Commits · d6280acf1c576fb05bce356ac14235e4e1713db2 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Nov 08, 2011

By default, only load those modules that are either required · a4dca8ee

Stefan Fritsch authored Nov 08, 2011

or explicitly selected by a configure --enable-foo argument. The
LoadModule statements for modules enabled by --enable-mods-shared=most
and friends will be commented out.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1199027 13f79535-47bb-0310-9956-ffa450edef68

a4dca8ee

Nov 07, 2011

Fix integer overflow in ap_pregsub. This can be triggered e.g. · d265c519

Stefan Fritsch authored Nov 07, 2011

with mod_setenvif via a malicious .htaccess

CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198940 13f79535-47bb-0310-9956-ffa450edef68

d265c519

s/IP6/IPv6/ · afa44b08

Jeff Trawick authored Nov 07, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198904 13f79535-47bb-0310-9956-ffa450edef68

afa44b08

Nov 05, 2011

quick handlers and translate_name in lua can't be keyed off · cea182f3

Eric Covener authored Nov 05, 2011

Directory/Filename/htaccess



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197853 13f79535-47bb-0310-9956-ffa450edef68

cea182f3

Nov 04, 2011
- get the hello world of Handlers working again · 03b91cb7
  Eric Covener authored Nov 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197782 13f79535-47bb-0310-9956-ffa450edef68
```
  03b91cb7
- Unify syntax of config directives taking an expression as optional contition argument · feec1c1f
  Stefan Fritsch authored Nov 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197413 13f79535-47bb-0310-9956-ffa450edef68
```
  feec1c1f
- To prevent overboarding memory usage, limit line length to 1MB · 3b58006e
  Stefan Fritsch authored Nov 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1197405 13f79535-47bb-0310-9956-ffa450edef68
```
  3b58006e
Oct 29, 2011

make r.args read/write for rewrite refugees. · 91a211f4

Eric Covener authored Oct 29, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194997 13f79535-47bb-0310-9956-ffa450edef68

91a211f4

mod_include: Add support for application/x-www-form-urlencoded encoding · e06f408a

Graham Leggett authored Oct 29, 2011

and decoding.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1194870 13f79535-47bb-0310-9956-ffa450edef68

e06f408a

Oct 27, 2011

Add new modules to CHANGES · d8f41f33

Nick Kew authored Oct 27, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1189553 13f79535-47bb-0310-9956-ffa450edef68

d8f41f33

Oct 26, 2011

* support/rotatelogs.c (usage, main): Add support for -c option. · 754871bf

Joe Orton authored Oct 26, 2011

Submitted by: Jan Kaluža <jkaluza redhat.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1189220 13f79535-47bb-0310-9956-ffa450edef68

754871bf

Oct 25, 2011

Limit ap_pregsub() to 64K, add ap_pregsub_ex() for longer strings and with · 09a28d18

Stefan Fritsch authored Oct 25, 2011

better error reporting. Modify ap_varbuf_regsub() to be similar to
ap_pregsub_ex().

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1188950 13f79535-47bb-0310-9956-ffa450edef68

09a28d18

mod_session_crypto: Refactor to support the new apr_crypto API. · 3015bf6f
Graham Leggett authored Oct 25, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1188900 13f79535-47bb-0310-9956-ffa450edef68
```
3015bf6f

Oct 23, 2011

Fix 3xx responses with local URLs as ErrorDocument · bf71624f

Stefan Fritsch authored Oct 23, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1187985 13f79535-47bb-0310-9956-ffa450edef68

bf71624f

mod_buffer: Make sure we step down for subrequests, but not for internal · 77626c57

Graham Leggett authored Oct 23, 2011

redirects triggered by mod_rewrite.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1187880 13f79535-47bb-0310-9956-ffa450edef68

77626c57

Oct 22, 2011

expose ap_construct_url to lua scripts · fe602d8c

Eric Covener authored Oct 22, 2011



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1187743 13f79535-47bb-0310-9956-ffa450edef68

fe602d8c

Oct 18, 2011

Fix configuration of internal proxies · fb2811fb

Stefan Fritsch authored Oct 18, 2011

PR: 49272
Submitted by: Jim Riggs <jim riggs me>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1185828 13f79535-47bb-0310-9956-ffa450edef68

fb2811fb

Oct 10, 2011

· 87d789bc

William A. Rowe Jr authored Oct 10, 2011

Resolve server and remote IP's in the AcceptFilter 'none' path.

