Commits · e1ca0e9bd97e937c7ff9d2a3e84a677b929134ff · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

26 Mar, 2004 1 commit

In the newer versions of OpenSSL, the flag SSL_SESS_CACHE_NO_INTERNAL_LOOKUP · e1ca0e9b

Madhusudan Mathihalli authored Mar 26, 2004

just prevents the internal lookup but does not prevent the caching.
OpenSSL 0.9.6h onwards has a new flag 'SSL_SESS_CACHE_NO_INTERNAL' to
prevent OpenSSL from both lookup and caching the sessions internally.

PR: 26562
Reviewed by: Geoff Thorpe, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103165 13f79535-47bb-0310-9956-ffa450edef68

e1ca0e9b

25 Mar, 2004 4 commits

fix ported to 2.0.50-dev · 8309b138

Bill Stoddard authored Mar 25, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103149 13f79535-47bb-0310-9956-ffa450edef68

8309b138

ported to 2.0.50-dev · 8878370f

Bill Stoddard authored Mar 25, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103146 13f79535-47bb-0310-9956-ffa450edef68

8878370f

move backported change to proper place · a424f15f

Geoffrey Young authored Mar 25, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103144 13f79535-47bb-0310-9956-ffa450edef68

a424f15f

complete backport · d1ec2e71

Bill Stoddard authored Mar 25, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103142 13f79535-47bb-0310-9956-ffa450edef68

d1ec2e71

24 Mar, 2004 2 commits

Can't assume the filepointer is really 0 when offset is 0. A handler can... · 5a297f01

Bill Stoddard authored Mar 24, 2004

Can't assume the filepointer is really 0 when offset is 0. A handler can create brigades containing multiple file buckets with arbitrary offsets


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103125 13f79535-47bb-0310-9956-ffa450edef68

5a297f01

Fix memory corruption problem with ap_custom_response() function. · 583ee682

Jeff Trawick authored Mar 24, 2004

The core per-dir config would later point to request pool data
that would be reused for different purposes on different requests.

This is based on an old 1.3 patch submitted by Will Lowe.
It needs a minor tweak before committing to 1.3, but he had
it pretty darn close.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103120 13f79535-47bb-0310-9956-ffa450edef68

583ee682

23 Mar, 2004 1 commit

work around MSIE Digest auth bug - if AuthDigestEnableQueryStringHack · 6f307da1

Geoffrey Young authored Mar 23, 2004

is set in r->subprocess_env allow mismatched query strings to pass.
PR: 27758


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103096 13f79535-47bb-0310-9956-ffa450edef68

6f307da1

21 Mar, 2004 1 commit

logresolve: Allow size of log line buffer to be overridden at · fd5b0993

Jeff Trawick authored Mar 21, 2004

build time (MAXLINE).

PR:          27793


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103060 13f79535-47bb-0310-9956-ffa450edef68

fd5b0993

19 Mar, 2004 3 commits

Fix crash when Apache was started with no Listen directives. · 587ffbe9

Jeff Trawick authored Mar 19, 2004

Submitted by: Michael Corcoran <mcorcoran warpsolutions.com>
Reviewed by: Jeff Trawick

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103030 13f79535-47bb-0310-9956-ffa450edef68

587ffbe9

*) SECURITY: CAN-2004-0174 (cve.mitre.org) · d8163c79

Jeff Trawick authored Mar 19, 2004

     Fix starvation issue on listening sockets where a short-lived
     connection on a rarely-accessed listening socket will cause a
     child to hold the accept mutex and block out new connections until
     another connection arrives on that rarely-accessed listening socket.
     With Apache 2.x there is no performance concern about enabling the
     logic for platforms which don't need it, so it is enabled everywhere
     except for Win32.  [Jeff Trawick]

(already in 2.0.49, propagating to mirrors now)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103029 13f79535-47bb-0310-9956-ffa450edef68

d8163c79

mod_dav: Fix a problem that could cause crashes when manipulating · 32987a70

Jeff Trawick authored Mar 19, 2004

locks on some platforms.

crashes seen on Sparc when the integer copied out of the database
was not aligned properly

also, sizeof(int) not necessarily sizeof(apr_size_t), so that could
be a concern; we copy in sizeof(apr_size_t field) so we should copy
out sizeof(apr_size_t field)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103027 13f79535-47bb-0310-9956-ffa450edef68

