Commits · e97839d65937a514a222d2fee56c5c13f9d7653f · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

18 Apr, 2006 1 commit

Thiago Zaninotti reported to security@apache.org on 20060410 a possible · e97839d6

Mark J. Cox authored Apr 18, 2006

cross-site scripting flaw because the Expect header error message isn't
escaped. We couldn't find a way that this could be used by an attacker
however, as they can't influence the Expect header a victim will send to a
target site. Thiago agreed and we're therefore not treating this as a
security flaw, but it is a bug that ought to get fixed. I'll add to
STATUS for 1.3/2.0/2.2 shortly for acks.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394965 13f79535-47bb-0310-9956-ffa450edef68

e97839d6

17 Apr, 2006 1 commit
- Update the copyright notice to reflect that changes have gone in this year · 7b87b647
  Colm MacCarthaigh authored Apr 17, 2006
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394765 13f79535-47bb-0310-9956-ffa450edef68
```
  7b87b647
16 Apr, 2006 2 commits

Update one of the more important copyright notices prior to any 2006 · e6c99648
Colm MacCarthaigh authored Apr 16, 2006
```
releases.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394522 13f79535-47bb-0310-9956-ffa450edef68
```
e6c99648

* Also initialize local data structures for workers of a balancer. · 1141e9a4

Ruediger Pluem authored Apr 16, 2006

PR: 38227, 39267
Submitted by: James A. Robinson <jim.robinson stanford.edu>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394446 13f79535-47bb-0310-9956-ffa450edef68

1141e9a4

15 Apr, 2006 1 commit
- PR#39321 - don't segfault if a bad URL is specified in ProxyPass · 14736957
  Nick Kew authored Apr 15, 2006
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394390 13f79535-47bb-0310-9956-ffa450edef68
```
  14736957
14 Apr, 2006 5 commits

decouple the two scoreboard full messages · d5551bd1

Greg Ames authored Apr 14, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394116 13f79535-47bb-0310-9956-ffa450edef68

d5551bd1

* Sync with 2.2.x CHANGES · 9f4584eb

Ruediger Pluem authored Apr 14, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394092 13f79535-47bb-0310-9956-ffa450edef68

9f4584eb

* Avoid calling ap_proxy_http_cleanup twice as this releases a connection · 2a16d5f9

Ruediger Pluem authored Apr 14, 2006

  from the connection pool twice. This causes this connection to be present
  in the connection pool twice. Thus it may be used by different threads
  at the same time which causes many troubles (segfaults in this case).
  Furthermore implement a logic to prevent double releases to the connection
  pool if they are triggered by buggy code and log an error message in this
  case.

  - mod_proxy_http.c: remove double calls to ap_proxy_http_cleanup
  - proxy_util.c: Add logic to prevent double releases of a
    connection to the connection pool.

PR: 38793


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394088 13f79535-47bb-0310-9956-ffa450edef68

2a16d5f9

* Initialize last_char as otherwise a random value will be compared · a475dde6

Ruediger Pluem authored Apr 14, 2006

  against APR_ASCII_LF at the end of the loop if bb only contains an
  EOS bucket.

PR: 39282
Submitted by: Davi Arnaut <davi haxent.com.br>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394070 13f79535-47bb-0310-9956-ffa450edef68

a475dde6

* After r377780 the condition in the if clause never becomes true, because · 22d5f105

Ruediger Pluem authored Apr 14, 2006

ap_proxy_initialize_worker_share is always left with PROXY_WORKER_INITIALIZED
set in workers->s->status. So remove this code to save cycles and avoid
confusion.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394065 13f79535-47bb-0310-9956-ffa450edef68

22d5f105

13 Apr, 2006 1 commit

MaxClients isn't the only reason the scoreboard can fill up. another · 12402021

Greg Ames authored Apr 13, 2006

reason should be fixed soon.

also add a comment to explain an obscure line of code.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393868 13f79535-47bb-0310-9956-ffa450edef68

12402021

12 Apr, 2006 2 commits

If we don't have a prototype for crypt() we shouldn't · 501dac77

Jeff Trawick authored Apr 12, 2006

be calling it.