Lower the volume on a number of debug messages (and omit errno
where we have no errno).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1181140 13f79535-47bb-0310-9956-ffa450edef68

87d789bc

Remove OID match which was never in a GA releas and is obsoleted by · 2399cf7d

Stefan Fritsch authored Oct 10, 2011

SetEnvIfExpr with PeerExtList()


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180828 13f79535-47bb-0310-9956-ffa450edef68

2399cf7d

Oct 09, 2011

If a child is created just before graceful restart and then exits because · 03f0bf83

Stefan Fritsch authored Oct 09, 2011

of a missing lock file, don't shutdown the whole server.

PR: 39311
Submitted by: Shawn Michael <smichael rightnow com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180742 13f79535-47bb-0310-9956-ffa450edef68

03f0bf83

Check the return value from ap_run_create_connection in mpm_event. · 67c29fed

Stefan Fritsch authored Oct 09, 2011

Add a todo in mpm_simple

PR: 41194
Submitted by: Davi Arnaut


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180737 13f79535-47bb-0310-9956-ffa450edef68

67c29fed

mod_mime_magic: Add signatures for PNG and SWF to the example config. · 5a9b03c6

Stefan Fritsch authored Oct 09, 2011

PR: 48352
Submitted by: Jeremy Wagner-Kaiser <jwagner-kaiser adknowledge com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180725 13f79535-47bb-0310-9956-ffa450edef68

5a9b03c6

s/perl/Perl/ · a76a35d7

Jeff Trawick authored Oct 09, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180699 13f79535-47bb-0310-9956-ffa450edef68

a76a35d7

Add -D DUMP_RUN_CFG option to dump some configuration items · ff444d9c

Stefan Fritsch authored Oct 09, 2011

from the parsed (or default) config. This is useful for init scripts that
need to setup temporary directories and permissions, for example if those
temporary directories are located on a ram disk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180681 13f79535-47bb-0310-9956-ffa450edef68

ff444d9c

Oct 08, 2011

mod_authn_socache: fix it to enable initialisation to work if configured · ab9d5d15

Nick Kew authored Oct 08, 2011

only in .htaccess context, and provide a toggle for that.
PR 51991


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180384 13f79535-47bb-0310-9956-ffa450edef68

ab9d5d15

Downgrade error log messages which accompany a 404 request status from loglevel · 8104f18b

Stefan Fritsch authored Oct 08, 2011

error to info.

List thread at
http://mail-archives.apache.org/mod_mbox/httpd-dev/201110.mbox/%3Calpine.DEB.2.00.1110041948280.664@eru.sfritsch.de%3E

PR: 35768


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180328 13f79535-47bb-0310-9956-ffa450edef68

8104f18b

Sort hooks twice, once before pre_config, once after ap_process_config_tree. · 701c0370

Stefan Fritsch authored Oct 08, 2011

This fixes a regression with perl modules introduced by r1032002

PR: 45076
Submitted by: Torsten Foertsch <torsten foertsch gmx net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1180325 13f79535-47bb-0310-9956-ffa450edef68

701c0370

Oct 03, 2011

Enforce LimitRequestFieldSize after multiple headers with the same · 230803c5

Stefan Fritsch authored Oct 03, 2011

name have been merged.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178566 13f79535-47bb-0310-9956-ffa450edef68

230803c5

Oct 01, 2011

If MaxMemFree is set, set SSL_MODE_RELEASE_BUFFERS in mod_ssl. · 2fee69e6

Stefan Fritsch authored Oct 01, 2011

Always set SSL_MODE_RELEASE_BUFFERS in ab.

