Commits · ceadbb2ba891b0822f5f6a493a80e4adda23431d · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

01 Oct, 2010 3 commits

Fix CVE-2010-1623 in mod_reqtimeout, too. It includes a non-blocking variant · ceadbb2b

Stefan Fritsch authored Oct 01, 2010

of apr_brigade_split_line().


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003626 13f79535-47bb-0310-9956-ffa450edef68

ceadbb2b

Oh. Never mind. That's in there already too. Perhaps we just never · 9340aaf1

Richard Bowen authored Oct 01, 2010

updated the STATUS file, hmm?


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003522 13f79535-47bb-0310-9956-ffa450edef68

9340aaf1

I'm really not sure what I was thinking of when I put that remark in · a2991602

Richard Bowen authored Oct 01, 2010

there. It's not wrong, it's just a litte incomplete.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003517 13f79535-47bb-0310-9956-ffa450edef68

a2991602

30 Sep, 2010 12 commits

mod_cache: Support the caching of HEAD requests. · cac9b899

Graham Leggett authored Sep 30, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003331 13f79535-47bb-0310-9956-ffa450edef68

cac9b899

Add a TODO item for the 1.3 docs. · 8bcf0a37

Richard Bowen authored Sep 30, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003294 13f79535-47bb-0310-9956-ffa450edef68

8bcf0a37

A possibility for a good doc to have, since modules.apache.org isn't · da171a13

Richard Bowen authored Sep 30, 2010

actually useful.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003288 13f79535-47bb-0310-9956-ffa450edef68

da171a13

dns-caveat is largely rubbish. Someone should rewrite that. · 4f09883f

Richard Bowen authored Sep 30, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003283 13f79535-47bb-0310-9956-ffa450edef68

4f09883f

Adds caution about overusing IfModule, and mentions the -M flag in · 8425acc6

Richard Bowen authored Sep 30, 2010

addition to the -l flag for determining what modules are loaded.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003217 13f79535-47bb-0310-9956-ffa450edef68

8425acc6

add a bit of doc for the new authz providers · 1d83e419

Stefan Fritsch authored Sep 30, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003180 13f79535-47bb-0310-9956-ffa450edef68

1d83e419

Rebuild generated files. · f48659ed

Richard Bowen authored Sep 30, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003166 13f79535-47bb-0310-9956-ffa450edef68

f48659ed

Mention specific error message that people might come searching for. · 52b0ca0f
Richard Bowen authored Sep 30, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003164 13f79535-47bb-0310-9956-ffa450edef68
```
52b0ca0f

Minor nitpick - We've attempted to standardize on American spelling. · 8b994c9b

Richard Bowen authored Sep 30, 2010

Don't much care one way or another, but being consistent is good.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003163 13f79535-47bb-0310-9956-ffa450edef68

8b994c9b

Slight rearrangement to improve flow. Added specific error message, as · 6ed9f8f8

Richard Bowen authored Sep 30, 2010

people often search for these looking for the right doc.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003160 13f79535-47bb-0310-9956-ffa450edef68

6ed9f8f8

Add detailed information about how to use · bc6bf56e

Rainer Jung authored Sep 30, 2010

session stickyness.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003131 13f79535-47bb-0310-9956-ffa450edef68

bc6bf56e

Fix flex and bison usage when building out of tree. · e8041f70

Rainer Jung authored Sep 30, 2010

Usually these make targets are not executed because
buildconf fixes the timestamps accordingly.

But in case people want to experiment with the files
it's nice to still support out of tree build.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003061 13f79535-47bb-0310-9956-ffa450edef68

e8041f70

29 Sep, 2010 10 commits

Update transformations. · 421cefde

Graham Leggett authored Sep 29, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002855 13f79535-47bb-0310-9956-ffa450edef68

421cefde

htcacheclean: Allow the option to round up file sizes to a given · b1f56277

Graham Leggett authored Sep 29, 2010

block size, improving the accuracy of disk usage.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002854 13f79535-47bb-0310-9956-ffa450edef68

b1f56277

Add authz providers for use with mod_authz_core and its RequireAny/RequireAll · f20bd2e5

Stefan Fritsch authored Sep 29, 2010

containers:

'ssl' (equivalent to SSLRequireSSL)
'ssl-verify-client' (for use with 'SSLVerifyClient optional')
'ssl-require' (expressions with same syntax as SSLRequire)

We may decide to axe 'ssl-require' again in favor of the generic 'expr'
provider, depending on the development of the ap_expr parser.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002837 13f79535-47bb-0310-9956-ffa450edef68

f20bd2e5

mod_disk_cache: Instead of creating an empty data file when the body is · 06a8bb97

Graham Leggett authored Sep 29, 2010

empty, don't create a file at all, saving inodes.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002832 13f79535-47bb-0310-9956-ffa450edef68

06a8bb97

Make the ssl expression parser thread-safe. It now requires bison instead of · 3447aabc

Stefan Fritsch authored Sep 29, 2010

yacc.

Also change the make file magic so that the real source file name is
embedded in the debug info.

The generated files have been created with flex 2.5.35/bison 2.4.1. The two
'no previous prototype' warnings are supposed to be fixed with the next flex
version.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002824 13f79535-47bb-0310-9956-ffa450edef68

3447aabc

htcacheclean: If the cache file format is unrecognised, remove the entry · a2b3ecc4

Graham Leggett authored Sep 29, 2010

from the cache.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002686 13f79535-47bb-0310-9956-ffa450edef68

a2b3ecc4

Adding #logging link. · 56b92eb0

Igor Galić authored Sep 29, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002646 13f79535-47bb-0310-9956-ffa450edef68

56b92eb0

mod_disk_cache: Change on-disk header file format to support the · ae9fca7f

Graham Leggett authored Sep 29, 2010

link of the device/inode of the data file to the matching header
file, and to support the option of not writing a data file when
the data file is empty. Refactor the mod_disk_cache code so that
headers are written as late as possible (on commit), allowing the
device and inode of the body to be written to the header. At this
point, writes to the cache are now atomic, without locks.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002643 13f79535-47bb-0310-9956-ffa450edef68

ae9fca7f

add comment about change to ap_expr_eval() · 07954133

Stefan Fritsch authored Sep 29, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002571 13f79535-47bb-0310-9956-ffa450edef68

07954133

Documentation for r1002415. · 87de823f

Igor Galić authored Sep 29, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002427 13f79535-47bb-0310-9956-ffa450edef68

87de823f

28 Sep, 2010 8 commits

Add "IN" operator to expression parser, to evaluate membership of · 9a296e40

Nick Kew authored Sep 28, 2010

a list of tokens.  Couldn't resist after sf's comment on r1002363!

This means expressions like
<If %{REQUEST_METHOD} IN GET,HEAD,OPTIONS,...>
will work as a drop-in substitute for <Limit>

Also fix off-by-one bug in variable evaluation


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002415 13f79535-47bb-0310-9956-ffa450edef68

9a296e40

This is just too easy to not do it: Add an 'expr' authz provider that allows · 107f728d

Stefan Fritsch authored Sep 28, 2010

arbitrary expressions in Require lines.

The main issue I wanted to fix was that the env provider only allows to
check for the existance of an envvar but not the contents.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002363 13f79535-47bb-0310-9956-ffa450edef68

107f728d

save some memory by using cmd->temp_pool instead of cmd->pool in some places · 01130b16
Stefan Fritsch authored Sep 28, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002156 13f79535-47bb-0310-9956-ffa450edef68
```
01130b16

