]>
granicus.if.org Git - apache/log
Eric Covener [Sat, 9 Aug 2014 21:20:50 +0000 (21:20 +0000)]
PR56832 -- mod_ratelimit reports at ERROR level everytime a lower-level filter
encounters an error. Since the core output filter only emits TRACE1, a higher
level filter shouldn't log the same condition as ERROR.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1617018 13f79535 -47bb-0310-9956-
ffa450edef68
Mike Rumph [Thu, 7 Aug 2014 00:11:21 +0000 (00:11 +0000)]
Some changes for mod_authnz_fcgi doc.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1616377 13f79535 -47bb-0310-9956-
ffa450edef68
Mike Rumph [Wed, 6 Aug 2014 23:31:12 +0000 (23:31 +0000)]
Generated doc changes.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1616371 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sat, 2 Aug 2014 20:19:17 +0000 (20:19 +0000)]
use /var/log instead of /var/logs in examples
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1615362 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Sat, 2 Aug 2014 08:24:35 +0000 (08:24 +0000)]
PR53420: Proxy responses with error status and
"ProxyErrorOverride On" hang until proxy timeout.
Regression from 2.2. It was introduced by r912063
in order to fix PR41646.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1615289 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Fri, 1 Aug 2014 04:23:50 +0000 (04:23 +0000)]
Turn some APR_BUCKET_REMOVE(e)+apr_bucket_destroy(e) into the equivalent apr_bucket_delete(e) to reduce code verbosity
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1615026 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Thu, 31 Jul 2014 08:06:22 +0000 (08:06 +0000)]
* acinclude.m4 (APACHE_CHECK_SYSTEMD): Actually use $PKGCONFIG, duh.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1614824 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Thu, 31 Jul 2014 08:01:07 +0000 (08:01 +0000)]
* acinclude.m4 (APACHE_CHECK_SYSTEMD): Check first for libsystemd
with pkg-config since libsystemd-daemon is deprecated upstream.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1614823 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Thu, 31 Jul 2014 07:56:44 +0000 (07:56 +0000)]
* configure.in, acinclude.m4: Move systemd check to APACHE_CHECK_SYSTEMD
and use pkg-config where available.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1614821 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 30 Jul 2014 04:24:49 +0000 (04:24 +0000)]
Fix typo spotted in comment #2818
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1614540 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 26 Jul 2014 17:26:43 +0000 (17:26 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613690 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 26 Jul 2014 17:25:07 +0000 (17:25 +0000)]
XML Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613689 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sat, 26 Jul 2014 16:59:50 +0000 (16:59 +0000)]
In 2.4.10, AuthLDAPBindDN might not be used for some LDAP searches, causing
LDAP authz failures if AuthLDAPBindDN was able to search through more of
LDAP than web users.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613682 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 25 Jul 2014 22:24:13 +0000 (22:24 +0000)]
no status during if_walk
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613526 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 25 Jul 2014 22:20:33 +0000 (22:20 +0000)]
call out some variables that aren't set during <if>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613524 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 25 Jul 2014 18:54:03 +0000 (18:54 +0000)]
mod_proxy_wstunnel: Concurrent websockets messages could be
lost or delayed with ProxyWebsocketAsync enabled.