32987a70

16 Mar, 2004 1 commit

sync with 2.0.49-dev · e892d87a

Jeff Trawick authored Mar 16, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102997 13f79535-47bb-0310-9956-ffa450edef68

e892d87a

15 Mar, 2004 2 commits

use existing directive name ThreadStackSize instead of · 0da7bf4b

Jeff Trawick authored Mar 15, 2004

WorkerStackSize

as made obvious by: Brad Nicholes


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102975 13f79535-47bb-0310-9956-ffa450edef68

0da7bf4b

mod_cgid: Fix storage corruption caused by use of incorrect pool. · 230bf5eb
Jeff Trawick authored Mar 15, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102961 13f79535-47bb-0310-9956-ffa450edef68
```
230bf5eb

14 Mar, 2004 1 commit

Satisfy directives now can be influenced by a surrounding <Limit> · c915a160

Andre Malo authored Mar 14, 2004

container.

PR: 14726.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102954 13f79535-47bb-0310-9956-ffa450edef68

c915a160

13 Mar, 2004 1 commit

htpasswd.c: various cleanups and move to using apr_temp_dir_get() · 9229359a

Thom May authored Mar 13, 2004

Submitted by: Guenter Knauf
Reviewed by: Thom May


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102950 13f79535-47bb-0310-9956-ffa450edef68

9229359a

11 Mar, 2004 2 commits

* modules/proxy/proxy_http.c (ap_proxy_http_process_response): · c43eca13

Joe Orton authored Mar 11, 2004

Consistently check whether r->status is "successful" or not; fix
screwy handling of 2xx-but-not-200 responses when ProxyErrorOverride
is used.

PR: 20183
Submitted by: Marcus Janson <marcus.janson@tre.se>, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102935 13f79535-47bb-0310-9956-ffa450edef68

c43eca13

Threaded MPMs for Unix and Win32: Add WorkerStackSize directive · 8fd57586

Jeff Trawick authored Mar 11, 2004

to override default thread stack size for threads which handle
client connections. Required for some third-party modules on
platforms with small default thread stack size.

This is also useful for trimming back the stack size on
platforms with relatively large default stack size in order to
conserve address space for supporting more threads per child.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102931 13f79535-47bb-0310-9956-ffa450edef68

8fd57586

10 Mar, 2004 1 commit

Win32: Tweak worker thread accounting to fix hang when number of Listen... · 3b1538b8

Bill Stoddard authored Mar 10, 2004

Win32: Tweak worker thread accounting to fix hang when number of Listen directives is >= ThreadsPerChild


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102922 13f79535-47bb-0310-9956-ffa450edef68

3b1538b8

09 Mar, 2004 1 commit

Enable mod_rewrite to recognize SSL variables (using ssl_var_lookup) · e1ff89fb

Madhusudan Mathihalli authored Mar 09, 2004

Submitted by: Joe Orton
Reviewed by: Madhusudan Mathihalli


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102905 13f79535-47bb-0310-9956-ffa450edef68

e1ff89fb

08 Mar, 2004 2 commits

Sync with 2.0.49 tag. · 3b365d24

Justin Erenkrantz authored Mar 08, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102896 13f79535-47bb-0310-9956-ffa450edef68

3b365d24

Fix bug in mod_usertrack when no CookieName is set. · 453643a7

Justin Erenkrantz authored Mar 08, 2004

PR: 24483
Submitted by:	Manni Wood <manniwood planet-save.com>
Reviewed by:	Cliff Woolley, Jim Jagielski


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102890 13f79535-47bb-0310-9956-ffa450edef68

453643a7

07 Mar, 2004 1 commit

Synch with 2.0 branch. · 1e575d8a

Joe Orton authored Mar 07, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102881 13f79535-47bb-0310-9956-ffa450edef68

1e575d8a

03 Mar, 2004 1 commit

sync with 2.0.49-dev · c62b189a

Jeff Trawick authored Mar 03, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102846 13f79535-47bb-0310-9956-ffa450edef68

c62b189a

01 Mar, 2004 1 commit

· 62f71b40

Paul J. Reder authored Mar 01, 2004

 *) Remove compile-time length limit on request strings. Length is
    now enforced solely with the LimitRequestLine config directive.
