headers
mjc | 1 Mar 2007 14:23
Picon
Favicon

svn commit: r513310 - in /httpd/site/trunk: docs/security/impact_levels.html xdocs/security/impact_levels.xml

Author: mjc
Date: Thu Mar  1 05:23:37 2007
New Revision: 513310

URL: http://svn.apache.org/viewvc?view=rev&rev=513310
Log:
Joe noticed the title of this page was wrong

Modified:
    httpd/site/trunk/docs/security/impact_levels.html
    httpd/site/trunk/xdocs/security/impact_levels.xml

Modified: httpd/site/trunk/docs/security/impact_levels.html
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/impact_levels.html?view=diff&rev=513310&r1=513309&r2=513310
==============================================================================
--- httpd/site/trunk/docs/security/impact_levels.html (original)
+++ httpd/site/trunk/docs/security/impact_levels.html Thu Mar  1 05:23:37 2007
 <at>  <at>  -3,8 +3,8  <at>  <at> 
 <html>
  <head>
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
-       <meta name="author" content="Security Group" /><meta name="email" content="security <at> apache.org" />
-    <title>Apache httpd 1.3 vulnerabilities - The Apache HTTP Server Project</title>
+       <meta name="author" content="Security Group" /><meta name="email"
content="security <at> httpd.apache.org" />
+    <title>Summary of security impact levels - The Apache HTTP Server Project</title>
  </head>
  <body bgcolor="#ffffff" text="#000000" link="#525D76">
 <p><a href="/"><img src="../images/httpd_logo_wide.gif" alt="The Apache HTTP Server Project" border="0"/></a></p>
(Continue reading)

Permalink | Reply | 0 comments |
headers
jorton | 6 Mar 2007 00:21
Picon
Favicon

svn commit: r514915 - /httpd/httpd/trunk/support/logresolve.c

Author: jorton
Date: Mon Mar  5 15:21:31 2007
New Revision: 514915

URL: http://svn.apache.org/viewvc?view=rev&rev=514915
Log:
* support/logresolve.c (main): Fix potential NULL pointer dereference,
found by Coverity analysis tool.

Modified:
    httpd/httpd/trunk/support/logresolve.c

Modified: httpd/httpd/trunk/support/logresolve.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/support/logresolve.c?view=diff&rev=514915&r1=514914&r2=514915
==============================================================================
--- httpd/httpd/trunk/support/logresolve.c (original)
+++ httpd/httpd/trunk/support/logresolve.c Mon Mar  5 15:21:31 2007
 <at>  <at>  -237,7 +237,7  <at>  <at> 
         if (status != APR_SUCCESS) {
             /* Not an IP address */
                 withname++;
-            *space = ' ';
+            if (space) *space = ' ';
             apr_file_puts(line, outfile);
             continue;
         }
Permalink | Reply | 2 comments |
headers
jorton | 6 Mar 2007 01:22
Picon
Favicon

svn commit: r514933 - /httpd/test/trunk/perl-framework/t/modules/rewrite.t

Author: jorton
Date: Mon Mar  5 16:22:47 2007
New Revision: 514933

URL: http://svn.apache.org/viewvc?view=rev&rev=514933
Log:
- enable the tests for RewriteMap process-based lookups

Modified:
    httpd/test/trunk/perl-framework/t/modules/rewrite.t

Modified: httpd/test/trunk/perl-framework/t/modules/rewrite.t
URL: http://svn.apache.org/viewvc/httpd/test/trunk/perl-framework/t/modules/rewrite.t?view=diff&rev=514933&r1=514932&r2=514933
==============================================================================
--- httpd/test/trunk/perl-framework/t/modules/rewrite.t (original)
+++ httpd/test/trunk/perl-framework/t/modules/rewrite.t Mon Mar  5 16:22:47 2007
 <at>  <at>  -9,7 +9,7  <at>  <at> 
 ##
 ## extra.conf.in:

-my  <at> map = qw(txt rnd); #dbm XXX: howto determine dbm support is available?
+my  <at> map = qw(txt rnd prg); #dbm XXX: howto determine dbm support is available?
 my  <at> num = qw(1 2 3 4 5 6);
 my  <at> url = qw(forbidden gone perm temp);
 my $r;
Permalink | Reply | 0 comments |
headers
colm | 6 Mar 2007 02:40
Picon
Favicon
Gravatar

svn commit: r514949 - /httpd/httpd/trunk/support/logresolve.c

Author: colm
Date: Mon Mar  5 17:40:23 2007
New Revision: 514949

URL: http://svn.apache.org/viewvc?view=rev&rev=514949
Log:
correct some indentation, no functional changes

Modified:
    httpd/httpd/trunk/support/logresolve.c

Modified: httpd/httpd/trunk/support/logresolve.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/support/logresolve.c?view=diff&rev=514949&r1=514948&r2=514949
==============================================================================
--- httpd/httpd/trunk/support/logresolve.c (original)
+++ httpd/httpd/trunk/support/logresolve.c Mon Mar  5 17:40:23 2007
 <at>  <at>  -228,7 +228,7  <at>  <at> 
         hostname = (char *) apr_hash_get(cache, line, APR_HASH_KEY_STRING);
         if (hostname) {
             apr_file_printf(outfile, "%s %s", hostname, space + 1);
-                cachehits++;
+            cachehits++;
             continue;
         }