PR: 51618
Submitted by: Cristian Rodríguez <crrodriguez opensuse org>, Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178079 13f79535-47bb-0310-9956-ffa450edef68

2fee69e6

Sep 28, 2011

In ssl_check_public_cert(), also take dNSNames in the subjectAltName · 0d8b38a8

Kaspar Brand authored Sep 28, 2011

extension into account when checking the cert against the configured
ServerName. PR 32652, PR 47051.

Replace SSL_X509_getCN() by SSL_X509_getIDs(), which returns an array
of a cert's DNS-IDs and CN-IDs (terms as coined by RFC 6125).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176752 13f79535-47bb-0310-9956-ffa450edef68

0d8b38a8

Sep 26, 2011

Make mod_substitute more efficient: · e38adfbe

Stefan Fritsch authored Sep 26, 2011

- Use varbuf resizable buffer instead of constantly allocating pool
  memory and copying data around. This changes the memory requirement from
  quadratic in ((number of substitutions in line) * (length of line)) to
  linear in (length of line).
- Instead of copying buckets just to append a \0, use new ap_regexec_len()
  function

PR: 50559


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176019 13f79535-47bb-0310-9956-ffa450edef68

e38adfbe

Sep 25, 2011

enable the SNI extension for proxy connections · b6f24a8b

Kaspar Brand authored Sep 25, 2011

to TLS backends (but avoid for pure SSLv2/SSLv3)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175416 13f79535-47bb-0310-9956-ffa450edef68

b6f24a8b

Sep 19, 2011

Add wrappers for malloc, calloc, realloc that check for out of memory · 4ab02751

Stefan Fritsch authored Sep 19, 2011

situations. Use them in most places where malloc, and friends are used.
This results in clean error messages in an out of memory situation instead of
segfaulting or silently malfunctioning. In some places, it just allows to
remove some logging code.

PR 51568, PR 51569, PR 51571.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1172686 13f79535-47bb-0310-9956-ffa450edef68

4ab02751

Sep 17, 2011

PR51371: cross-compile issues with cgi and apr_procattr_limit_*. · 7550c76f
Eric Covener authored Sep 17, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1172019 13f79535-47bb-0310-9956-ffa450edef68
```
7550c76f

* Correctly obey ServerName / ServerAlias if the Host header from the · 2b52992e

Ruediger Pluem authored Sep 17, 2011

  request matches the VirtualHost address.

PR: 51709
Submitted by: Micha Lenk <micha lenk.info>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1172002 13f79535-47bb-0310-9956-ffa450edef68

2b52992e

Sep 15, 2011

initialize counter with random number · f3a1c13b

Stefan Fritsch authored Sep 15, 2011

PR: 45110


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1171249 13f79535-47bb-0310-9956-ffa450edef68

f3a1c13b

Create wrapper API for apr_random; · c973368e

Stefan Fritsch authored Sep 15, 2011

use in mod_lbmethod_heartbeat and mod_serf to
- replace some needles use of apr_generate_random_bytes
- remove code duplication


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1171247 13f79535-47bb-0310-9956-ffa450edef68

c973368e

Sep 12, 2011

Add in MaxRangeOverlaps and MaxRangeReversals to accomodate · b3ec4d38

Jim Jagielski authored Sep 12, 2011

more control over acceptable Range headers:

See: http://trac.tools.ietf.org/wg/httpbis/trac/ticket/311

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1169756 13f79535-47bb-0310-9956-ffa450edef68

b3ec4d38

Sep 09, 2011
- Reflect user-visible behavior change · 8c6dd01f
  William A. Rowe Jr authored Sep 09, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1167156 13f79535-47bb-0310-9956-ffa450edef68
```
  8c6dd01f
- Non-releases don't have user-visible regressions; now a contributor to the fix · 72b2c8de
  William A. Rowe Jr authored Sep 09, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1167151 13f79535-47bb-0310-9956-ffa450edef68
```
  72b2c8de