Commits · ec58af74f8b2585aeea14c137278bca21e208686 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Nov 04, 2004

Andre Malo authored Nov 04, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105687 13f79535-47bb-0310-9956-ffa450edef68

ec58af74

* modules/experimental/mod_disk_cache.c (recall_headers, · 3d299c86

Joe Orton authored Nov 04, 2004

create_entity): Remove unused variables.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105686 13f79535-47bb-0310-9956-ffa450edef68

3d299c86

Add util_ldap_cache_getuserdn() prototype to the util_ldap.h header file · c6d7af58

Bradley Nicholes authored Nov 04, 2004

Submitted by:Jari Ahonen [jah progress.com]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105685 13f79535-47bb-0310-9956-ffa450edef68

c6d7af58

Document SSLPassPhraseDialog's piped input mode. · 5d990e61

Joe Orton authored Nov 04, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105684 13f79535-47bb-0310-9956-ffa450edef68

5d990e61

Remove bogus comment: for SSLPassPhraseDialog exec:..., argv is · d171082d

Joe Orton authored Nov 04, 2004

defined and documented and can't be changed.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105683 13f79535-47bb-0310-9956-ffa450edef68

d171082d

remove out-of-date comment... BillS reports that · b85ae045

Jeff Trawick authored Nov 04, 2004

AP_MPM_DISABLE_NAGLE_ACCEPTED_SOCK provides the
necessary capability to the MPM

Submitted by:	stoddard a.k.a. BillS a.k.a. FirstBill


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105682 13f79535-47bb-0310-9956-ffa450edef68

b85ae045

If the entry has a password then don't allow util_ldap_cache_getuserdn() to... · 3f592f47

Bradley Nicholes authored Nov 04, 2004

If the entry has a password then don't allow util_ldap_cache_getuserdn() to update the expiration timeout since it has no idea when the password was last validated.

Submitted by: Jari Ahonen [jah progress.com]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105681 13f79535-47bb-0310-9956-ffa450edef68

3f592f47

Fix for memory consumption DoS, CVE CAN-2004-0942: · f2ef1c9e

Joe Orton authored Nov 04, 2004

* server/protocol.c (ap_rgetline_core): Don't trim trailing whitespace
from the buffer here.
(ap_get_mime_headers_core): Trim trailing whitespace here, after
reading a complete field including continuation lines.  Also simplify
code to remove whitespace between field-name and colon.

Reviewed by: Andr�� Malo, Bill Stoddard


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105680 13f79535-47bb-0310-9956-ffa450edef68

f2ef1c9e

PR: 29709,32051 · 24695ee2

Nick Kew authored Nov 04, 2004

Submitted by: Gabriel Kalkuhl
Add warning notice about basing code on mod_example.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105679 13f79535-47bb-0310-9956-ffa450edef68

24695ee2

Just a simple switch of mod_usertrack to run earlier in the fixup hook. · c12e3594
Paul Querna authored Nov 04, 2004
```
PR: 29755


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105677 13f79535-47bb-0310-9956-ffa450edef68
```
c12e3594

Nov 03, 2004

Added the directive "Requires ldap-attribute" that allows the module to only... · 9357dfd9

Bradley Nicholes authored Nov 03, 2004

Added the directive "Requires ldap-attribute" that allows the module to only authorize a user if the attribute value specified matches the value of the user object. PR 31913

Submitted by: Ryan Morgan <rmorgan pobox.com>
Reviewd by: Brad Nicholes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105675 13f79535-47bb-0310-9956-ffa450edef68

9357dfd9

Nov 02, 2004

* docs/conf/magic: Remove trailing whitespace. · 01f874c4

Joe Orton authored Nov 02, 2004

PR: 31472
Submitted by: Jack Repenning


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105671 13f79535-47bb-0310-9956-ffa450edef68

01f874c4

Split LDAP authorization from authentication · d6cba555

Bradley Nicholes authored Nov 02, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105670 13f79535-47bb-0310-9956-ffa450edef68

d6cba555

Allow mod_authnz_ldap authorization functionality to be used without requiring... · ce6f50f9