    [Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102840 13f79535-47bb-0310-9956-ffa450edef68

62f71b40

29 Feb, 2004 1 commit

sync with stable branch · 40ebf7fc

Jeff Trawick authored Feb 29, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102826 13f79535-47bb-0310-9956-ffa450edef68

40ebf7fc

28 Feb, 2004 2 commits

sync · 7fecd656

Andre Malo authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102814 13f79535-47bb-0310-9956-ffa450edef68

7fecd656

Send the 'Close Alert' message to the peer upon closing a SSL session. This · 7e07b49c

Madhusudan Mathihalli authored Feb 28, 2004

required creating a new EOC (End-Of-Connection) bucket type to notify mod_ssl
that the connection is about to be closed.

Reviewed by: Joe Orton, Justin Erenkrantz

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102793 13f79535-47bb-0310-9956-ffa450edef68

7e07b49c

26 Feb, 2004 1 commit

sync with stable branch · fa51407a

Jeff Trawick authored Feb 26, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102787 13f79535-47bb-0310-9956-ffa450edef68

fa51407a

24 Feb, 2004 1 commit

Backported mod_auth_digest change to 2.0. · e7ede0cd

Sander Striker authored Feb 24, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102759 13f79535-47bb-0310-9956-ffa450edef68

e7ede0cd

21 Feb, 2004 2 commits

remove support for Remote_User variable, which never worked at all. · ff73ec81

Andre Malo authored Feb 21, 2004

PR: 25725


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102734 13f79535-47bb-0310-9956-ffa450edef68

ff73ec81

minor mod_auth_basic and mod_auth_digest sync. mod_auth_basic · 8d3f0125

Geoffrey Young authored Feb 21, 2004

now populates r->user with the (possibly unauthenticated) user,
and mod_auth_digest returns 500 when a provider returns
AUTH_GENERAL_ERROR
Reviewed by:	justin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102719 13f79535-47bb-0310-9956-ffa450edef68

8d3f0125

19 Feb, 2004 1 commit

Add a new directive EnableExceptionHook that must be specified for · aa6840b1

Jeff Trawick authored Feb 19, 2004

exception hooks to be called (in addition to the build time
requirements).

The 2.1-dev feature is now more aligned with the 1.3.30-dev feature,
in that there is a build-time requirement as well as a configuration
requirement.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102686 13f79535-47bb-0310-9956-ffa450edef68

aa6840b1

18 Feb, 2004 1 commit

fix "Expected </Foo>> but saw </Foo>" errors in nested, · 925ae2cd

Geoffrey Young authored Feb 18, 2004

argumentless containers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102670 13f79535-47bb-0310-9956-ffa450edef68

925ae2cd

16 Feb, 2004 3 commits

mod_isapi: GetServerVariable returned improperly terminated header · 09d55df7

Jeff Trawick authored Feb 16, 2004

fields given "ALL_HTTP" or "ALL_RAW".

PR:		20656
Submitted by:	Jesse Pelton <jsp pkc.com>
Reviewed by:	Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102643 13f79535-47bb-0310-9956-ffa450edef68

09d55df7

mod_isapi: send_response_header() failed to copy status string's · 86ed77c1

Jeff Trawick authored Feb 16, 2004

last character.

PR:		20619
Submitted by:	Jesse Pelton <jsp pkc.com>
Reviewed by:	Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102642 13f79535-47bb-0310-9956-ffa450edef68

86ed77c1

mod_isapi: GetServerVariable("ALL_RAW") returned the wrong buffer · 8ad6ffc2

Jeff Trawick authored Feb 16, 2004

size.

PR:              20617
Submitted by:	 Jesse Pelton <jsp pkc.com>
Reviewed by:	 Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102641 13f79535-47bb-0310-9956-ffa450edef68

8ad6ffc2

11 Feb, 2004 1 commit
- Backport of the shared memory caching issues in util_ldap · 8150ec00
  Bradley Nicholes authored Feb 11, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102633 13f79535-47bb-0310-9956-ffa450edef68
```
  8150ec00
08 Feb, 2004 1 commit

sync · 2a865dd2

Andre Malo authored Feb 08, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102604 13f79535-47bb-0310-9956-ffa450edef68

2a865dd2