Commits · acad4fa615c58694dda5270e22e261915f9ea738 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Aug 07, 2003

split ap_process_resource_config into two functions (since we don't wanna · 69f3cf03

Andre Malo authored Aug 07, 2003

change the api). Only the first one (the ap_ entry point) now checks
for fnmatch and the second one will be called for every file/directory
included.
This, however, avoids infinite recursions, if a filename contains
wildcard characters.

PR: 22194


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100931 13f79535-47bb-0310-9956-ffa450edef68

69f3cf03

Aug 06, 2003

use bucket brigades directly when reading PUT data. This avoids · a6b67009

Andre Malo authored Aug 06, 2003

problems with content-length-modifying input filter (like deflate).

PR: 22104
Some stuff submitted by: tim@robbins.dropbear.id.au (Tim Robbins)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100919 13f79535-47bb-0310-9956-ffa450edef68

a6b67009

Aug 05, 2003

hook mimetype-forcing into fixup/LAST. This leads to consistent · d3f8137f

Andre Malo authored Aug 05, 2003

behaviour (server context vs. directory context), overrides all statically
configured mime types and doesn't clobber multiviews any longer.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100913 13f79535-47bb-0310-9956-ffa450edef68

d3f8137f

Jul 31, 2003

sync · 3d2e8f45

Andre Malo authored Jul 31, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100885 13f79535-47bb-0310-9956-ffa450edef68

3d2e8f45

Jul 30, 2003

this patch was reverted. · d390f54e

Andre Malo authored Jul 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100863 13f79535-47bb-0310-9956-ffa450edef68

d390f54e

Jul 29, 2003

ab: Work over non-loopback on Unix again. · 5c454a16

Jeff Trawick authored Jul 29, 2003

(Broken as of 2.0.47 due to dependence on an APR bug which was fixed
in 2.0.47.)

PR:   21495


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100846 13f79535-47bb-0310-9956-ffa450edef68

5c454a16

cause a lookup failure in external rewrite maps if · c2a71bf4

Andre Malo authored Jul 29, 2003

the key contains a newline.

PR: 14453
Submitted originally by: Cedric Gavage <cedric.gavage@unixtech.be>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100833 13f79535-47bb-0310-9956-ffa450edef68

c2a71bf4

Jul 28, 2003

Install config.nice into the build/ directory to make · dfbd508e

Joshua Slive authored Jul 28, 2003

minor version upgrades easier.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100819 13f79535-47bb-0310-9956-ffa450edef68

dfbd508e

allow piped rewrite logs to be relative to serverroot · 067d7e1c

Andre Malo authored Jul 28, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100818 13f79535-47bb-0310-9956-ffa450edef68

067d7e1c

Sync changes with backported patches. · 231c2127

Justin Erenkrantz authored Jul 28, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100807 13f79535-47bb-0310-9956-ffa450edef68

231c2127

Jul 23, 2003

sync · 3d57cab6

Andre Malo authored Jul 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100752 13f79535-47bb-0310-9956-ffa450edef68

3d57cab6

sync · 21c9d289

Andre Malo authored Jul 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100750 13f79535-47bb-0310-9956-ffa450edef68

21c9d289

Jul 22, 2003

Don't attempt to hold all of the response until we're done. We'll pass data on · f8e2e5bc

Justin Erenkrantz authored Jul 22, 2003

when the zlib buffer becomes full and we need to reset the buffer anyway.

Also, tidy up a similar semantic when we see the EOS by returning an error
if ap_pass_brigade gets an error (we'd lose it otherwise).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100730 13f79535-47bb-0310-9956-ffa450edef68

f8e2e5bc

Jul 21, 2003

Fixed a trio of mod include bugs. The first two were · c1f1d9b8

Cliff Woolley authored Jul 21, 2003

reported and investigated by Ron Park on dev@httpd in msgid
<161E04AB9955D54E826FD86360578554D27087@169.32.17.10.nat.cnet.com>;
the third was reported by Kevin Varley in PR 21095.

Bug 1:  An incorrect parameter to bndm() was causing start sequences
        that spanned buckets to drop characters.
Bug 2:  Failed conditional text spanning brigades would cause portions
        of the text that should have been removed to be present anyway.
Bug 3:  Dropped characters when the end sequence spanned an
        8000-byte boundary with MMAP off.

