Commits · fb752c6e01aaa143e2fa1012cdaa0e4ecc087e04 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

09 May, 2006 2 commits

revert last entry -- not user visible and poorly worded · fb752c6e
Roy T. Fielding authored May 09, 2006
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@405478 13f79535-47bb-0310-9956-ffa450edef68
```
fb752c6e

Thom May authored May 09, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@405400 13f79535-47bb-0310-9956-ffa450edef68

dc3ccfa2

07 May, 2006 1 commit

Note scoreboard stuff in changes; leave the 'difficult' patches · 4651b2a4

Nick Kew authored May 07, 2006

to see if they attract any more review.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@404851 13f79535-47bb-0310-9956-ffa450edef68

4651b2a4

05 May, 2006 1 commit

Add optional 'scheme://' prefix to ServerName directive. For · ef63a0d6

Sander Temme authored May 05, 2006

     'https', mod_http returns "https" for the ap_hook_http_scheme and
     DEFAULT_HTTPS_PORT for ap_hook_default_port.  This fixes Redirect
     responses to requests for directories without a trailing slash
     when httpd runs behind a proxy or offload device that processes
     SSL.  It also enables support for Subversion in that
     configuration.  This change is completely backwards compatible
     and passes the perl-framework.  Minor mmn bump because I add a
     field to server_rec. 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@399947 13f79535-47bb-0310-9956-ffa450edef68

ef63a0d6

04 May, 2006 1 commit

mod_charset_lite: Bypass translation when the source and dest charsets · 9600a2d2

Jeff Trawick authored May 04, 2006

are the same.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@399668 13f79535-47bb-0310-9956-ffa450edef68

9600a2d2

03 May, 2006 2 commits

* Add Content-Type to headers_out if not already set. This ensures that · fa4c59e4

Ruediger Pluem authored May 03, 2006

  the Content-Type of the cached entity gets restored correctly.

PR: 39266


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@399388 13f79535-47bb-0310-9956-ffa450edef68

fa4c59e4

PR 39275. don't fork MaxClients worth of processes if child_init or fork() are · 540d5f57
Greg Ames authored May 03, 2006
```
slow.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@399099 13f79535-47bb-0310-9956-ffa450edef68
```
540d5f57

22 Apr, 2006 3 commits

* Sync with 2.2.x CHANGES file · 3348755b

Ruediger Pluem authored Apr 22, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@396137 13f79535-47bb-0310-9956-ffa450edef68

3348755b

* CHANGES: Make spacing consistent with the rest of the file. · fddf77ff
Garrett Rooney authored Apr 22, 2006
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@396073 13f79535-47bb-0310-9956-ffa450edef68
```
fddf77ff

* CHANGES: Note the addition of mod_proxy_fcgi. · 113b4486

Garrett Rooney authored Apr 22, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@396064 13f79535-47bb-0310-9956-ffa450edef68

113b4486

18 Apr, 2006 2 commits

Correctly handle internal redirects, by testing only for r-main == NULL. · 103533a3

Colm MacCarthaigh authored Apr 18, 2006

ap_is_initial_req() returns false for internal redirects.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@395079 13f79535-47bb-0310-9956-ffa450edef68

103533a3

Thiago Zaninotti reported to security@apache.org on 20060410 a possible · e97839d6

Mark J. Cox authored Apr 18, 2006

cross-site scripting flaw because the Expect header error message isn't
escaped. We couldn't find a way that this could be used by an attacker
however, as they can't influence the Expect header a victim will send to a
target site. Thiago agreed and we're therefore not treating this as a
security flaw, but it is a bug that ought to get fixed. I'll add to
STATUS for 1.3/2.0/2.2 shortly for acks.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394965 13f79535-47bb-0310-9956-ffa450edef68

e97839d6

16 Apr, 2006 1 commit

* Also initialize local data structures for workers of a balancer. · 1141e9a4

Ruediger Pluem authored Apr 16, 2006

PR: 38227, 39267
Submitted by: James A. Robinson <jim.robinson stanford.edu>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394446 13f79535-47bb-0310-9956-ffa450edef68

1141e9a4

14 Apr, 2006 3 commits

* Sync with 2.2.x CHANGES · 9f4584eb

Ruediger Pluem authored Apr 14, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394092 13f79535-47bb-0310-9956-ffa450edef68

9f4584eb

* Avoid calling ap_proxy_http_cleanup twice as this releases a connection · 2a16d5f9

Ruediger Pluem authored Apr 14, 2006

  from the connection pool twice. This causes this connection to be present
  in the connection pool twice. Thus it may be used by different threads
  at the same time which causes many troubles (segfaults in this case).
  Furthermore implement a logic to prevent double releases to the connection
  pool if they are triggered by buggy code and log an error message in this
  case.

