Commits · b62df8d233147e92dece9ef377ae39ba1f20a2af · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Nov 25, 2003

Remove shmht session cache in favour of shmcb; shmht has had · b62df8d2

Joe Orton authored Nov 25, 2003

data corruption bugs since being apr_rmm'ified.

* config.m4, mod_ssl.dsp: Don't build ssl_util_table and
ssl_scache_shmht.

* ssl_util_table.h, ssl_util_table.c, ssl_scache_shmht.c: Removed
files.

* mod_ssl.h (SSLModConfigRec): Use a void * pointer for storing
the scache-specific data.

* ssl_engine_config.c (ssl_cmd_SSLSessionCache): Treat shmht: as
shmcb:.

* ssl_scache.c: Remove shmht hooks throughout.

* ssl_scache_shmcb.c: Remove casts to use the table_t * pointer as a
void *.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101888 13f79535-47bb-0310-9956-ffa450edef68

b62df8d2

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_version): · 29af1821

Joe Orton authored Nov 25, 2003

Determine the library version string at run-time rather than at
compile-time.

Submitted by: Eric Seidel <eseidel@apple.com>
PR: 23956


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101879 13f79535-47bb-0310-9956-ffa450edef68

29af1821

Nov 24, 2003

SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the · 88f26135

Andre Malo authored Nov 24, 2003

errorlog.

Reviewed by: Mark J Cox


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101873 13f79535-47bb-0310-9956-ffa450edef68

88f26135

Nov 22, 2003

· 1d0b9aba

Paul J. Reder authored Nov 22, 2003

A better solution than my previous commit as pointed out by Andre Malo.
mod_expires: Initialize ExpiresDefault to NULL instead of "" to
avoid reporting an Internal Server error if it is used without
having been set in the httpd.conf file. PR: 23748, 24459
Submitted: Andre Malo, Liam Quinn <liam htmlhelp.com>
Reviewed: Andre Malo, Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101846 13f79535-47bb-0310-9956-ffa450edef68

1d0b9aba

Nov 21, 2003

sync · 73ac7215

Andre Malo authored Nov 21, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101845 13f79535-47bb-0310-9956-ffa450edef68

73ac7215

· 11a9e3b4

Paul J. Reder authored Nov 21, 2003

mod_expires: Don't report an Internal Server error if ExpiresDefault
is used and has not been set in the httpd.conf file. PR: 23748, 24459

Submitted: Liam Quinn <liam htmlhelp.com>
Reviewed: Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101839 13f79535-47bb-0310-9956-ffa450edef68

11a9e3b4

Account for some bytes handed to the network layer prior to · 2a3c2152

Jeff Trawick authored Nov 21, 2003

dropped connections.

Such bytes were counted on some paths but not on others.  If
these bytes are to be counted in some error paths, they should
be counted in the others.  We don't know if they were actually
presented to the client.

AFAIK, this only affects mod_logio.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101832 13f79535-47bb-0310-9956-ffa450edef68

2a3c2152

Fix a problem with the display of empty variables ("SetEnv foo") in · 70654fd8

Jeff Trawick authored Nov 21, 2003

mod_include.  Now it works like 1.3 (see PR for details).  Setting
of envvars for scripts was/is consistent with 1.3 for empty variables.

PR:           24734
Submitted by: Markus Julen <mj zermatt.net>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101830 13f79535-47bb-0310-9956-ffa450edef68

70654fd8

Nov 20, 2003

sync with stable branch · 446f4dfb

Jeff Trawick authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101819 13f79535-47bb-0310-9956-ffa450edef68

446f4dfb

Win32: Make Win32 MPM transaction pools honor MaxMemFree · 4ae7b10a

Bill Stoddard authored Nov 20, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101817 13f79535-47bb-0310-9956-ffa450edef68

4ae7b10a

mod_autoindex: new directive IndexStyleSheet · bff3bad5

Ian Holsman authored Nov 20, 2003


PR:
Obtained from:
Submitted by: Tyler Riddle <triddle_1999 yahoo.com> and Paul Querna <chip force-elite.com>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101809 13f79535-47bb-0310-9956-ffa450edef68

bff3bad5

Nov 13, 2003

sync with stable branch · 80a92a45

Jeff Trawick authored Nov 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101779 13f79535-47bb-0310-9956-ffa450edef68

80a92a45

Nov 12, 2003

· 56fafca3

William A. Rowe Jr authored Nov 12, 2003

Normalize email addresses for the purpose of deliberate but simple-to-read
obscufication.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101763 13f79535-47bb-0310-9956-ffa450edef68

56fafca3

Nov 07, 2003

Fix a long delay with CGI requests and keepalive connections on · fe0f3b56

Jeff Trawick authored Nov 07, 2003

AIX.