 <at>  <at>  -236,7 +236,7  <at>  <at> 
         status = apr_sockaddr_info_get(&ip, line, APR_UNSPEC ,0, 0, pool);
         if (status != APR_SUCCESS) {
             /* Not an IP address */
-                withname++;
(Continue reading)

Permalink | Reply | 0 comments |
headers
colm | 6 Mar 2007 02:54
Picon
Favicon
Gravatar

svn commit: r514952 - /httpd/httpd/trunk/support/logresolve.c

Author: colm
Date: Mon Mar  5 17:54:20 2007
New Revision: 514952

URL: http://svn.apache.org/viewvc?view=rev&rev=514952
Log:
Correct a spurious access to whatever memory is at location "1" in the
cirumstance where a log line is of the form "nn.nn.nn.nn ". 

Modified:
    httpd/httpd/trunk/support/logresolve.c

Modified: httpd/httpd/trunk/support/logresolve.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/support/logresolve.c?view=diff&rev=514952&r1=514951&r2=514952
==============================================================================
--- httpd/httpd/trunk/support/logresolve.c (original)
+++ httpd/httpd/trunk/support/logresolve.c Mon Mar  5 17:54:20 2007
 <at>  <at>  -227,7 +227,9  <at>  <at> 
         /* See if we have it in our cache */
         hostname = (char *) apr_hash_get(cache, line, APR_HASH_KEY_STRING);
         if (hostname) {
-            apr_file_printf(outfile, "%s %s", hostname, space + 1);
+            apr_file_printf(outfile, hostname);
+            if (space) 
+                apr_file_printf(outfile, " %s", space + 1);
             cachehits++;
             continue;
         }
(Continue reading)

Permalink | Reply | 0 comments |
headers
colm | 6 Mar 2007 02:56
Picon
Favicon
Gravatar

svn commit: r514953 - /httpd/httpd/trunk/support/logresolve.c

Author: colm
Date: Mon Mar  5 17:56:17 2007
New Revision: 514953

URL: http://svn.apache.org/viewvc?view=rev&rev=514953
Log:
Prevent format specifier busting.

Modified:
    httpd/httpd/trunk/support/logresolve.c

Modified: httpd/httpd/trunk/support/logresolve.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/support/logresolve.c?view=diff&rev=514953&r1=514952&r2=514953
==============================================================================
--- httpd/httpd/trunk/support/logresolve.c (original)
+++ httpd/httpd/trunk/support/logresolve.c Mon Mar  5 17:56:17 2007
 <at>  <at>  -227,7 +227,7  <at>  <at> 
         /* See if we have it in our cache */
         hostname = (char *) apr_hash_get(cache, line, APR_HASH_KEY_STRING);
         if (hostname) {
-            apr_file_printf(outfile, hostname);
+            apr_file_printf(outfile, "%s", hostname);
             if (space) 
                 apr_file_printf(outfile, " %s", space + 1);
             cachehits++;
Permalink | Reply | 0 comments |
headers
colm | 6 Mar 2007 03:00
Picon
Favicon
Gravatar

svn commit: r514954 - /httpd/httpd/trunk/support/logresolve.c

Author: colm
Date: Mon Mar  5 18:00:18 2007
New Revision: 514954

URL: http://svn.apache.org/viewvc?view=rev&rev=514954
Log:
Fix near-identical potential NULL pointer dereferences, as found by
Jorton and corrected in r514915

Modified:
    httpd/httpd/trunk/support/logresolve.c

Modified: httpd/httpd/trunk/support/logresolve.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/support/logresolve.c?view=diff&rev=514954&r1=514953&r2=514954
==============================================================================
--- httpd/httpd/trunk/support/logresolve.c (original)
+++ httpd/httpd/trunk/support/logresolve.c Mon Mar  5 18:00:18 2007
 <at>  <at>  -259,12 +259,12  <at>  <at> 
         status = apr_getnameinfo(&hostname, ip, 0) != APR_SUCCESS;
         if (status || hostname == NULL) {
             /* Could not perform a reverse lookup */
-            *space = ' ';
+            if (space) *space = ' ';
             apr_file_puts(line, outfile);
             noreverse++;

             /* Add to cache */
-            *space = '\0';
+            if (space) *space = '\0';
             apr_hash_set(cache, line, APR_HASH_KEY_STRING,
(Continue reading)

Permalink | Reply | 0 comments |
headers
noirin | 6 Mar 2007 19:57
Picon
Favicon
Gravatar

svn commit: r515251 - in /httpd/httpd/trunk/docs/manual/mod: mod_proxy.html.en mod_proxy.xml

