Commits · 8d5c3c434bbed8893fc8f4eed827dac4eceadd1e · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

23 Jan, 2012 5 commits

Make the core input/output filter contexts private and provide accessor APIs · 8d5c3c43

Stefan Fritsch authored Jan 23, 2012

for mpm_winnt and mod_ftp.

This allows to add members to the context structs without breaking binary
compatibility.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1235019 13f79535-47bb-0310-9956-ffa450edef68

8d5c3c43

* server/core_filters.c (send_brigade_nonblocking): Use a non-blocking · 4a416947

Joe Orton authored Jan 23, 2012

  bucket read, allowing any pending data to be flushed before trying a
  (potentially slow) blocking read.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234899 13f79535-47bb-0310-9956-ffa450edef68

4a416947

Document how Include should behave. The present inconsistencies are now subject · ddf9bb62

Stefan Fritsch authored Jan 23, 2012

of PR 52505 instead.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234876 13f79535-47bb-0310-9956-ffa450edef68

ddf9bb62

* server/core_filters.c (ap_core_output_filter): Don't read the entire · a3575653

Joe Orton authored Jan 23, 2012

  output of a morphing bucket into RAM.

Submitted by: jorton, sf


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234848 13f79535-47bb-0310-9956-ffa450edef68

a3575653

CVE-2012-0053: Fix an issue in error responses that could expose · ae522645

Eric Covener authored Jan 23, 2012

"httpOnly" cookies when no custom ErrorDocument is specified for
status code 400.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234837 13f79535-47bb-0310-9956-ffa450edef68

ae522645

22 Jan, 2012 7 commits

update xforms · a4e7822d

Stefan Fritsch authored Jan 22, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234644 13f79535-47bb-0310-9956-ffa450edef68

a4e7822d

Fix docs for Include, add docs for IncludeOptional · 0eccb987

Stefan Fritsch authored Jan 22, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234643 13f79535-47bb-0310-9956-ffa450edef68

0eccb987

Add a validate-xml target · 4b884d44

Stefan Fritsch authored Jan 22, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234642 13f79535-47bb-0310-9956-ffa450edef68

