Commits · aafa7afb8b5fccb114754f17d3d5af3995636179 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Mar 22, 2001

Fix a major security problem with double-reverse lookup checking. · aafa7afb

Jeff Trawick authored Mar 22, 2001

Previously, a client connecting over IPv4 would not be matched
properly when the server had an IPv6 listening socket.

PR:	      7407
Submitted by: Taketo Kabe <kiabe@sra-tohoku.co.jp>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88561 13f79535-47bb-0310-9956-ffa450edef68

aafa7afb

Mar 21, 2001

Add a not to the CHANGES file now that I've had confirmation that the · 1112a9f8

David Reid authored Mar 21, 2001

changes made last night actually work :)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88556 13f79535-47bb-0310-9956-ffa450edef68

1112a9f8

Mar 20, 2001

Empty out the brigade shared by ap_getline()/ap_get_client_block() · b11e11c2

Jeff Trawick authored Mar 20, 2001

on error exit from ap_getline(). Some other code got upset because
the wrong data was in the brigade.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88552 13f79535-47bb-0310-9956-ffa450edef68

b11e11c2

Mar 19, 2001

Handle ap_discard_request_body() being called more than once. · 893e5886

Jeff Trawick authored Mar 19, 2001

Add a debug assertion to verify that c->remain is zero when a new
request starts. ap_http_filter() does the wrong thing otherwise.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88540 13f79535-47bb-0310-9956-ffa450edef68

893e5886

Fix a problem in mod_mime_magic where file descriptor 2 would be · 77bc182a

Jeff Trawick authored Mar 19, 2001

inadvertently closed.  This logic was in the uncompress child in 1.3
but was in the parent in 2.0.

uncompress_child() was renamed to create_uncompress_child() to reflect
a change in use since 1.3.

A note was added about missing 1.3 logic for doing something with the
stderr of the uncompress process.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88538 13f79535-47bb-0310-9956-ffa450edef68

77bc182a

Mar 18, 2001

Add a hook, create_request. This hook allows modules to modify · 39175ff5

Ryan Bloom authored Mar 18, 2001

a request while it is being created.  This hook is called for all
request_rec's, main request, sub request, and internal redirect.
When this hook is called, the the r->main, r->prev, r->next
pointers have been set, so modules can determine what kind of
request this is.

Currently, this is only used by the core module, but protocol modules
are going to need to have the ability to affect the request while it is
being read.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88532 13f79535-47bb-0310-9956-ffa450edef68

39175ff5

Mar 16, 2001

Cleanup the build process a bit more. The Apache configure · 33e9af19

Ryan Bloom authored Mar 16, 2001

script no longer creates its own helper scripts, it just
uses APR's.
Submitted by:	jean-frederic clere <jfrederic.clere@fujitsu-siemens.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88530 13f79535-47bb-0310-9956-ffa450edef68

33e9af19

Stops the forced downgrade of the connection to HTTP/1.0 for proxy requests. · 2cc986c1

Chuck Murcko authored Mar 16, 2001

Submitted by:	Graham Leggett
Reviewed by:	Chuck Murcko


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88528 13f79535-47bb-0310-9956-ffa450edef68

2cc986c1

This is a fix that went into v1.3 quite a while back, but not into v2.0. · be7f948b

Chuck Murcko authored Mar 16, 2001

It sorts out the problem when a password protected reverse proxy URL
sends a Proxy-Authenticate to a browser instead of a WWW-Authenticate.

This patch covers the changes to the httpd-2.0 tree.

Submitted by:	Graham Leggett
Reviewed by:	Chuck Murcko


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88527 13f79535-47bb-0310-9956-ffa450edef68

be7f948b

Avoid using sscanf to determine the HTTP protocol number in · b9b274a1

Bill Stoddard authored Mar 16, 2001

the common case because sscanf is a performance hog. From
Mike Abbot's Accelerating Apache patch number 6.

Submitted by: Mike Abbot <mja@trudge.engr.sgi.com>
Reviewed by: Bill Stoddard


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88523 13f79535-47bb-0310-9956-ffa450edef68

b9b274a1

Mar 15, 2001

Fix a security exposure in mod_access. Previously when IPv6 · 8aa41688

Jeff Trawick authored Mar 15, 2001

listening sockets were used, allow/deny-from-IPv4-address rules
were not evaluated properly (PR #7407). Also, add the ability to
specify IPv6 address strings with optional prefix length on Allow
and Deny.

Note: A bit more of PR #7407 remains dealing with a problem with
double-reverse lookups when an IPv6 listening socket is used.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88522 13f79535-47bb-0310-9956-ffa450edef68

8aa41688

Mar 13, 2001

· 9e983d79

Ken Coar authored Mar 13, 2001

Enhance customisability of rotatelogs: strftime(3)
formatting of filename and offset from UTC.

