Commits · b973d4bae070d11e7a36ca949a4cd3d94c25e3b6 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Sep 18, 2009

Nilgun Belma Buguner authored Sep 18, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@816419 13f79535-47bb-0310-9956-ffa450edef68

b973d4ba

update transformation · ee1b89df

Nilgun Belma Buguner authored Sep 18, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@816418 13f79535-47bb-0310-9956-ffa450edef68

ee1b89df

Sep 17, 2009

Treat gid's identically to uid's for purposes of numeric formatting. · ce3eb102
William A. Rowe Jr authored Sep 17, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@816388 13f79535-47bb-0310-9956-ffa450edef68
```
ce3eb102

use what we know · 5ba10eeb

Jim Jagielski authored Sep 17, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@816361 13f79535-47bb-0310-9956-ffa450edef68

5ba10eeb

kinda old · 76aa023c

Jim Jagielski authored Sep 17, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@816203 13f79535-47bb-0310-9956-ffa450edef68

76aa023c

Sep 16, 2009

Note that RewriteLog doesn't work in .htaccess files. · cd2d3bdc

Richard Bowen authored Sep 16, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815946 13f79535-47bb-0310-9956-ffa450edef68

cd2d3bdc

* prevent a fork bomb if the accept mutex is clobbered by exiting with · 7057fdf2

Greg Ames authored Sep 16, 2009

  APEXIT_CHILDSICK if the worker process hasn't served any requests
* move the accept mutex error leg into its own function to take advantage of
  common code and to keep rarely executed instructions out of the mainline
  instruction cache.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815915 13f79535-47bb-0310-9956-ffa450edef68

7057fdf2

* server/log.c: Update comment in piped_log structure, now it is · 80dab084

Joe Orton authored Sep 16, 2009

  has been made opaque.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815811 13f79535-47bb-0310-9956-ffa450edef68

80dab084

Just a little additional verbiage for the FallbackResource directive. · 1b181a72
Richard Bowen authored Sep 16, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815782 13f79535-47bb-0310-9956-ffa450edef68
```
1b181a72

* modules/ssl/ssl_util_ocsp.c, modules/ssl/ssl_engine_ocsp.c: · c63ba14c

Joe Orton authored Sep 16, 2009

  Move comment on I/O timeout to appropriate place, thanks to
  Steve Henson.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815741 13f79535-47bb-0310-9956-ffa450edef68

c63ba14c

* modules/ssl/ssl_util_ocsp.c (send_request, · 70d9bc7b

Joe Orton authored Sep 16, 2009

  modssl_dispatch_ocsp_request): Take timeout as argument, as pass through.
  
* modules/ssl/ssl_engine_ocsp.c (verify_ocsp_status): Pass server timeout
  to modssl_dispatch_ocsp_request.

Submitted by: Dr Stephen Henson <shenson oss-institute.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815719 13f79535-47bb-0310-9956-ffa450edef68

70d9bc7b

Sep 15, 2009

Change Fallback to FallbackResource after extensive discussion with · 4682444d

Nick Kew authored Sep 15, 2009

wrowe and DrBacchus.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815502 13f79535-47bb-0310-9956-ffa450edef68

4682444d

simplify reporting of the repeated argument error · eff6e1c0

Jeff Trawick authored Sep 15, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815448 13f79535-47bb-0310-9956-ffa450edef68

eff6e1c0

defined apr_status_t rv one time at entry of ap_core_output_filter() instead of · 988ad79c

Guenter Knauf authored Sep 15, 2009

multiple times within the code which caused compile break every now and then.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815405 13f79535-47bb-0310-9956-ffa450edef68

988ad79c

changed build of proxy modules to use common mod_proxy.imp file. · 83dbfb53
Guenter Knauf authored Sep 15, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815392 13f79535-47bb-0310-9956-ffa450edef68
```
83dbfb53

Change "DefaultHandler" to "Fallback" as discussed on list and · 2d8c34cb

Nick Kew authored Sep 15, 2009

today on IRC, in the hope that everyone will be satisfied.
PR: 47184 + subsequent veto of original directive name

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815380 13f79535-47bb-0310-9956-ffa450edef68

2d8c34cb

respect const-ness of string argument to ap_expr_string() · 4ab8f68e

Jeff Trawick authored Sep 15, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@815304 13f79535-47bb-0310-9956-ffa450edef68

4ab8f68e

Sep 14, 2009

* Follow the standard CHANGES format for security changes. · e0424d6b
Ruediger Pluem authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814866 13f79535-47bb-0310-9956-ffa450edef68
```
e0424d6b
Correct attribution for mod_dav options provider interface. · dddc7e2e
Graham Leggett authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814860 13f79535-47bb-0310-9956-ffa450edef68
```
dddc7e2e
* Replace brigade_move with apr_brigade_split_ex as spotted by pquerna. · 7add9b22
Ruediger Pluem authored Sep 14, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814854 13f79535-47bb-0310-9956-ffa450edef68
```
7add9b22

Add attribution and CVE notices. · 3f24dca3

Graham Leggett authored Sep 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814850 13f79535-47bb-0310-9956-ffa450edef68

3f24dca3

mod_dav: Allow other modules to add things to the DAV or Allow headers · 41a29e6e

Graham Leggett authored Sep 14, 2009

of an OPTIONS request.
Submitted by: Brian France <brian brianfrance.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814832 13f79535-47bb-0310-9956-ffa450edef68

41a29e6e

* Lower memory usage by reusing the brigade instead of constantly · 63ae0b6f

Ruediger Pluem authored Sep 14, 2009

  recerating one.

