Commits · edb3c3f70932b8c5d7367aea7b3ccf8ec90d6b5c · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Jan 08, 2004

* modules/dav/main/mod_dav.c (dav_handler): Reject request if the · edb3c3f7

Joe Orton authored Jan 08, 2004

Request-URI includes a fragment part, i.e. an unescaped #.

PR: 21779
Submitted by: Amit Athavale <amit_athavale@lycos.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102224 13f79535-47bb-0310-9956-ffa450edef68

edb3c3f7

Jan 07, 2004

· e76763d7

Paul J. Reder authored Jan 07, 2004

Synching with 2.0 branch after backport.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102211 13f79535-47bb-0310-9956-ffa450edef68

e76763d7

Jan 01, 2004

Add forensic logging. · f2092f16

Ben Laurie authored Jan 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102141 13f79535-47bb-0310-9956-ffa450edef68

f2092f16

Dec 27, 2003

sync with stable branch · 7a94b459

Jeff Trawick authored Dec 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102126 13f79535-47bb-0310-9956-ffa450edef68

7a94b459

Sync with 2.0.49-dev · 745b39c5

Justin Erenkrantz authored Dec 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102122 13f79535-47bb-0310-9956-ffa450edef68

745b39c5

Dec 18, 2003

Fix segfault in mod_mem_cache when caching streaming dynamic content. · d9b5bff6

Bill Stoddard authored Dec 18, 2003

PR: 21285, 21287


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102086 13f79535-47bb-0310-9956-ffa450edef68

d9b5bff6

Add Polish translation of error messages. · 083e7615

Jeff Trawick authored Dec 18, 2003

PR:             25101
Submitted by:	Tomasz Kepczynski <tomek jot23.org>
Reviewed by:	Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102085 13f79535-47bb-0310-9956-ffa450edef68

083e7615

Dec 15, 2003

mod_proxy with ProxyErrorOverride On in a reverse-proxy configuration attaches · d7707762

Ian Holsman authored Dec 15, 2003

a body to the 302 response and a wrong Content-Length header.


PR: 22951
Submitted by:	Ermanno Scaglione <scaglione ..at.. starnetone.de>
Reviewed by:	Blaise Tarr <blaise.tarr .. at .. cnet.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102069 13f79535-47bb-0310-9956-ffa450edef68

d7707762

Allow retention of header fields on non-200 responses · ec27e7c1

Ken Coar authored Dec 15, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102068 13f79535-47bb-0310-9956-ffa450edef68

ec27e7c1

Dec 14, 2003

sync · 74ac46b4

Andre Malo authored Dec 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102060 13f79535-47bb-0310-9956-ffa450edef68

74ac46b4

sync with stable branch · 399db922

Jeff Trawick authored Dec 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102052 13f79535-47bb-0310-9956-ffa450edef68

399db922

Dec 13, 2003

Fix some piped log problems: bogus "piped log program '(null)' · a9125080

Jeff Trawick authored Dec 13, 2003

failed" messages during restart and problem with the logger
respawning again after Apache is stopped.

PR:                21648, 24805


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102048 13f79535-47bb-0310-9956-ffa450edef68

a9125080

Dec 12, 2003

· 76abc32e

Paul J. Reder authored Dec 12, 2003

  *) Add a hook (insert_error_filter) to allow filters to re-insert
     themselves during processing of error responses. Enable mod_expires
     to use the new hook to include Expires headers in valid error
     responses. This addresses an RFC violation. It fixes PRs 19794,
     24884, and 25123. [Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102038 13f79535-47bb-0310-9956-ffa450edef68

76abc32e

Dec 11, 2003

Win32: Tweak MaxMemFree patch. Allocate ptrans specifying pchild · 3d58f96b

Bill Stoddard authored Dec 11, 2003

as the parent pool as we did prior to the MaxMemFree patch.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102025 13f79535-47bb-0310-9956-ffa450edef68

3d58f96b

Dec 10, 2003

Fix <Limit> and <LimitExcept> parsing to require a closing '>' · 9d8c1a54

Jeff Trawick authored Dec 10, 2003

in the initial container.