On AIX, for processes like mod_cgid's script children where
SIGCHLD is ignored, kill(pid,0) returns success for up to
one second after the script child exits, based on when a
daemon runs to clean up unnecessary process table entries.
getpgid() can report the proper info (-1/ESRCH) immediately.

One user had a page with a lot of embedded images created by
CGIs, and the browser fetched them on a keepalive connection,
and the cumulative delays were very noticeable by the clients.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101716 13f79535-47bb-0310-9956-ffa450edef68

fe0f3b56

Fix uninitialized gprof directory name in prefork MPM. · 826d0b0f

Jeff Trawick authored Nov 07, 2003

PR:           24450
Submitted by: Chris Knight <Christopher.D.Knight@nasa.gov>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101714 13f79535-47bb-0310-9956-ffa450edef68

826d0b0f

Nov 06, 2003

mod_auth_ldap: Fix some segfaults in the cache logic. · 2d7f4054

Jeff Trawick authored Nov 06, 2003

PR:                18756
Submitted by:      Matthieu Estrade <apache@moresecurity.org>
Reviewed by:       Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101706 13f79535-47bb-0310-9956-ffa450edef68

2d7f4054

Nov 03, 2003

darn, the patch for bug 9587 (wrong icon for directories shown) broke · 949596d3

Andre Malo authored Nov 03, 2003

the directory descriptions more or less completely. Fix it now.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101693 13f79535-47bb-0310-9956-ffa450edef68

949596d3

Nov 02, 2003

no longer allow an ETag header in 304 responses. · 32bcbea1

Andre Malo authored Nov 02, 2003

PR: 19355
Submitted by: Geoffrey Young <geoff@apache.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101687 13f79535-47bb-0310-9956-ffa450edef68

32bcbea1

- add XHTML doctypes to httpd.h · 7523d8a7

Andre Malo authored Nov 02, 2003

- fix the (x)html output of mod_autoindex to be consistent
  and make it configurable to emit either HTML or XHTML

PR: 23747


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101683 13f79535-47bb-0310-9956-ffa450edef68

7523d8a7

fix optimizer to not throw away a regex if it stumbles over it. · 981b83ed

Andre Malo authored Nov 02, 2003

PR: 24219


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101665 13f79535-47bb-0310-9956-ffa450edef68

981b83ed

Nov 01, 2003

Don't omit the initial <tr> if SuppressIcon is set. · 1f2ddd5b

Andre Malo authored Nov 01, 2003

Submitted by: Jesse Tie-Ten-Quee <highos@highos.com>
PR: 21668


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101661 13f79535-47bb-0310-9956-ffa450edef68

1f2ddd5b

Let mod_autoindex show filenames containing special chars like %. · b21bcca1

Andre Malo authored Nov 01, 2003

PR: 13598


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101659 13f79535-47bb-0310-9956-ffa450edef68

b21bcca1

sync with stable branch · aa762576

Jeff Trawick authored Nov 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101651 13f79535-47bb-0310-9956-ffa450edef68

aa762576

sync with stable branch · a3d76d1d

Jeff Trawick authored Nov 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101648 13f79535-47bb-0310-9956-ffa450edef68

a3d76d1d

Oct 30, 2003

* modules/generators/mod_info.c: · d3f0f5ca

Thom May authored Oct 30, 2003

        (mod_info_module_cmds) ap_escape_html() all directives and
        arguments.
PR: 24232


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101626 13f79535-47bb-0310-9956-ffa450edef68

d3f0f5ca

Oct 29, 2003

mod_status: Report total CPU time accurately when using a threaded · f5448c23

Jeff Trawick authored Oct 29, 2003

MPM.