Casting to the desired pointer return type hides the 
truncation of the return value when sizeof(ptr) > 
sizeof(int) and no prototype was included.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393365 13f79535-47bb-0310-9956-ffa450edef68

501dac77

The crypt() prototype is in <unistd.h> instead of <crypt.h> · 62f5a2fd

Jeff Trawick authored Apr 12, 2006

on HP-UX.  We had no prototype for crypt() there.
In 64-bit mode, a crash occurred because the pointer 
returned by crypt() was truncated before we passed
the pointer to apr_cpystrn().


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393364 13f79535-47bb-0310-9956-ffa450edef68

62f5a2fd

11 Apr, 2006 1 commit

more explanation for a couple of subtle lines of code · e1dc2a82

Greg Ames authored Apr 11, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393236 13f79535-47bb-0310-9956-ffa450edef68

e1dc2a82

10 Apr, 2006 5 commits

* Rollback r393037 as this was vetoed by wrowe. Details see · 13fe1784

Ruediger Pluem authored Apr 10, 2006

  http://mail-archives.apache.org/mod_mbox/httpd-dev/200604.mbox/%3c443ABE65.1060603@rowe-clan.net%3e


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393087 13f79535-47bb-0310-9956-ffa450edef68

13fe1784

* Prevent r->parsed_uri.path from being NULL as this can cause segmentation · 2cdf62e1

Ruediger Pluem authored Apr 10, 2006

  faults e.g. in mod_cache. Set it to "/" in this case.

PR: 39259
Submitted by: Davi Arnaut <davi haxent.com.br>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393037 13f79535-47bb-0310-9956-ffa450edef68

2cdf62e1

expand on a comment for a rather subtle line of code so I have a chance of · dc0b95f2

Greg Ames authored Apr 10, 2006

understanding how it helps in the future


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393028 13f79535-47bb-0310-9956-ffa450edef68

dc0b95f2

remove unnecessary whitespace · eecc0cb3

Jeff Trawick authored Apr 10, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393001 13f79535-47bb-0310-9956-ffa450edef68

eecc0cb3

htdbm: Warn the user when adding a plaintext password on a platform · 927ba95a

Jeff Trawick authored Apr 10, 2006

where it wouldn't work with the server (i.e., anywhere that has
crypt()).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@392944 13f79535-47bb-0310-9956-ffa450edef68

927ba95a

08 Apr, 2006 1 commit

* Check for an existing socket independant of an existing connection record. · da57990e

Ruediger Pluem authored Apr 08, 2006

  This ensures that requests handled by the '*' worker are sent to the correct
  backend server.

PR: 39253


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@392613 13f79535-47bb-0310-9956-ffa450edef68

da57990e

07 Apr, 2006 4 commits

update convenience map · cb05cd65

Andre Malo authored Apr 07, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@392407 13f79535-47bb-0310-9956-ffa450edef68

cb05cd65

set svnmailer:content-charset for better diff mails · 5f7069fa

Andre Malo authored Apr 07, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@392393 13f79535-47bb-0310-9956-ffa450edef68

5f7069fa

update transformation · 6f784185

Andre Malo authored Apr 07, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@392391 13f79535-47bb-0310-9956-ffa450edef68

6f784185

svn:eol-style = native · 1a69d8eb

Andre Malo authored Apr 07, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@392380 13f79535-47bb-0310-9956-ffa450edef68

1a69d8eb

03 Apr, 2006 1 commit

· 536fc77a

Jim Jagielski authored Apr 03, 2006

We actually want to reach the rest of the code :)



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@391025 13f79535-47bb-0310-9956-ffa450edef68