Reviewed by: Greg Stein, David Reid, OtherBill

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88511 13f79535-47bb-0310-9956-ffa450edef68

9e983d79

Mar 12, 2001

*) Reimplement the Windows MPM (mpm_winnt.c) to eliminate calling · 7b9cc3ab

Bill Stoddard authored Mar 12, 2001

     DuplicateHandle on an IOCompletionPort (a practice which
     MS "discourages"). The new model does not rely on associating
     the completion port with the listening sockets, thus the
     completion port can be completely managed within the child
     process.  A dedicated thread accepts connections off the network,
     then calls PostQueuedCompletionStatus() to wake up worker
     threads blocked on the completion port.
     [Bill Stoddard]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88498 13f79535-47bb-0310-9956-ffa450edef68

7b9cc3ab

Mar 11, 2001

· 8f470299

Ken Coar authored Mar 11, 2001

Bring forward the suexec umask setting option from 1.3, and
also fix some configure.in bits that would define macros
that needed to be numbers as strings instead.

Obtained from: Apache HTTP Server 1.3

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88493 13f79535-47bb-0310-9956-ffa450edef68

8f470299

OtherBill told me last night that I never bumped for 2.0.15. Whoops. · 6e8a68bd
Ryan Bloom authored Mar 11, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88491 13f79535-47bb-0310-9956-ffa450edef68
```
6e8a68bd

Mar 09, 2001

· e12ad27f

Ken Coar authored Mar 09, 2001

Bring forward the -V option for suexec from 1.3.20-dev. It looks
like the umask() option needs to be brought forward, as well.
Is this still 2.0.14-dev?

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88483 13f79535-47bb-0310-9956-ffa450edef68

e12ad27f

Mar 08, 2001

Always clear the C-L if we are going to try to parse the file. It is · 51b976ab

Ryan Bloom authored Mar 08, 2001

impossible for us to determine if there is going to be an SSI tag in the
file until we have actually scanned it all. By that time, it is likely
that the first chunk of data, and the headers have been sent to the client,
and it is too late to clear the C-L. If we are parsing the file, we have
to just assume we are going to change the content.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88477 13f79535-47bb-0310-9956-ffa450edef68

51b976ab

Mar 07, 2001

Bump for version 2.0.14 · 3028f46c

Ryan Bloom authored Mar 07, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88465 13f79535-47bb-0310-9956-ffa450edef68

3028f46c

Fix content-length computation. We ONLY compute a content-length if · 0cff629d

Ryan Bloom authored Mar 07, 2001

We are not in a 1.1 request and we cannot chunk, and this is a keepalive
or we already have all the data.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88464 13f79535-47bb-0310-9956-ffa450edef68

0cff629d

Mar 06, 2001

Report unbounded containers in the config file. Previously, a typo · 65ca4c3e

Jeff Trawick authored Mar 06, 2001

in the </container> directive could result in the rest of the config
file being silently ignored, with undesired defaults used.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88461 13f79535-47bb-0310-9956-ffa450edef68

65ca4c3e

Mar 05, 2001

Make the old_write filter use the ap_f* functions for buffering the data. · 3c4c5c70

Ryan Bloom authored Mar 05, 2001

This has been tested with a couple of directory listings, but it could
probably use a bit more testing before being declared stable.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88454 13f79535-47bb-0310-9956-ffa450edef68

3c4c5c70

Mar 04, 2001

Move more code from the http module into the core server. This · ca8088ad

Ryan Bloom authored Mar 04, 2001

is core code, basically the default handler, the default input
and output filters, and all of the core configuration directives.
All of this code is required in order for the server to work, with or
without HTTP. The server is closer to working without the HTTP
module, although there is still more to do.

I tried to fix Windows, but somebody should probably make sure I did
it correctly.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88449 13f79535-47bb-0310-9956-ffa450edef68

ca8088ad

Mar 03, 2001

mention the changes to Apache for PR #6980 · 9492f779

Jeff Trawick authored Mar 03, 2001

PR:		6980


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88446 13f79535-47bb-0310-9956-ffa450edef68

9492f779

Mar 02, 2001

Allow modules to query the MPM about it's execution profile. This · 86fa0cb0

Ryan Bloom authored Mar 02, 2001

query API can and should be extended in the future, but for now,
max_daemons, and threading or forking is a very good start.

Non-Unix MPM's do have the MPM query function, although there is no
garauntee that the information is perfect, please check.

Submitted by: Jon Travis <jtravis@covalent.net>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88437 13f79535-47bb-0310-9956-ffa450edef68

86fa0cb0

Modify mod_include to send blocks of data no larger than 9k. · 6b5cbd6d

Ryan Bloom authored Mar 02, 2001

