammar fix · 9b0045d5

Stefan Fritsch authored Oct 01, 2011

point to SSLRequire docs


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178088 13f79535-47bb-0310-9956-ffa450edef68

9b0045d5

If MaxMemFree is set, set SSL_MODE_RELEASE_BUFFERS in mod_ssl. · 2fee69e6

Stefan Fritsch authored Oct 01, 2011

Always set SSL_MODE_RELEASE_BUFFERS in ab.

PR: 51618
Submitted by: Cristian Rodríguez <crrodriguez opensuse org>, Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178079 13f79535-47bb-0310-9956-ffa450edef68

2fee69e6

Sep 30, 2011

Remove trailing comma on last enum member for authz_status · de741d92

Paul Querna authored Sep 30, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1177497 13f79535-47bb-0310-9956-ffa450edef68

de741d92

Sep 29, 2011

Clarify configuration comment. · 46c7ddbe

Rainer Jung authored Sep 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1177210 13f79535-47bb-0310-9956-ffa450edef68

46c7ddbe

Sep 28, 2011

In ssl_check_public_cert(), also take dNSNames in the subjectAltName · 0d8b38a8

Kaspar Brand authored Sep 28, 2011

extension into account when checking the cert against the configured
ServerName. PR 32652, PR 47051.

Replace SSL_X509_getCN() by SSL_X509_getIDs(), which returns an array
of a cert's DNS-IDs and CN-IDs (terms as coined by RFC 6125).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176752 13f79535-47bb-0310-9956-ffa450edef68

0d8b38a8