PR: 21095
Submitted by:	Ron Park <ronald.park@cnet.com>, Andr� Malo, Cliff Woolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100728 13f79535-47bb-0310-9956-ffa450edef68

c1f1d9b8

Prevent segfaults after SSL renegotiation failures. · 006872c6

Joe Orton authored Jul 21, 2003

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Set aborted flag
after renegotiation failure.

* modules/ssl/ssl_engine_io.c (ssl_filter_write, ssl_io_filter_output):
Don't dereference BIOs in filter_ctx when filter_ctx->pssl is NULL.
(ssl_filter_io_shutdown): Set aborted flag on abortive shutdown.

PR: 21370
Submitted by: Hartmut Keil <Hartmut.Keil@adnovum.ch>
Cleaned up by: Jeff Trawick, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100720 13f79535-47bb-0310-9956-ffa450edef68

006872c6

reject overlong credentials from the commandline · 59b42e8c

Andre Malo authored Jul 21, 2003

Acked by: Cliff Woolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100718 13f79535-47bb-0310-9956-ffa450edef68

59b42e8c

Jul 16, 2003

· d8e3a94d

Paul J. Reder authored Jul 16, 2003

Just fixing some improperly formatted entries.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100649 13f79535-47bb-0310-9956-ffa450edef68

d8e3a94d

Jul 15, 2003

· 95855a2b

Paul J. Reder authored Jul 15, 2003

Update the header token parsing code to allow LWS between the
token word and the ':' seperator.  [PR 16520]
[submitted: Kris Verbeeck <kris.verbeeck@advalvas.be> and
            Nicel KM <mnicel@yahoo.com>]
[Reviewed: <coad@measurement-factory.com> and
           Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100642 13f79535-47bb-0310-9956-ffa450edef68

95855a2b

· 3481be6d

Paul J. Reder authored Jul 15, 2003

Eliminate creation of a temporary table in ap_get_mime_headers_core()
Submitted by:   Joe Schaefer <joe+gmane@sunstarsys.com>
Reviewed by:    Brian Pane
Backported by:  Paul J. Reder


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100638 13f79535-47bb-0310-9956-ffa450edef68

3481be6d

Ignore RewriteRules in .htaccess files if the directory · c6e61b1d

Andre Malo authored Jul 15, 2003

containing the .htaccess file is requested without a trailing slash.

PR: 20195

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100632 13f79535-47bb-0310-9956-ffa450edef68

c6e61b1d

If a directory contains a file listed in the · 3e2c6972

Andre Malo authored Jul 15, 2003

DirectoryIndex directive, the folder icon is no longer replaced
by the icon of that file.

PR:	9587
Submitted by:	David Shane Holden <dpejesh@yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100628 13f79535-47bb-0310-9956-ffa450edef68

3e2c6972

Jul 14, 2003

strip trailing spaces of groupnames. · 0457c9d6

Andre Malo authored Jul 14, 2003

PR:	12863


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100620 13f79535-47bb-0310-9956-ffa450edef68

0457c9d6

· 872f17a0

Paul J. Reder authored Jul 14, 2003

Remove some extraneous code committed as part of the fix for 13946 pointed
out by Andre Malo. [Paul J. Reder]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100615 13f79535-47bb-0310-9956-ffa450edef68

872f17a0

mod_ssl: Fix a problem setting variables that represent the · c97f0349

Jeff Trawick authored Jul 14, 2003

client certificate chain.

PR:  21371


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100605 13f79535-47bb-0310-9956-ffa450edef68

c97f0349

Remember an authenticated user during internal redirects if the · 4dc16beb

Andre Malo authored Jul 14, 2003

redirection target is not access protected and pass it
to scripts using the REDIRECT_REMOTE_USER environment variable.