Without this, mod_include will wait until the whole file is parsed,
or the first tag is found to send any data to the client.
Submitted by: Paul J. Reder <rederpj@raleigh.ibm.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88417 13f79535-47bb-0310-9956-ffa450edef68

6b5cbd6d

Fix mod_info, so that <Directory> and <Location> directives are · 02b42068

Ryan Bloom authored Mar 02, 2001

not displayed twice when displaying the current configuration.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88416 13f79535-47bb-0310-9956-ffa450edef68

02b42068

Feb 26, 2001

Add config directives to override the DEFAULT_ERROR_MSG and · a0cf2a57

Ryan Bloom authored Feb 26, 2001

DEFAULT_TIME_FORMAT.
PR:	6193
Submitted by:	Dan Rench <drench@xnet.com>
Reviewed by:	Ryan Bloom


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88346 13f79535-47bb-0310-9956-ffa450edef68

a0cf2a57

· aa082584

William A. Rowe Jr authored Feb 26, 2001

  cold and damp in Chicago tonight, turning colder and frozen.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88343 13f79535-47bb-0310-9956-ffa450edef68

aa082584

Begin to move functions from the http module to the core. The goal is to · deb7ee64

Ryan Bloom authored Feb 26, 2001

have only functions that are HTTP specific in the http directory.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88341 13f79535-47bb-0310-9956-ffa450edef68

deb7ee64

Feb 25, 2001

2.0.13 is tagged, so bump everything for 2.0.14 · 98df0297

Ryan Bloom authored Feb 25, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88327 13f79535-47bb-0310-9956-ffa450edef68

98df0297

Don't assume that the byterange filter will always be called more than · a9b373a4

Ryan Bloom authored Feb 25, 2001

once. It is perfectly legal to call the byterange filter one time,
with all the data. Without this patch, that case will seg fault.
Submitted by: Ryan Morgan <rmogran@covalent.net>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88320 13f79535-47bb-0310-9956-ffa450edef68

a9b373a4

Move the error_bucket definition from the HTTP module to the core server. · ef4cf81c

Ryan Bloom authored Feb 25, 2001

Every protocol will need this definition, so it belongs in the core.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88318 13f79535-47bb-0310-9956-ffa450edef68

ef4cf81c

Feb 23, 2001

Modify mod_file_cache to save pre-formatted strings for · 7fda6ba0

Bill Stoddard authored Feb 23, 2001

content-length and last-modified headers for performance.

Submitted by:  Mike Abbot <mja@trudge.engr.sgi.com>
Reviewed by: Bill Stoddard


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88292 13f79535-47bb-0310-9956-ffa450edef68

7fda6ba0

Namespace protect IOBUFSIZ since it is a public symbol. · 8fef8a0b

Ryan Bloom authored Feb 23, 2001

Submitted by:	Jon Travis <jtravis@covalent.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88282 13f79535-47bb-0310-9956-ffa450edef68

8fef8a0b

Feb 22, 2001

Use "Basic" authentication instead of "basic" in ab, as the spec says we · 71e040e8

Ryan Bloom authored Feb 22, 2001

should.
PR:	7294
Submitted by:	Andre Breiler <andre.breiler@rd.bbc.co.uk>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88281 13f79535-47bb-0310-9956-ffa450edef68

71e040e8

Fix a seg fault in mod_userdir.c. We used to use the pw structure · 67221af9

Ryan Bloom authored Feb 22, 2001

without ever filling it out.

PR:	7271
Submitted by:	Taketo Kabe <kabe@sra-tohoku.co.jp> and Cliff Woolley <cliffwoolley@yahoo.com>]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88279 13f79535-47bb-0310-9956-ffa450edef68

67221af9

Add a couple of GCC attribute tags to printf style functions. This also · 54e9f59e

Ryan Bloom authored Feb 22, 2001

fixes a couple of mismatched parameters highlighted revealed by the
attribute.
Submitted by:   Jon Travis <jtravis@covalent.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88271 13f79535-47bb-0310-9956-ffa450edef68

54e9f59e

Add the correct language tag for interoperation with the Taiwanese · 9574beb7

Tony Finch authored Feb 22, 2001

versions of MSIE and Netscape.

PR:             7142
Submitted by:   Clive Lin <clive@CirX.ORG>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88270 13f79535-47bb-0310-9956-ffa450edef68

9574beb7

Feb 21, 2001

Make the perchild MPM use the APR signal child and apr thread functions. · 54aa33e7

Ryan Bloom authored Feb 21, 2001

This allows perchild to compile and run out of CVS again.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88267 13f79535-47bb-0310-9956-ffa450edef68

54aa33e7

Close the accepted socket before creating the CGI process in mod_cgid. · 1ef99d7b

Ryan Bloom authored Feb 21, 2001

This is safe, because we have already dup'ed the socket for the CGI
process itself.  This change allows CGI processes to fork long-lived
child processes without affecting how quickly the response gets back
to the broswer.

PR:	7273
Submitted by:	Taketo Kabe <kabe@sra-tohoku.co.jp>
Reviewed by:	Ryan Bloom


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88264 13f79535-47bb-0310-9956-ffa450edef68

1ef99d7b