Author: noirin
Date: Tue Mar  6 10:57:07 2007
New Revision: 515251

URL: http://svn.apache.org/viewvc?view=rev&rev=515251
Log:
Documenting the sooper-sekrit BalancerMember directive

Modified:
    httpd/httpd/trunk/docs/manual/mod/mod_proxy.html.en
    httpd/httpd/trunk/docs/manual/mod/mod_proxy.xml

Modified: httpd/httpd/trunk/docs/manual/mod/mod_proxy.html.en
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_proxy.html.en?view=diff&rev=515251&r1=515250&r2=515251
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_proxy.html.en (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_proxy.html.en Tue Mar  6 10:57:07 2007
 <at>  <at>  -63,6 +63,7  <at>  <at> 
 <div id="quickview"><h3 class="directives">Directives</h3>
 <ul id="toc">
 <li><img alt="" src="../images/down.gif" /> <a href="#allowconnect">AllowCONNECT</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#balancermember">BalancerMember</a></li>
 <li><img alt="" src="../images/down.gif" /> <a href="#noproxy">NoProxy</a></li>
 <li><img alt="" src="../images/down.gif" /> <a href="#proxy">&lt;Proxy&gt;</a></li>
 <li><img alt="" src="../images/down.gif" /> <a href="#proxybadheader">ProxyBadHeader</a></li>
 <at>  <at>  -312,6 +313,27  <at>  <at> 

 </div>
 <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="directive-section"><h2><a name="BalancerMember"
(Continue reading)

Permalink | Reply | 0 comments |
headers
noirin | 6 Mar 2007 20:11
Picon
Favicon
Gravatar

svn commit: r515254 - in /httpd/httpd/trunk/docs/manual: bind.html.en bind.xml.meta mod/mpm_common.html.en

Author: noirin
Date: Tue Mar  6 11:11:05 2007
New Revision: 515254

URL: http://svn.apache.org/viewvc?view=rev&rev=515254
Log:
Tidying up

Modified:
    httpd/httpd/trunk/docs/manual/bind.html.en
    httpd/httpd/trunk/docs/manual/bind.xml.meta
    httpd/httpd/trunk/docs/manual/mod/mpm_common.html.en

Modified: httpd/httpd/trunk/docs/manual/bind.html.en
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/bind.html.en?view=diff&rev=515254&r1=515253&r2=515254
==============================================================================
--- httpd/httpd/trunk/docs/manual/bind.html.en (original)
+++ httpd/httpd/trunk/docs/manual/bind.html.en Tue Mar  6 11:11:05 2007
 <at>  <at>  -72,8 +72,8  <at>  <at> 
        and port 8080 on another, use</p>

     <div class="example"><p><code>
-      Listen 192.170.2.1:80<br />
-      Listen 192.170.2.5:8000
+      Listen 192.0.2.1:80<br />
+      Listen 192.0.2.5:8000
     </code></p></div>

     <p>IPv6 addresses must be enclosed in square brackets, as in the
 <at>  <at>  -119,7 +119,7  <at>  <at>
(Continue reading)

Permalink | Reply | 0 comments |
headers
noirin | 6 Mar 2007 20:12
Picon
Favicon
Gravatar

svn commit: r515256 [1/2] - in /httpd/httpd/trunk/docs/manual/mod: directives.html.en quickreference.html.en

Author: noirin
Date: Tue Mar  6 11:12:12 2007
New Revision: 515256

URL: http://svn.apache.org/viewvc?view=rev&rev=515256
Log:
HTML files changed by adding docs for BalancerMember directive

Modified:
    httpd/httpd/trunk/docs/manual/mod/directives.html.en
    httpd/httpd/trunk/docs/manual/mod/quickreference.html.en

Modified: httpd/httpd/trunk/docs/manual/mod/directives.html.en
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/directives.html.en?view=diff&rev=515256&r1=515255&r2=515256
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/directives.html.en (original)
+++ httpd/httpd/trunk/docs/manual/mod/directives.html.en Tue Mar  6 11:12:12 2007
 <at>  <at>  -112,7 +112,8  <at>  <at> 
 <li><a href="mod_authz_dbm.html#authzdbmtype">AuthzDBMType</a></li>
 <li><a href="mod_authz_default.html#authzdefaultauthoritative">AuthzDefaultAuthoritative</a></li>
 <li><a href="mod_authz_core.html#authzmergerules">AuthzMergeRules</a></li>
-<li><a href="mod_setenvif.html#browsermatch" id="B" name="B">BrowserMatch</a></li>
+<li><a href="mod_proxy.html#balancermember" id="B" name="B">BalancerMember</a></li>
+<li><a href="mod_setenvif.html#browsermatch">BrowserMatch</a></li>
 <li><a href="mod_setenvif.html#browsermatchnocase">BrowserMatchNoCase</a></li>
 <li><a href="mod_log_config.html#bufferedlogs">BufferedLogs</a></li>
 <li><a href="mod_cache.html#cachedefaultexpire" id="C" name="C">CacheDefaultExpire</a></li>
Permalink | Reply | 0 comments |

Gmane