Submitted By: Edward Lu
Committed By: covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613493 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Thu, 24 Jul 2014 22:49:07 +0000 (22:49 +0000)]
xform
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613321 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Thu, 24 Jul 2014 22:45:33 +0000 (22:45 +0000)]
two commenters were confused authnprovideralias
providing special config to authz providers
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613318 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Thu, 24 Jul 2014 17:02:03 +0000 (17:02 +0000)]
Minor mmn bump due to r1612940.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613189 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Thu, 24 Jul 2014 07:53:20 +0000 (07:53 +0000)]
Fix syntax error introduced in r1612921.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1613029 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Wed, 23 Jul 2014 21:15:06 +0000 (21:15 +0000)]
Re-introduce check for sufficient PCRE version.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612945 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 23 Jul 2014 20:27:32 +0000 (20:27 +0000)]
Forgotten file needed for r1612934.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612940 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 23 Jul 2014 20:02:14 +0000 (20:02 +0000)]
Note/update some requirements versions.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612938 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 23 Jul 2014 20:00:50 +0000 (20:00 +0000)]
Fix obvious errors. Probably the rest of the
file is outdated as well.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612937 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 23 Jul 2014 19:53:22 +0000 (19:53 +0000)]
Add compiled and loaded PCRE version numbers
to "httpd -V" output and to mod_info page.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612934 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 23 Jul 2014 19:01:45 +0000 (19:01 +0000)]
Check for correct minimum PCRE version in configure,
do not check in source code.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612921 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Tue, 22 Jul 2014 19:29:08 +0000 (19:29 +0000)]
Clarify comment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612653 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Tue, 22 Jul 2014 11:57:06 +0000 (11:57 +0000)]
Switch from lua_objlen() to Lua 5.2 preferred
lua_rawlen(). Define lua_rawlen() in terms of
lua_objlen() when building against older Lua.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612552 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Tue, 22 Jul 2014 05:37:12 +0000 (05:37 +0000)]
Remove APLOG_NOERRNO.
This was intoduced in r1418677.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612469 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Tue, 22 Jul 2014 05:17:10 +0000 (05:17 +0000)]
Remove APLOG_NOERRNO.
Add some APLOGNO.
Fix some alignment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612466 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sun, 20 Jul 2014 17:08:20 +0000 (17:08 +0000)]
Add message numbers to mod_ssl_ct messages with severity > debug.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612122 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 20 Jul 2014 14:25:57 +0000 (14:25 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612091 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 20 Jul 2014 14:24:13 +0000 (14:24 +0000)]
XML update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612090 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sun, 20 Jul 2014 09:32:58 +0000 (09:32 +0000)]
Add missing APLOGNO.
Refactor some lines to keep APLOGNO on the same line as ap_log_error, when applicable.
Split lines longer than 80.
Improve alignment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1612068 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 22:05:10 +0000 (22:05 +0000)]
Add missing APLOGNO.
Split lines longer than 80.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611980 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 22:03:58 +0000 (22:03 +0000)]
Add missing APLOGNO.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611979 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 22:02:53 +0000 (22:02 +0000)]
Add missing APLOGNO.
Refactor to keep APLOGNO on the same line as ap_log_error, when applicable.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611978 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 19 Jul 2014 17:45:36 +0000 (17:45 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611930 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 19 Jul 2014 17:44:32 +0000 (17:44 +0000)]
XML update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611929 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 16:37:29 +0000 (16:37 +0000)]
Fix comment.
Remove @file and @brief from within the @defgroup to be consistenbt with doxygen comments from other files.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611919 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 13:36:52 +0000 (13:36 +0000)]
Move comment from .c to .h in order to make use of it in doxygen.
Fix the comment that states that these vars are NULL on ASCII machine, they seem to be undefined instead.
Rework some comments.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611916 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 13:03:36 +0000 (13:03 +0000)]
Improve doxygen comment.
Generate the doc even if build on non-EBCDIC system + fix a comment about non-EBCDIC system. In this case, these vars are undefined, not NULL.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611908 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 10:30:42 +0000 (10:30 +0000)]
Improve doxygen comment.
Use a comment already present as the doxygen description of the module.
Remove a useless @def.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611880 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 09:46:20 +0000 (09:46 +0000)]
Do not use deprecated define.
No change in generated code because MODULE_MAGIC_NUMBER is defined as:
#define MODULE_MAGIC_NUMBER MODULE_MAGIC_NUMBER_MAJOR
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611871 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 19 Jul 2014 08:35:51 +0000 (08:35 +0000)]
Improve doxygen comment.