Bradley Nicholes authored Nov 02, 2004

Allow mod_authnz_ldap authorization functionality to be used without requiring the user to also be authenticated through mod_authnz_ldap. This allows other authentication modules to take advantage of LDAP authorization only [PR 28253]

Submitted by: Jari Ahonen [jah progress.com]
Reviewed by: Brad Nicholes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105669 13f79535-47bb-0310-9956-ffa450edef68

ce6f50f9

Nov 01, 2004

Implement the util_ldap_cache_getuserdn() API so that the ldap authorization... · a3dbf1d9

Bradley Nicholes authored Nov 01, 2004

Implement the util_ldap_cache_getuserdn() API so that the ldap authorization only modules have access to the util_ldap user cache without have to require ldap authentication as well. Also required by mod_authnz_ldap so that it's authorization functionality can be used independant from the authentication functionality. [PR 31898]

Submitted by: Jari Ahonen [jah progress.com]
Reviewed by: Brad Nicholes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105667 13f79535-47bb-0310-9956-ffa450edef68

a3dbf1d9

* modules/mappers/mod_rewrite.c (hook_uri2file): Revert r1.259 to fix · 156a32dc

Joe Orton authored Nov 01, 2004

regression in proxy and QUERY_STRING handling (though with proxy
issues on HEAD mod_rewrite [P] stuff is still completely broken).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105666 13f79535-47bb-0310-9956-ffa450edef68

156a32dc

* server/util_filter.c (ap_save_brigade): Be more tolerant of a bucket · 41f699e1

Joe Orton authored Nov 01, 2004

type which neither implements ->setaside nor morphs on ->read, such as
the mod_perl SV bucket type in mod_perl <1.99_17; defer returning an
error in this case until after calling setaside on each bucket.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105664 13f79535-47bb-0310-9956-ffa450edef68

41f699e1

* modules/ssl/ssl_engine_kernel.c (ssl_hook_UserCheck): Fix possible · 2baf3b44

Joe Orton authored Nov 01, 2004

NULL pointer dereference in some configurations.

PR: 31848


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105663 13f79535-47bb-0310-9956-ffa450edef68

2baf3b44

Change core connection handling so that a connection-oriented · 39a5e051

Jeff Trawick authored Nov 01, 2004

error disabling nagle* is logged with the client IP address and
a debug log level.  We filter out not-implemented errors from
platforms which don't support TCP_NODELAY.

*This is typically EINVAL, which means that the client already
dropped the connection.

Also, mention an earlier change to include the client IP address
when logging connection-oriented errors.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105652 13f79535-47bb-0310-9956-ffa450edef68

39a5e051

Use <p></p> instead of <br> to mark paragraphs. · f6b9d3f9

Yoshiki Hayashi authored Nov 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105651 13f79535-47bb-0310-9956-ffa450edef68

f6b9d3f9

fix and update transformation · 26d13c7a

Andre Malo authored Nov 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105650 13f79535-47bb-0310-9956-ffa450edef68

26d13c7a

Fix typo and update HTML version. · e0ea40bc

Nick Kew authored Nov 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105649 13f79535-47bb-0310-9956-ffa450edef68

e0ea40bc

Fix compile trouble. · 6d1adb5f

Nick Kew authored Nov 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105648 13f79535-47bb-0310-9956-ffa450edef68

6d1adb5f

Oct 31, 2004

Document updates to mod_filter. · 56f15650

Nick Kew authored Oct 31, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105647 13f79535-47bb-0310-9956-ffa450edef68

56f15650

Change FilterDeclare/FilterProvider semantics as discussed in · 4bbd3c65

Nick Kew authored Oct 31, 2004

http://marc.theaimsgroup.com/?l=apache-httpd-dev&m=109899588616670&w=2


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105646 13f79535-47bb-0310-9956-ffa450edef68