Note: It worked before with linuxthreads and it still does.  But now
it works with normal thread implementations too.

PR:     23795


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101614 13f79535-47bb-0310-9956-ffa450edef68

f5448c23

Oct 26, 2003

Forward port from 2.0: · 20784b13

Sander Striker authored Oct 26, 2003

SECURITY [CAN-2003-0789]: mod_cgid: Resolve some mishandling of
the AF_UNIX socket used to communicate with the cgid daemon and
the CGI script.

Submitted by: Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101570 13f79535-47bb-0310-9956-ffa450edef68

20784b13

Oct 24, 2003

Fold in the CAN-2003-0542 regex patch. · 49a9edff

Sander Striker authored Oct 24, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101556 13f79535-47bb-0310-9956-ffa450edef68

49a9edff

Oct 23, 2003

sync · 5d57a16a

Andre Malo authored Oct 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101540 13f79535-47bb-0310-9956-ffa450edef68

5d57a16a

* modules/ssl/ssl_engine_vars.c (ssl_var_log_handler_c): Fix · daa2f29b

Joe Orton authored Oct 23, 2003

segfault on a non-SSL request.

PR: 22741
Submitted by: Gary E. Miller <gem@rellim.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101534 13f79535-47bb-0310-9956-ffa450edef68

daa2f29b

Oct 22, 2003

Set the scoreboard state to indicate logging prior to running · 4a618b72

Jeff Trawick authored Oct 22, 2003

logging hooks so that server-status will show 'L' for hung loggers
instead of 'W'.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101517 13f79535-47bb-0310-9956-ffa450edef68

4a618b72

Oct 15, 2003

sync with APACHE_2_0_BRANCH · e4a95b03

Jeff Trawick authored Oct 15, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101464 13f79535-47bb-0310-9956-ffa450edef68

e4a95b03

fix segfault which occured if the filename was not · 90261c34

Andre Malo authored Oct 15, 2003

set, for example, when processing some error conditions.

PR: 23836


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101461 13f79535-47bb-0310-9956-ffa450edef68

90261c34

Oct 14, 2003

backported this change to 2.0: · 1f5da61f

Stas Bekman authored Oct 14, 2003

     fix the config parser to support <Foo>..</Foo> containers (no
     arguments in the opening tag) supported by httpd 1.3. Without
     this change mod_perl 2.0's <Perl> sections are broken.
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101445 13f79535-47bb-0310-9956-ffa450edef68

1f5da61f

Oct 11, 2003

fix the config parser to support <Foo>..</Foo> containers (no · 695ab620

Stas Bekman authored Oct 11, 2003

arguments in the opening tag) supported by httpd 1.3. Without
this change mod_perl 2.0's <Perl> sections are broken.
PR:
Obtained from:
Submitted by:	"Philippe M. Chiasson" <gozer@cpan.org>
Reviewed by:	stas


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101415 13f79535-47bb-0310-9956-ffa450edef68

695ab620

reflect backported change · 31b9d816

Roy T. Fielding authored Oct 11, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101413 13f79535-47bb-0310-9956-ffa450edef68

31b9d816

Oct 10, 2003

do sync. · 30894628

Andre Malo authored Oct 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101403 13f79535-47bb-0310-9956-ffa450edef68

30894628

Oct 02, 2003

mod_cgid: fix a hash table corruption problem which could · 602f8cb2

Jeff Trawick authored Oct 02, 2003

result in the wrong script being cleaned up at the end of a
request.

Unique storage was not used for the key, as the code assumed
incorrectly that apr_hash_set() made a copy of the key.  Thus,
when the script pid was looked up at the end of the request,
some other script's pid could be found.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101374 13f79535-47bb-0310-9956-ffa450edef68

602f8cb2

Sep 30, 2003

· b26c4d23

Paul J. Reder authored Sep 30, 2003

Update as a result of a backport.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101359 13f79535-47bb-0310-9956-ffa450edef68

b26c4d23

Typo · db1235cb

Martin Kraemer authored Sep 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101354 13f79535-47bb-0310-9956-ffa450edef68

db1235cb