Improve layout, fix typo, generate relevant doc even if build on non-EBCDIC system + add note that these functions are mostly noop on non-EBCDIC system.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611858 13f79535 -47bb-0310-9956-
ffa450edef68
André Malo [Fri, 18 Jul 2014 21:43:09 +0000 (21:43 +0000)]
port latex-build fix from 2.4
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611815 13f79535 -47bb-0310-9956-
ffa450edef68
André Malo [Fri, 18 Jul 2014 20:32:00 +0000 (20:32 +0000)]
update transformation
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611793 13f79535 -47bb-0310-9956-
ffa450edef68
André Malo [Fri, 18 Jul 2014 20:20:09 +0000 (20:20 +0000)]
fix properties and xml validity
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611791 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Fri, 18 Jul 2014 18:12:12 +0000 (18:12 +0000)]
mod_lua: Don't quote values in cookies; Make IE happy again [#56734]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611741 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 18 Jul 2014 17:21:16 +0000 (17:21 +0000)]
mod_deflate: don't require <limits.h> by using APR_INT32_MAX instead of INT_MAX.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611725 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Fri, 18 Jul 2014 11:39:11 +0000 (11:39 +0000)]
Silence compiler warning:
mod_authnz_fcgi.c:580:44: warning: 'orspbuflen'
may be used uninitialized in this function.
Not true but annoying.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611600 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Thu, 17 Jul 2014 21:36:02 +0000 (21:36 +0000)]
Fix typo spotted by Mike Rumph
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611481 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Thu, 17 Jul 2014 21:31:53 +0000 (21:31 +0000)]
Fix all errors related to apreq in doxygen processing.
Remove useless comment. As far as I have tested (with dox 1.8.6), it works as described in doxygen doc.
Generated docs are still only visible from the "List File". More work is needed to have them included within the "Module/Core routine" architecture. However they are now useable and the ouput of "make dox" is now readable :)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611480 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Thu, 17 Jul 2014 18:24:43 +0000 (18:24 +0000)]
mark async websockets tunnel stuff as experimental
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611430 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Thu, 17 Jul 2014 14:07:53 +0000 (14:07 +0000)]
record for posterity why some 2/3-char formats begin with a funny caret.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611357 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Thu, 17 Jul 2014 06:06:45 +0000 (06:06 +0000)]
Add SORT_GROUP_NAMES=YES inorder to ease navigation in generated doc.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611256 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Thu, 17 Jul 2014 05:34:12 +0000 (05:34 +0000)]
Improve doxygen comment.
Improve layout, add trailing '.' in function description, capitalize first letter of description, fix typo, turn \0 into \\0.
Move the detailed description after @defgroup so that it is taken into account.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611252 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 17 Jul 2014 04:30:25 +0000 (04:30 +0000)]
As noted by Yann, this resulted in a dead var assignment. Preinit won't
work due to the fact that we overload rv as both the DWORD windows result
and the apr_status_t result code.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611244 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 16 Jul 2014 22:22:49 +0000 (22:22 +0000)]
Improve doxygen comment.
Improve layout, add trailing '.' in function description, remove unneeded @fn.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611210 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 16 Jul 2014 22:09:39 +0000 (22:09 +0000)]
Improve doxygen comment.
Improve layout, add trailing '.' in function description, remove unneeded @fn.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611202 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Wed, 16 Jul 2014 20:15:49 +0000 (20:15 +0000)]
mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for
internationalization.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611169 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Wed, 16 Jul 2014 20:06:54 +0000 (20:06 +0000)]
General whitespace cleanup, error message normalization, and style conformance
for 80 character folding and legibility.
Folds several identical errors into the same APLOGNO() groups.
Catches several errors which were missing APLOGNO() entries, in the
existing groups and in one new message.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611165 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Wed, 16 Jul 2014 13:50:44 +0000 (13:50 +0000)]
Fixed mod_ssl NetWare build.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1611012 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Wed, 16 Jul 2014 13:21:30 +0000 (13:21 +0000)]
Added missing export for proxy module.
Submitted by normw at gknw net.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610997 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 16 Jul 2014 06:08:20 +0000 (06:08 +0000)]
Remove backported item.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610916 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Tue, 15 Jul 2014 19:11:02 +0000 (19:11 +0000)]
*) SECURITY: CVE-2013-5704 (cve.mitre.org)
core: HTTP trailers could be used to replace HTTP headers
late during request processing, potentially undoing or
otherwise confusing modules that examined or modified
request headers earlier. Adds "MergeTrailers" directive to restore
legacy behavior.