Submitted by: Stefan Fritsch <sf sfritsch.de>
Reviewed by: rpluem



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814807 13f79535-47bb-0310-9956-ffa450edef68

63ae0b6f

* support/htdbm.c (htdbm_list): Fix compiler warning on x86_64. · 83c4dae6

Joe Orton authored Sep 14, 2009

  (the field width must always be passed as an int if using "%.*")


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814792 13f79535-47bb-0310-9956-ffa450edef68

83c4dae6

* modules/proxy/mod_proxy_ftp.c (parse_epsv_reply): Remove redundant · 89694393

Joe Orton authored Sep 14, 2009

check for !p[0], thanks rpluem. Also update to take const argument
and fix comment, since the string is not modified in-place.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814785 13f79535-47bb-0310-9956-ffa450edef68

89694393

htdbm: don't allocate more memory for every record we dump. · 4bffed6a

Daniel Earl Poirier authored Sep 14, 2009

Thanks to Jeff Trawick for flagging this.
Also ensure a space before all dumped comments.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814781 13f79535-47bb-0310-9956-ffa450edef68

4bffed6a

Move declaration to remove a compiler warning. · 65292f5f

Graham Leggett authored Sep 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814779 13f79535-47bb-0310-9956-ffa450edef68

65292f5f

mod_mime: detect invalid use of MultiviewsMatch inside Location and · 0b1033ce

Daniel Earl Poirier authored Sep 14, 2009

LocationMatch sections.  Document that such usage is not valid.
PR47754.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814728 13f79535-47bb-0310-9956-ffa450edef68

0b1033ce

Security fix - this is presumed to fix CVE-2009-3094 (the disclosed · 9881400c

Joe Orton authored Sep 14, 2009

information was limited so this has not been confirmed):

* modules/proxy/mod_proxy_ftp.c (parse_epsv_reply): New function.
  (proxy_ftp_handler): Fix possible NULL pointer deference in
  apr_socket_close(NULL) on error paths.  Fix possible buffer overread
  in EPSV response parser; use parse_epsv_reply instead.  Thanks to
  Jeff Trawick and Stefan Fritsch for analysis of this issue.

Submitted by: Stefan Fritsch <sf fritsch.de>, jorton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814652 13f79535-47bb-0310-9956-ffa450edef68

9881400c

Sep 13, 2009

Bring the LDAPCacheEntries and LDAPOpCacheEntries usage() in synch with · 50324b19

Eric Covener authored Sep 13, 2009

the manual and the implementation (0 and -1 both disable the cache).

PR 40948


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814441 13f79535-47bb-0310-9956-ffa450edef68

50324b19

mod_request: Make sure the KeptBodySize directive rejects values · 4979c0aa

Graham Leggett authored Sep 13, 2009

that aren't valid numbers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814337 13f79535-47bb-0310-9956-ffa450edef68

4979c0aa

Remove trailing whitespace from the mod_request module. · 9f67b81d

Graham Leggett authored Sep 13, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814336 13f79535-47bb-0310-9956-ffa450edef68

9f67b81d

mod_session_crypto: Sanity check should the potentially encrypted · 691b0692

Graham Leggett authored Sep 13, 2009

session cookie be too short.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814334 13f79535-47bb-0310-9956-ffa450edef68

691b0692

mod_session.c: Prevent a segfault when session is added but not · ca7c8b41

Graham Leggett authored Sep 13, 2009

configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814327 13f79535-47bb-0310-9956-ffa450edef68

ca7c8b41

Remove stray trailing whitespace from mod_session.c. · 929e0a12

Graham Leggett authored Sep 13, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814325 13f79535-47bb-0310-9956-ffa450edef68

929e0a12

Bring in support for an arbitrary list of mpms to the RPM spec file · abeb2271

Graham Leggett authored Sep 13, 2009

as per the fedora spec file.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814318 13f79535-47bb-0310-9956-ffa450edef68

abeb2271

Sep 12, 2009

* Add missing , to make it compile again. · c8a63b1c

Ruediger Pluem authored Sep 12, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814114 13f79535-47bb-0310-9956-ffa450edef68

c8a63b1c

* Detab. · 2f0e39a6

Ruediger Pluem authored Sep 12, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814113 13f79535-47bb-0310-9956-ffa450edef68

2f0e39a6

Sep 11, 2009

htcacheclean: 19 ways to fail, 1 error message. Fixed. · 32de8d5c

Graham Leggett authored Sep 11, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814091 13f79535-47bb-0310-9956-ffa450edef68

32de8d5c

Add an RPM init.d script to start the htcacheclean daemon, controlled · fec6e0bf

Graham Leggett authored Sep 11, 2009

by the optional /etc/sysconfig/htcacheclean configuration.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814079 13f79535-47bb-0310-9956-ffa450edef68

fec6e0bf