Propose the dav_send_one_response() fix for backport.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1764051 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/STATUS b/STATUS
index f04bd512d9386a9f993d89e503de94be93f4a8c7..c5f1c88d57afe494ef76d469d0e6523331631d94 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -227,6 +227,19 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
                 added to CFLAGS because when combined with -Wstrict-prototypes,
                 the AC_LANG_PROGRAM won't compile (it uses a bare main()).
 
+  *) mod_dav: Fix a potential cause of unbounded memory usage or incorrect
+     behavior in a routine that sends <DAV:response>'s to the output filters.
+     trunk patch: http://svn.apache.org/r1764040
+     2.4.x patch: trunk works (modulo CHANGES)
+     Note: this patch changes the signature of the existing mod_dav's public
+     API, dav_send_one_response(), because this API is not yet a part of any
+     2.4.x release (it was backported to 2.4.x in r1756561).  So, the change
+     should either go to the upcoming 2.4.24, or should be reworked in case
+     2.4.24 is released without it.  See the thread at
+     https://mail-archives.apache.org/mod_mbox/httpd-dev/201608.mbox/%3C20160822151917.GA22369%40redhat.com%3E
+     for additional details.
+     +1: kotkov
+
 PATCHES/ISSUES THAT ARE BEING WORKED
 
   *) http: Don't remove the Content-Length of zero from a HEAD response if