Submitted By: Edward Lu, Yann Ylavic, Joe Orton, Eric Covener
Committed By: covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610814 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Tue, 15 Jul 2014 19:09:06 +0000 (19:09 +0000)]
fix logic in ap_method_list_(add|remove) in order:
- to correctly reset bits
- not to modify the 'method_mask' bitfield unnecessarily
Also remove a useless 'register' in the declaration of a variable.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610813 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Tue, 15 Jul 2014 14:18:17 +0000 (14:18 +0000)]
Suggestion from Rick Houser -- for compatibility, pick an unusual
character as the first character in a 2/3 character pattern.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610707 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Tue, 15 Jul 2014 13:30:59 +0000 (13:30 +0000)]
allow two character mod_log_config formats
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610686 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Tue, 15 Jul 2014 12:27:00 +0000 (12:27 +0000)]
SECURITY (CVE-2014-0117): Fix a crash in mod_proxy. In a reverse
proxy configuration, a remote attacker could send a carefully crafted
request which could crash a server process, resulting in denial of
service.
Thanks to Marek Kroemeke working with HP's Zero Day Initiative for
reporting this issue.
* server/util.c (ap_parse_token_list_strict): New function.
* modules/proxy/proxy_util.c (find_conn_headers): Use it here.
* modules/proxy/mod_proxy_http.c (ap_proxy_http_process_response):
Send a 400 for a malformed Connection header.
Submitted by: Edward Lu, breser, covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610674 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Tue, 15 Jul 2014 11:15:26 +0000 (11:15 +0000)]
SECURITY (CVE-2014-3523): Fix a memory consumption denial of
service in the WinNT MPM used in all Windows installations.
Workaround: AcceptFilter <protocol> {none|connect}
Submitted by: trawick
Reviewed by: jorton, covener, jim
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610652 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Mon, 14 Jul 2014 20:44:21 +0000 (20:44 +0000)]
Add missing APLOGNO + fix a typo in a comment
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610518 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 14 Jul 2014 20:08:25 +0000 (20:08 +0000)]
SECURITY: CVE-2014-0231 (cve.mitre.org): Part two of two, with r1535125:
mod_cgid: Fix a denial of service against CGI scripts that do
not consume stdin that could lead to lingering HTTPD child processes
filling up the scoreboard and eventually hanging the server.
[Rainer Jung, Eric Covener, Yann Ylavic]
Submitted By: rjung, covener, ylavic
Reviewed By: trawick, jorton, covener, jim
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610509 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 14 Jul 2014 19:56:15 +0000 (19:56 +0000)]
*) SECURITY: CVE-2014-0118 (cve.mitre.org)
mod_deflate: The DEFLATE input filter (inflates request bodies) now
limits the length and compression ratio of inflated request bodies to avoid
denial of sevice via highly compressed bodies. See directives
DeflateInflateLimitRequestBody, DeflateInflateRatioLimit,
and DeflateInflateRatioBurst.
Thanks to Giancarlo Pellegrino and Davide Balzarotti for reporting the issue.
Submitted By: ylavic, covener
Reviewed By: jorton, covener, jim
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610501 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Mon, 14 Jul 2014 19:26:00 +0000 (19:26 +0000)]
SECURITY (CVE-2014-0226): Fix a race condition in scoreboard handling,
which could lead to a heap buffer overflow. Thanks to Marek Kroemeke
working with HP's Zero Day Initiative for reporting this.
* include/scoreboard.h: Add ap_copy_scoreboard_worker.
* server/scoreboard.c (ap_copy_scoreboard_worker): New function.
* modules/generators/mod_status.c (status_handler): Use it.
* modules/lua/lua_request.c (lua_ap_scoreboard_worker): Likewise.
Reviewed by: trawick, jorton, covener, jim
Submitted by: jorton, covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610491 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Mon, 14 Jul 2014 10:52:39 +0000 (10:52 +0000)]
Simplify code.
Cases where 'loc' doesn't have any ':' or is starting with ':' are already handled by 'ap_ir_url()'
Calling 'apr_isascii()' seems useless.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610383 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Mon, 14 Jul 2014 09:05:27 +0000 (09:05 +0000)]
Remove some 'register' in variable declaration.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610366 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Mon, 14 Jul 2014 08:13:24 +0000 (08:13 +0000)]
Remove some 'register' in variable declaration.