  - mod_proxy_http.c: remove double calls to ap_proxy_http_cleanup
  - proxy_util.c: Add logic to prevent double releases of a
    connection to the connection pool.

PR: 38793


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394088 13f79535-47bb-0310-9956-ffa450edef68

2a16d5f9

* Initialize last_char as otherwise a random value will be compared · a475dde6

Ruediger Pluem authored Apr 14, 2006

  against APR_ASCII_LF at the end of the loop if bb only contains an
  EOS bucket.

PR: 39282
Submitted by: Davi Arnaut <davi haxent.com.br>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@394070 13f79535-47bb-0310-9956-ffa450edef68

a475dde6

12 Apr, 2006 1 commit

The crypt() prototype is in <unistd.h> instead of <crypt.h> · 62f5a2fd

Jeff Trawick authored Apr 12, 2006

on HP-UX.  We had no prototype for crypt() there.
In 64-bit mode, a crash occurred because the pointer 
returned by crypt() was truncated before we passed
the pointer to apr_cpystrn().


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393364 13f79535-47bb-0310-9956-ffa450edef68

62f5a2fd

10 Apr, 2006 3 commits

* Rollback r393037 as this was vetoed by wrowe. Details see · 13fe1784

Ruediger Pluem authored Apr 10, 2006

  http://mail-archives.apache.org/mod_mbox/httpd-dev/200604.mbox/%3c443ABE65.1060603@rowe-clan.net%3e


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393087 13f79535-47bb-0310-9956-ffa450edef68

13fe1784

* Prevent r->parsed_uri.path from being NULL as this can cause segmentation · 2cdf62e1

Ruediger Pluem authored Apr 10, 2006

  faults e.g. in mod_cache. Set it to "/" in this case.

PR: 39259
Submitted by: Davi Arnaut <davi haxent.com.br>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@393037 13f79535-47bb-0310-9956-ffa450edef68

2cdf62e1

htdbm: Warn the user when adding a plaintext password on a platform · 927ba95a

Jeff Trawick authored Apr 10, 2006

where it wouldn't work with the server (i.e., anywhere that has
crypt()).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@392944 13f79535-47bb-0310-9956-ffa450edef68

927ba95a

08 Apr, 2006 1 commit

* Check for an existing socket independant of an existing connection record. · da57990e

Ruediger Pluem authored Apr 08, 2006

  This ensures that requests handled by the '*' worker are sent to the correct
  backend server.

PR: 39253


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@392613 13f79535-47bb-0310-9956-ffa450edef68

da57990e

02 Apr, 2006 2 commits

Default handler: Don't return output filter apr_status_t values. · d99724e7

Jeff Trawick authored Apr 02, 2006

PR: 31759
Helped by: Ruediger Pluem, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390922 13f79535-47bb-0310-9956-ffa450edef68

d99724e7

remove charset turds left by last commit · f5a57b54

Roy T. Fielding authored Apr 02, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390887 13f79535-47bb-0310-9956-ffa450edef68

f5a57b54

01 Apr, 2006 2 commits

* Sync with CHANGES files of 2.2.x and 2.0.x · 60606c6b

Ruediger Pluem authored Apr 01, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390753 13f79535-47bb-0310-9956-ffa450edef68

60606c6b

* Sync with 2.2.x CHANGES file · 836b01da

Ruediger Pluem authored Apr 01, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390616 13f79535-47bb-0310-9956-ffa450edef68

836b01da

31 Mar, 2006 2 commits

* Sync with 2.2.x CHANGES file · 7e3cf716

Ruediger Pluem authored Mar 31, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390507 13f79535-47bb-0310-9956-ffa450edef68

7e3cf716

Note backports to be in 2.2.1 · 4ad433b2

Jim Jagielski authored Mar 31, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390496 13f79535-47bb-0310-9956-ffa450edef68