4bbd3c65

Remove double calculation of tranfered bytes to backend. · 8cbbc5c6

Mladen Turk authored Oct 31, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105645 13f79535-47bb-0310-9956-ffa450edef68

8cbbc5c6

Oct 30, 2004

fix prototypes in documentation to match actual const-ness · b796bd60

Jeff Trawick authored Oct 30, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105631 13f79535-47bb-0310-9956-ffa450edef68

b796bd60

Don't display the cache statistics if the node is empty · 42ae628f

Bradley Nicholes authored Oct 30, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105629 13f79535-47bb-0310-9956-ffa450edef68

42ae628f

Oct 29, 2004

add ap_log_cerror(); use it in a couple of places in core output filter · 382eb2ca

Jeff Trawick authored Oct 29, 2004

so that the client IP address is recorded in the log


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105625 13f79535-47bb-0310-9956-ffa450edef68

382eb2ca

Oct 28, 2004

Fixup broken handling of range header. · e850634d

Nick Kew authored Oct 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105613 13f79535-47bb-0310-9956-ffa450edef68

e850634d

Oct 27, 2004

Add the check for an upgraded https connection when responding to the state of a connection · f680d9ac
Bradley Nicholes authored Oct 27, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105606 13f79535-47bb-0310-9956-ffa450edef68
```
f680d9ac

Fix mod_filter to support the case where a provider sets its own f->ctx · 0cac5e14

Nick Kew authored Oct 27, 2004

in its filter_init [grumble about filter_init ....]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105604 13f79535-47bb-0310-9956-ffa450edef68

0cac5e14

Move ap_filter_provider_t back out of public API · 9c8011dd

Nick Kew authored Oct 27, 2004

(suggested by nd; makes sense to niq)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105603 13f79535-47bb-0310-9956-ffa450edef68

9c8011dd

Oct 25, 2004

Since the host will include a port if the default port is not used, always... · dbdd4a98

Bradley Nicholes authored Oct 25, 2004

Since the host will include a port if the default port is not used, always specify the default ports for the port parameter.  This will allow a host string that contains multiple hosts the ability to mix some hosts with ports and some without. All hosts which do not specify  a port will use the default port.  #30592


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105596 13f79535-47bb-0310-9956-ffa450edef68

dbdd4a98

fixed a type match warning on NetWare · 136b3461

Jean-Jacques Clar authored Oct 25, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105594 13f79535-47bb-0310-9956-ffa450edef68

136b3461

Use a more descriptive error message, and make it an INFO insteead of NOTICE. · 4916fa29
Paul Querna authored Oct 25, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105593 13f79535-47bb-0310-9956-ffa450edef68
```
4916fa29

PR: 31875 · 28cac315

Nick Kew authored Oct 25, 2004

Fix URI parsing bug in case of a leading double-slash


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105586 13f79535-47bb-0310-9956-ffa450edef68

28cac315

This will put some messages in the error log when some people try a lame · d140d3c4

Paul Querna authored Oct 25, 2004

DoS by just opening a socket, and never sending any data.

Ivan suggested such a change about a month ago, to match the 1.3 behavoir.

Today I helped OSU's Admins figure out that someone was trying this 'attack'
against their mirror server. The server status just showed hundreds of
Apache Children stuck in Reading. This will at least hint to the admins
where the problem is by telling them about it in the error log.

Inspired by: Rici Lake, Ivan Ristic <ivanr webkreator.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105583 13f79535-47bb-0310-9956-ffa450edef68

d140d3c4

new Korean translations and up-to-date patches · 01a503f9

Jeon Jeongho authored Oct 25, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105581 13f79535-47bb-0310-9956-ffa450edef68

01a503f9

Oct 23, 2004

veto and revert win64 patch: 64bit changes must percolate from the · ffe347c9

Roy T. Fielding authored Oct 23, 2004

bottom (APR/system) up -- we can't give the client a 64bit API and
then cast it to 32bits internally without introducing security holes
on other platforms.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105572 13f79535-47bb-0310-9956-ffa450edef68

ffe347c9