536fc77a

02 Apr, 2006 2 commits

Default handler: Don't return output filter apr_status_t values. · d99724e7

Jeff Trawick authored Apr 02, 2006

PR: 31759
Helped by: Ruediger Pluem, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390922 13f79535-47bb-0310-9956-ffa450edef68

d99724e7

remove charset turds left by last commit · f5a57b54

Roy T. Fielding authored Apr 02, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390887 13f79535-47bb-0310-9956-ffa450edef68

f5a57b54

01 Apr, 2006 4 commits

* Sync with CHANGES files of 2.2.x and 2.0.x · 60606c6b

Ruediger Pluem authored Apr 01, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390753 13f79535-47bb-0310-9956-ffa450edef68

60606c6b

* Actually increase MODULE_MAGIC_NUMBER_MINOR by one as r390210 only added · 7153d239

Ruediger Pluem authored Apr 01, 2006

  a comment to do so.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390619 13f79535-47bb-0310-9956-ffa450edef68

7153d239

* Sync with 2.2.x CHANGES file · 836b01da

Ruediger Pluem authored Apr 01, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390616 13f79535-47bb-0310-9956-ffa450edef68

836b01da

· d4389ab8

William A. Rowe Jr authored Apr 01, 2006

With all of the, uhm, interesting manners in which httpd
can be built and installed, let's ensure httpd -V gives the
reporter a chance to identify the APR flavor used to compile
and to run httpd when reporting bugs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390573 13f79535-47bb-0310-9956-ffa450edef68

d4389ab8

31 Mar, 2006 7 commits

Correct a dumb typo · 2fb71885

Colm MacCarthaigh authored Mar 31, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390519 13f79535-47bb-0310-9956-ffa450edef68

2fb71885

* Add siege-like behaviour to ApacheBench; output the results, as they have · 0d0e619d

Colm MacCarthaigh authored Mar 31, 2006

    accrued so far, when the user interrupts with ctrl-c. As the signal handler 
    is non-reentrant, we don't need volatiles, and the operations all look
    signal-safe.

  * Update the base version, since handling a signal differently is an external
    API change of sorts.

  * set the LastChangedRevision svn property, as ab.c has $Rev $ embedded, so
    it really should be.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390511 13f79535-47bb-0310-9956-ffa450edef68

0d0e619d

* Sync with 2.2.x CHANGES file · 7e3cf716

Ruediger Pluem authored Mar 31, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390507 13f79535-47bb-0310-9956-ffa450edef68

7e3cf716

Clean up some stuff found by Coverity. · bd644996

Garrett Rooney authored Mar 31, 2006

* modules/aaa/mod_authz_core.c
  (check_provider_list): Remove redundant code.
* modules/aaa/mod_auth.h
  (AUTHZ_DEFAULT_PROVIDER): Remove redundant definition.

Submitted by: Max Bowsher <maxb apache.org>
Reviewed by: bnicholes, rooneg


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390506 13f79535-47bb-0310-9956-ffa450edef68

bd644996

Give users the ability to set the window size for apache bench runs. Useful · dc4f0044

Colm MacCarthaigh authored Mar 31, 2006

for benchmarking largefile downloads.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390504 13f79535-47bb-0310-9956-ffa450edef68

dc4f0044

* As per discussion on the list: Return error code of apr_file_write_full · 93a6fa5b

Ruediger Pluem authored Mar 31, 2006

  or apr_bucket_read instead of APR_EGENERAL if they fail.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390499 13f79535-47bb-0310-9956-ffa450edef68

93a6fa5b

Note backports to be in 2.2.1 · 4ad433b2

Jim Jagielski authored Mar 31, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390496 13f79535-47bb-0310-9956-ffa450edef68

4ad433b2

30 Mar, 2006 2 commits

Document the removal of the flushing bandaid to a · 5dd51449

Jim Jagielski authored Mar 30, 2006

runtime param. Since other protocols might benefit
from this, remove the ajp_ prefixes, to make it
more generic looking.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390210 13f79535-47bb-0310-9956-ffa450edef68

5dd51449

· 94c825c3

Jim Jagielski authored Mar 30, 2006

Docs update...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390205 13f79535-47bb-0310-9956-ffa450edef68

94c825c3