Save a few cycles by calling 'apr_isalnum' instead of 'apr_isalpha' and 'apr_isdigit'.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610353 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Mon, 14 Jul 2014 06:06:49 +0000 (06:06 +0000)]
Remove backported item.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610341 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Mon, 14 Jul 2014 05:52:45 +0000 (05:52 +0000)]
mod_journald: New module implementing error_log provider for systemd-journald.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610339 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Mon, 14 Jul 2014 00:34:15 +0000 (00:34 +0000)]
remove entries for recently backported changes
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610329 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Sun, 13 Jul 2014 23:26:12 +0000 (23:26 +0000)]
Avoid C99 idiom.
Followup to r1604466.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610323 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Sun, 13 Jul 2014 22:30:44 +0000 (22:30 +0000)]
Extend the scope of SSLSessionCacheTimeout to sessions
resumed by TLS session resumption (RFC 5077).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610311 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Sun, 13 Jul 2014 22:27:49 +0000 (22:27 +0000)]
Add CHANGES for r1610207.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610310 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Sun, 13 Jul 2014 14:20:04 +0000 (14:20 +0000)]
Forward local IP address as a custom request attribute
like we already do for the remote port.
Both were forgotten in the original AJP 13 spec
but are needed by the Servlet spec. Until now,
Tomcat simply returns for getLocalAddr() the same as
for getLocalName().
The next round of Tomcat releases will look for the
optional new request attribute.
See also Tomcat BZ 56661.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610207 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sat, 12 Jul 2014 18:10:51 +0000 (18:10 +0000)]
Sync version info in DH parameter doc with 2.4.x branch (r1610014).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1610015 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sat, 12 Jul 2014 14:52:08 +0000 (14:52 +0000)]
Include any error notes set by modules in the canned error
response for 403 errors.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609938 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sat, 12 Jul 2014 14:48:04 +0000 (14:48 +0000)]
Set an error note for requests rejected due to SSLStrictSNIVHostCheck.
This allows custom error documents to include the specific reason
for denying access to the server.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609936 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sat, 12 Jul 2014 13:26:42 +0000 (13:26 +0000)]
Perform SNI checks only on the initial request. In particular,
if these checks detect a problem, the checks shouldn't return an
error again when processing an ErrorDocument redirect for the
original problem.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609914 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Fri, 11 Jul 2014 12:49:54 +0000 (12:49 +0000)]
bump mmn because of r1609680
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609709 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Fri, 11 Jul 2014 11:09:34 +0000 (11:09 +0000)]
mod_proxy: better check for worker->s->is_name_matchable
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609688 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Fri, 11 Jul 2014 10:36:15 +0000 (10:36 +0000)]
mod_proxy: add ap_proxy_define_match_worker() and use it for ProxyPassMatch
and ProxyMatch section to distinguish between normal workers and workers
with regex substitutions in the name. Implement handling of such workers
in ap_proxy_get_worker(). PR 43513
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609680 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Wed, 9 Jul 2014 11:51:10 +0000 (11:51 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609114 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Wed, 9 Jul 2014 11:49:44 +0000 (11:49 +0000)]
XML Update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609113 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Wed, 9 Jul 2014 11:11:23 +0000 (11:11 +0000)]
Fix C99 (or later only) comment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1609101 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 9 Jul 2014 03:47:31 +0000 (03:47 +0000)]
s/apr_pstrndup/apr_pstrmemdup/ to save a few cycles
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1608999 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Tue, 8 Jul 2014 13:54:09 +0000 (13:54 +0000)]
clarify a comment
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1608785 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 8 Jul 2014 13:18:20 +0000 (13:18 +0000)]
backported
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1608766 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Tue, 8 Jul 2014 12:21:56 +0000 (12:21 +0000)]
* server/listen.c: return -1 in find_systemd_socket on error
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1608744 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Tue, 8 Jul 2014 11:16:59 +0000 (11:16 +0000)]
whitespace changes only
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1608721 13f79535 -47bb-0310-9956-
ffa450edef68