Add generate_log_id hook to allow to use the ID generated by mod_unique_id as · 83e3c56b

Stefan Fritsch authored Sep 28, 2010

error log ID for requests.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002125 13f79535-47bb-0310-9956-ffa450edef68

83e3c56b

A few minor nitpicks. Removal of a double negative. Alteration of example · f94d66f3

Richard Bowen authored Sep 28, 2010

using AllowOverride All in <Directory /> to use something less awful.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002119 13f79535-47bb-0310-9956-ffa450edef68

f94d66f3

nitpick: Remove mention of obsolete directive. · ee3a333e

Richard Bowen authored Sep 28, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002112 13f79535-47bb-0310-9956-ffa450edef68

ee3a333e

update for sync with English docs. · 4229a88f

Nilgun Belma Buguner authored Sep 28, 2010

Translated by: Nilgün Belma Bugüner <nilgun belgeler.org>
Reviewed by: Orhan Berent <berent belgeler.org>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002062 13f79535-47bb-0310-9956-ffa450edef68

4229a88f

fix validation error · f0d5d02a

Nilgun Belma Buguner authored Sep 28, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002060 13f79535-47bb-0310-9956-ffa450edef68

f0d5d02a

27 Sep, 2010 7 commits

mod_cache: Make sure that we never allow a 304 Not Modified response · 2bc7491c

Graham Leggett authored Sep 27, 2010

that we asked for to leak to the client should the 304 response be
uncacheable. PR45341

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001884 13f79535-47bb-0310-9956-ffa450edef68

2bc7491c

axe extra ";", fixing this messages from Sun Studio: · ab5662ce

Jeff Trawick authored Sep 27, 2010

  warning: syntax error:  empty declaration


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001864 13f79535-47bb-0310-9956-ffa450edef68

ab5662ce

Allow for non-persist of shared mem · ec3b96b6

Jim Jagielski authored Sep 27, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001831 13f79535-47bb-0310-9956-ffa450edef68

ec3b96b6

Update doccos and explain clear/clean of shared mem · 3b55a128

Jim Jagielski authored Sep 27, 2010

as well as persist


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001824 13f79535-47bb-0310-9956-ffa450edef68

3b55a128

No leakie · 6af03b70

Jim Jagielski authored Sep 27, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001819 13f79535-47bb-0310-9956-ffa450edef68

6af03b70

Split ENV: handling between the request_rec section and the · 4cf6da36

Stefan Fritsch authored Sep 27, 2010

non-request_rec/conn_rec section. This makes the code fit the
comments.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001795 13f79535-47bb-0310-9956-ffa450edef68

4cf6da36

fix another null pointer dereference found by clang · 9b221896

Stefan Fritsch authored Sep 27, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001757 13f79535-47bb-0310-9956-ffa450edef68

9b221896