PR:                25414
Submitted by:	   Geoffrey Young <geoff apache.org>]
Reviewed by:	   Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102021 13f79535-47bb-0310-9956-ffa450edef68

9d8c1a54

Fix memory leak in handling of request bodies during reverse · 3cdc793b

Jeff Trawick authored Dec 10, 2003

proxy operations.

PR:      24991
Submitted by: Larry Toppi <larry.toppi citrix.com>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102017 13f79535-47bb-0310-9956-ffa450edef68

3cdc793b

· a7bcbb32

Paul J. Reder authored Dec 10, 2003

Synching with 2.0 branch after backport.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102016 13f79535-47bb-0310-9956-ffa450edef68

a7bcbb32

backported to 2.0.49 · 4af9c2cb

Stas Bekman authored Dec 10, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102011 13f79535-47bb-0310-9956-ffa450edef68

4af9c2cb

update the misconfigured INCLUDES skipping code to remove itself, so it'd complain · 7960b7ed

Stas Bekman authored Dec 10, 2003

only once
PR:
Obtained from:
Submitted by:
Reviewed by:	Jeff Trawick, Bill Rowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102005 13f79535-47bb-0310-9956-ffa450edef68

7960b7ed

Dec 09, 2003

complain via error_log when mod_include's INCLUDES filter is · 5c17d775

Stas Bekman authored Dec 09, 2003

     enabled, but the relevant Options flag allowing the filter to run
     for the specific resource wasn't set, so that the filter won't
     silently get skipped.
PR:
Obtained from:
Submitted by:
Reviewed by:	nd


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101999 13f79535-47bb-0310-9956-ffa450edef68

5c17d775

Dec 04, 2003

sync with APACHE_2_0_BRANCH · 09b85c15

Jeff Trawick authored Dec 04, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101983 13f79535-47bb-0310-9956-ffa450edef68

09b85c15

Clean up httpd -V output: Instead of displaying the MPM source · 26f3fbe5

Jeff Trawick authored Dec 04, 2003

directory, display the MPM name and some MPM properties.

Submitted by: Geoffrey Young <geoff apache.org>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101978 13f79535-47bb-0310-9956-ffa450edef68

26f3fbe5

Dec 02, 2003

sunny but frigid today in charlottesville... · 4e0451f2

Cliff Woolley authored Dec 02, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101959 13f79535-47bb-0310-9956-ffa450edef68

4e0451f2

Synch with 2.0 branch. · ff2c9532

Joe Orton authored Dec 02, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101956 13f79535-47bb-0310-9956-ffa450edef68

ff2c9532

Nov 26, 2003

Add fatal exception hook for use by debug modules. The hook is only · 5ead11c9

Jeff Trawick authored Nov 26, 2003

available if the --enable-exception-hook configure parm is used.

Sample users at http://httpd.apache.org/~trawick/exception_hook.html

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101899 13f79535-47bb-0310-9956-ffa450edef68

5ead11c9

Nov 25, 2003

· 2b048c5b

Paul J. Reder authored Nov 25, 2003

Sync with APACHE_2_0_BRANCH.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101891 13f79535-47bb-0310-9956-ffa450edef68

2b048c5b

Extend mod_status output to include SSL session cache status · c0125084

Joe Orton authored Nov 25, 2003

information:

* modules/ssl/mod_ssl.c (ssl_hook_pre_config): Call
ssl_scache_status_register.

* modules/ssl/ssl_scache.c (ssl_scache_status): Removed function.
(ssl_ext_status_hook): Renamed from ssl_ext_ms_display: switch to
2.1's mod_status "status_hook" API.
(ssl_scache_status_register): Register optional hook.

* modules/ssl/ssl_scache_dbm.c (ssl_scache_dbm_status): Adjust to use
new API.

* modules/ssl/ssl_scache_shmcb.c (ssl_scache_shmcb_status): Adjust
to use new API.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101889 13f79535-47bb-0310-9956-ffa450edef68

c0125084

Remove shmht session cache in favour of shmcb; shmht has had · b62df8d2

Joe Orton authored Nov 25, 2003

data corruption bugs since being apr_rmm'ified.

* config.m4, mod_ssl.dsp: Don't build ssl_util_table and
ssl_scache_shmht.