4b884d44

ctx->bytes_in is never used. Remove a useless iteration through the brigade · b4b32093
Stefan Fritsch authored Jan 22, 2012
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234574 13f79535-47bb-0310-9956-ffa450edef68
```
b4b32093

Improve indentation, no code change · 07ce61be

Stefan Fritsch authored Jan 22, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234565 13f79535-47bb-0310-9956-ffa450edef68

07ce61be

Update. · bda09574

Lucien Gentis authored Jan 22, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234511 13f79535-47bb-0310-9956-ffa450edef68

bda09574

Document the rather surprising code path on Windows · 459b224c

Stefan Fritsch authored Jan 22, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234479 13f79535-47bb-0310-9956-ffa450edef68

459b224c

21 Jan, 2012 1 commit

More configure time dependencies: · e3922ea0

Stefan Fritsch authored Jan 21, 2012

mod_cache_disk depends on mod_cache
mod_heartbeat depends on mod_watchdog


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234297 13f79535-47bb-0310-9956-ffa450edef68

e3922ea0

20 Jan, 2012 2 commits

Make APACHE_MODULE() accept an optional prerequisite module for configure. · a8f02069

Stefan Fritsch authored Jan 20, 2012

Introduce the following configure time dependencies:
  mod_proxy_* (except proxy_html) require mod_proxy
  mod_dav_* require mod_dav
  mod_session_* require mod_session


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1234180 13f79535-47bb-0310-9956-ffa450edef68

a8f02069

* server/core_filters.c (ap_core_input_filter): Only treat EAGAIN as · c7e05187

Joe Orton authored Jan 20, 2012

success if a non-blocking read was requested; for a blocking read,
it is an error condition.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1233882 13f79535-47bb-0310-9956-ffa450edef68

c7e05187

19 Jan, 2012 1 commit

Adjust CVE-2011-3368/CVE-2011-4317 fixes to rely solely on · 8e905e6d

Jeff Trawick authored Jan 19, 2012

core's translate-name to fail unsupported URIs.

Rewrite and proxy now decline what they don't support rather
than fail the request.

Suggested by: trawick
Implemented by: jorton
Tweaked by: wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1233604 13f79535-47bb-0310-9956-ffa450edef68

8e905e6d

18 Jan, 2012 1 commit

configure: Move the --with-included-apr check so that srcdir!=builddir builds · 3c872837

Graham Leggett authored Jan 18, 2012

aren't broken by it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1232838 13f79535-47bb-0310-9956-ffa450edef68

3c872837

17 Jan, 2012 6 commits

Anticipate win32+win64 · 5978912c

William A. Rowe Jr authored Jan 17, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1232630 13f79535-47bb-0310-9956-ffa450edef68

5978912c

Service named 2.x on trunk · 82b8a1ec

William A. Rowe Jr authored Jan 17, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1232624 13f79535-47bb-0310-9956-ffa450edef68

82b8a1ec

Further win32 edits anticipating 1.0.1-final is soon · 8c32d172

William A. Rowe Jr authored Jan 17, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1232622 13f79535-47bb-0310-9956-ffa450edef68

8c32d172

Reword the paragraph about --with-included-apr to mention the -deps · 76e6a865

Stefan Fritsch authored Jan 17, 2012

tarball.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1232594 13f79535-47bb-0310-9956-ffa450edef68

76e6a865

Trunk is at 2.5 · 05554321

Stefan Fritsch authored Jan 17, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1232583 13f79535-47bb-0310-9956-ffa450edef68

05554321

configure: Improve the error message when --with-included-apr is specified · fe86d4f0

Graham Leggett authored Jan 17, 2012

but either APR or APR-Util is not included.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1232575 13f79535-47bb-0310-9956-ffa450edef68

fe86d4f0

16 Jan, 2012 1 commit
- RPM: Add mod_bucketeer, mod_case_filter and mod_case_filter_in to the RPM · 0e69ce38
  Graham Leggett authored Jan 16, 2012
```
spec file.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1232224 13f79535-47bb-0310-9956-ffa450edef68
```
  0e69ce38
15 Jan, 2012 5 commits

Update xforms · 850114d5

Stefan Fritsch authored Jan 15, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231783 13f79535-47bb-0310-9956-ffa450edef68

850114d5

generated files and revision numbers · b1029ff4

Jeff Trawick authored Jan 15, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231608 13f79535-47bb-0310-9956-ffa450edef68

b1029ff4

fix syntax errors in Mutex examples · e719eb9f

Jeff Trawick authored Jan 15, 2012

Submitted by: Daniel Shahaf


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231607 13f79535-47bb-0310-9956-ffa450edef68

e719eb9f

fix const warning with strchr->ap_strchr mapping · 5d9522d1

Jeff Trawick authored Jan 15, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231602 13f79535-47bb-0310-9956-ffa450edef68

5d9522d1

remove unused function · d6ed38af

Jeff Trawick authored Jan 15, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231601 13f79535-47bb-0310-9956-ffa450edef68

d6ed38af

14 Jan, 2012 6 commits

Updates. · 7778d8d4

Lucien Gentis authored Jan 14, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231518 13f79535-47bb-0310-9956-ffa450edef68

7778d8d4

Updates. · 587fd3e2

Lucien Gentis authored Jan 14, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231510 13f79535-47bb-0310-9956-ffa450edef68

587fd3e2

Update. · 60593c39

Lucien Gentis authored Jan 14, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231509 13f79535-47bb-0310-9956-ffa450edef68

60593c39

Update. · 216f2789

Lucien Gentis authored Jan 14, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231508 13f79535-47bb-0310-9956-ffa450edef68

216f2789

Fix the request/response header error · ad4d8da7

Takashi Sato authored Jan 14, 2012

Submitted by: INOUE Seiichiro <inoue ariel-networks.com>	


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231446 13f79535-47bb-0310-9956-ffa450edef68

ad4d8da7

Add svn:keywords LastChangedRevision · b57e35ba

Takashi Sato authored Jan 14, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231442 13f79535-47bb-0310-9956-ffa450edef68

b57e35ba

13 Jan, 2012 2 commits

whitespace only: shift a block refactored in r1231255 over 8 spaces. · 6126472d
Eric Covener authored Jan 13, 2012
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231257 13f79535-47bb-0310-9956-ffa450edef68
```
6126472d

*) mod_authnz_ldap: Don't try a potentially expensive nested groups · 3ff055dc

Eric Covener authored Jan 13, 2012

search before exhausting all AuthLDAPGroupAttribute checks on the
current group. PR52464

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1231255 13f79535-47bb-0310-9956-ffa450edef68

3ff055dc

11 Jan, 2012 3 commits

add compat info to CacheQuickHandler · 56f38a6e

Eric Covener authored Jan 11, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1230286 13f79535-47bb-0310-9956-ffa450edef68

56f38a6e

SECURITY (CVE-2012-0031): Fix possible crash on shutdown if a child · b0835c73

Joe Orton authored Jan 11, 2012

changes the sb_type field in the scoreboard.  Since unprivileged
children should not be able to affect the parent in this way, this is
treated as a Low severity security issue.

Thanks to "halfdog" <me halfdog.net> for reporting this issue.

* include/scoreboard.h (global_score): Remove sb_type field.

* include/ap_mmn.h: Bump MMN for above.

* server/scoreboard.c (ap_cleanup_scoreboard, ap_create_scoreboard):
  Use a static global to store store the scoreboard type.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1230065 13f79535-47bb-0310-9956-ffa450edef68

b0835c73

More registered media types · df72b6a9

Roy T. Fielding authored Jan 11, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1229930 13f79535-47bb-0310-9956-ffa450edef68

df72b6a9