4ad433b2

30 Mar, 2006 3 commits

Document the removal of the flushing bandaid to a · 5dd51449

Jim Jagielski authored Mar 30, 2006

runtime param. Since other protocols might benefit
from this, remove the ajp_ prefixes, to make it
more generic looking.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390210 13f79535-47bb-0310-9956-ffa450edef68

5dd51449

Note merged backport · bf8c6d1c

Jim Jagielski authored Mar 30, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390192 13f79535-47bb-0310-9956-ffa450edef68

bf8c6d1c

Backported to 2.2.1... · 14641516

Jim Jagielski authored Mar 30, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@390185 13f79535-47bb-0310-9956-ffa450edef68

14641516

13 Mar, 2006 1 commit

reflect a couple of items merged into 2.2.1-dev · d5347ec3

Jeff Trawick authored Mar 13, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@385583 13f79535-47bb-0310-9956-ffa450edef68

d5347ec3

05 Mar, 2006 1 commit

* Crosscheck the length of the body chunk with the length of the ajp message · 6023b116

Ruediger Pluem authored Mar 05, 2006

to prevent readings beyond the buffer boundaries which possibly could reveal
sensitive memory contents to the client.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@383339 13f79535-47bb-0310-9956-ffa450edef68

6023b116

28 Feb, 2006 1 commit

Revert the refactoring of the request read code · 70188dee

Brian Pane authored Feb 28, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@381679 13f79535-47bb-0310-9956-ffa450edef68

70188dee

27 Feb, 2006 1 commit

* Document fixes for PR 38524. · b69ec0c3

Ruediger Pluem authored Feb 27, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@381469 13f79535-47bb-0310-9956-ffa450edef68

b69ec0c3

25 Feb, 2006 1 commit

Fill in the scoreboard's tid field in the event MPM, just like we do in · a0e92e2f

Garrett Rooney authored Feb 25, 2006

other MPMs.

Submitted by: Chris Darroch <chrisd pearsoncmg.com>
Issue: 38736

* server/mpm/experimental/event/event.c
  (worker_thread): Fill in the scoreboard's tid field.

* CHANGES: Note change.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@380878 13f79535-47bb-0310-9956-ffa450edef68

a0e92e2f

23 Feb, 2006 1 commit

mod_charset_lite: Remove Content-Length when output filter can · 9c97962e

Jeff Trawick authored Feb 23, 2006

invalidate it.  Warn when input filter can invalidate it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@380232 13f79535-47bb-0310-9956-ffa450edef68

9c97962e

21 Feb, 2006 1 commit

Ensure that the proper status line is written to the client, fixing · 1db46cae

Jeff Trawick authored Feb 21, 2006

incorrect status lines caused by filters which modify r->status without
resetting r->status_line, such as the built-in byterange filter.

Note: For the byterange example, the handler must set r->status_line
even though this is a 200 response. Some proxy-type modules blindly
set r->status_line as set by the origin server and thus trigger
the problem with byteranges if the origin server didn't handle the
byterange.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@379562 13f79535-47bb-0310-9956-ffa450edef68

1db46cae

17 Feb, 2006 1 commit

* modules/ssl/ssl_engine_init.c (ssl_check_public_cert): Fix spurious · 5c87df10

Joe Orton authored Feb 17, 2006

hostname-mismatch warning for valid wildcard certs.

PR: 37911
Submitted by: Nick Burch <nick torchbox.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@378487 13f79535-47bb-0310-9956-ffa450edef68

5c87df10

15 Feb, 2006 2 commits

- Nitpicking style police: Add space between PR and number of PR · 2ec413cd

Ruediger Pluem authored Feb 15, 2006

- Remove myself from credit list of fix for PR 38340, as this patch went
  in unaltered.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@378085 13f79535-47bb-0310-9956-ffa450edef68

2ec413cd

*) mod_proxy: Fix KeepAlives not being allowed and set to · 5439fda0

Jim Jagielski authored Feb 15, 2006

     backend servers. PR38602. [Ruediger Pluem, Jim Jagielski]

Also, document previous patch:
  *) Correctly initialize mod_proxy workers, which use a
     combination of local and shared datasets. Adjust logging
     to better trace usage. PR38403. [Jim Jagielski]



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@378032 13f79535-47bb-0310-9956-ffa450edef68

5439fda0