PR: 10678, 11602.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100604 13f79535-47bb-0310-9956-ffa450edef68

4dc16beb

· a5aaa65c

Paul J. Reder authored Jul 14, 2003

Ooops, forgot the PR number for my recent mod_rewrite commit (PR #13946)...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100601 13f79535-47bb-0310-9956-ffa450edef68

a5aaa65c

· a6bf1186

Paul J. Reder authored Jul 14, 2003

mod_rewrite: fix a problem in the proxy support of mod_rewrite. The broken
code was inserting multiple "proxy:" fields in the rewritten URIs.
[Submitted by:  Eider Oliveira <eider@bol.com.br>]
[Updated and reviewed by: Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100600 13f79535-47bb-0310-9956-ffa450edef68

a6bf1186

Propagate the handler name to the action script via · 1a0f0edb

Andre Malo authored Jul 14, 2003

the REDIRECT_HANDLER environment variable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100598 13f79535-47bb-0310-9956-ffa450edef68

1a0f0edb

mod_ext_filter: Set additional environment variables for use by · c805df98

Jeff Trawick authored Jul 14, 2003

the external filter.

PR:    20944

The missing code was identified by Andrew Ho, coded/tested by Jeff
Trawick, and verified yet again by Neil Fraser.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100595 13f79535-47bb-0310-9956-ffa450edef68

c805df98

Introduce the "virtual" modifier to the Action directive, · 3521e6f0

Andre Malo authored Jul 14, 2003

which allows the use of handlers for virtual locations.

PR:	8431


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100589 13f79535-47bb-0310-9956-ffa450edef68

3521e6f0

Jul 12, 2003

let mod_speling use the current AcceptPathInfo setting. · 327c3e49

Andre Malo authored Jul 12, 2003

Default is: reject

PR: 21059


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100566 13f79535-47bb-0310-9956-ffa450edef68

327c3e49

sync · 9922f72a

Andre Malo authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100563 13f79535-47bb-0310-9956-ffa450edef68

9922f72a

Jul 09, 2003

Forward port patch for CAN-2003-0192 from 2.0. · cd2c6d3a

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences
of per-directory renegotiations and the SSLCipherSuite directive
being used to upgrade from a weak ciphersuite to a strong one
could result in the weak ciphersuite being used in place of the
strong one. [Ben Laurie]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100518 13f79535-47bb-0310-9956-ffa450edef68

cd2c6d3a

Forward port patch for CAN-2003-0253 from 2.0. · 9bc02aba

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing
temporary denial of service when accept() on a rarely accessed port
returns certain errors.  Reported by Saheed Akhtar
<S.Akhtar@talis.com>.  [Jeff Trawick]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100517 13f79535-47bb-0310-9956-ffa450edef68

9bc02aba

Forward port security patch for CAN-2003-0254 from 2.0. · 46e359cd

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial
of service when target host is IPv6 but proxy server can't create
IPv6 socket.  Fixed by the reporter.  [Yoshioka Tsuneo
<tsuneo.yoshioka@f-secure.com>]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100516 13f79535-47bb-0310-9956-ffa450edef68

46e359cd

Sync CHANGES entry for VU#379828 with 2.0 · 3f91f671

Sander Striker authored Jul 09, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100515 13f79535-47bb-0310-9956-ffa450edef68

3f91f671

Jul 08, 2003

· 9c2f26b8

Paul J. Reder authored Jul 08, 2003

Update the header token parsing code to allow LWS between the token word
and the ':' seperator.  [PR 16520]
[submitted: Kris Verbeeck <kris.verbeeck@advalvas.be> and
            Nicel KM <mnicel@yahoo.com>]
[Reviewed: <coad@measurement-factory.com> and
           Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100492 13f79535-47bb-0310-9956-ffa450edef68

9c2f26b8

Jul 07, 2003

move the entry for a fix just merged into 2.0.48-dev · ada59358

Jeff Trawick authored Jul 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100482 13f79535-47bb-0310-9956-ffa450edef68

ada59358

move the entry for a fix just merged into 2.0.48-dev · 16029d16

Jeff Trawick authored Jul 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100480 13f79535-47bb-0310-9956-ffa450edef68

16029d16

Jul 01, 2003

mod_ext_filter: Add the ability to filter request bodies. · 49b175b2

Jeff Trawick authored Jul 01, 2003

Submitted by: Philipp Reisner <philipp.reisner@linbit.com>
Reviewed by: Jeff Trawick

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100429 13f79535-47bb-0310-9956-ffa450edef68

49b175b2