* ssl_util_table.h, ssl_util_table.c, ssl_scache_shmht.c: Removed
files.

* mod_ssl.h (SSLModConfigRec): Use a void * pointer for storing
the scache-specific data.

* ssl_engine_config.c (ssl_cmd_SSLSessionCache): Treat shmht: as
shmcb:.

* ssl_scache.c: Remove shmht hooks throughout.

* ssl_scache_shmcb.c: Remove casts to use the table_t * pointer as a
void *.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101888 13f79535-47bb-0310-9956-ffa450edef68

b62df8d2

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_version): · 29af1821

Joe Orton authored Nov 25, 2003

Determine the library version string at run-time rather than at
compile-time.

Submitted by: Eric Seidel <eseidel@apple.com>
PR: 23956


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101879 13f79535-47bb-0310-9956-ffa450edef68

29af1821

Nov 24, 2003

SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the · 88f26135

Andre Malo authored Nov 24, 2003

errorlog.

Reviewed by: Mark J Cox


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101873 13f79535-47bb-0310-9956-ffa450edef68

88f26135

Nov 22, 2003

· 1d0b9aba

Paul J. Reder authored Nov 22, 2003

A better solution than my previous commit as pointed out by Andre Malo.
mod_expires: Initialize ExpiresDefault to NULL instead of "" to
avoid reporting an Internal Server error if it is used without
having been set in the httpd.conf file. PR: 23748, 24459
Submitted: Andre Malo, Liam Quinn <liam htmlhelp.com>
Reviewed: Andre Malo, Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101846 13f79535-47bb-0310-9956-ffa450edef68

1d0b9aba

Nov 21, 2003

sync · 73ac7215

Andre Malo authored Nov 21, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101845 13f79535-47bb-0310-9956-ffa450edef68

73ac7215

· 11a9e3b4

Paul J. Reder authored Nov 21, 2003

mod_expires: Don't report an Internal Server error if ExpiresDefault
is used and has not been set in the httpd.conf file. PR: 23748, 24459

Submitted: Liam Quinn <liam htmlhelp.com>
Reviewed: Paul J. Reder

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101839 13f79535-47bb-0310-9956-ffa450edef68

11a9e3b4

Account for some bytes handed to the network layer prior to · 2a3c2152

Jeff Trawick authored Nov 21, 2003

dropped connections.

Such bytes were counted on some paths but not on others.  If
these bytes are to be counted in some error paths, they should
be counted in the others.  We don't know if they were actually
presented to the client.

AFAIK, this only affects mod_logio.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101832 13f79535-47bb-0310-9956-ffa450edef68

2a3c2152

Fix a problem with the display of empty variables ("SetEnv foo") in · 70654fd8

Jeff Trawick authored Nov 21, 2003

mod_include.  Now it works like 1.3 (see PR for details).  Setting
of envvars for scripts was/is consistent with 1.3 for empty variables.

PR:           24734
Submitted by: Markus Julen <mj zermatt.net>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101830 13f79535-47bb-0310-9956-ffa450edef68

70654fd8

Nov 20, 2003

sync with stable branch · 446f4dfb

Jeff Trawick authored Nov 20, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101819 13f79535-47bb-0310-9956-ffa450edef68

446f4dfb

Win32: Make Win32 MPM transaction pools honor MaxMemFree · 4ae7b10a

Bill Stoddard authored Nov 20, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101817 13f79535-47bb-0310-9956-ffa450edef68

4ae7b10a

mod_autoindex: new directive IndexStyleSheet · bff3bad5

Ian Holsman authored Nov 20, 2003


PR:
Obtained from:
Submitted by: Tyler Riddle <triddle_1999 yahoo.com> and Paul Querna <chip force-elite.com>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101809 13f79535-47bb-0310-9956-ffa450edef68

bff3bad5

Nov 13, 2003

sync with stable branch · 80a92a45

Jeff Trawick authored Nov 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101779 13f79535-47bb-0310-9956-ffa450edef68

80a92a45

Nov 12, 2003

· 56fafca3

William A. Rowe Jr authored Nov 12, 2003

Normalize email addresses for the purpose of deliberate but simple-to-read
obscufication.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101763 13f79535-47bb-0310-9956-ffa450edef68

56fafca3