Joe Orton 0a0d324e07 Add alternative fixes for CVE-2007-3304: ...

* configure.in: Check for getpgid.

* include/mpm_common.h (ap_mpm_safe_kill): New prototype.

* server/mpm_common.c (reclaim_one_pid): Ensure pid validity before
calling apr_proc_wait().
(ap_mpm_safe_kill): New function.

* server/mpm/prefork/prefork.c, server/mpm/worker/worker.c,
server/mpm/experimental/event/event.c: Use ap_mpm_safe_kill() on pids
from the scoreboard, throughout.

* include/ap_mmn.h: Minor bump.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@551843 13f79535-47bb-0310-9956-ffa450edef68

2007-06-29 10:33:14 +00:00

..

.indent.pro

Apache 1.3.9 baseline for the Apache 2.0 repository.

1999-08-24 05:50:50 +00:00

ap_compat.h

update license header text

2006-07-11 20:33:53 +00:00

ap_config_layout.h.in

update license header text

2006-07-11 20:55:32 +00:00

ap_config.h

include/ap_config.h: Include the autoconf generated header that defines what is available.

2006-07-15 09:47:11 +00:00

ap_listen.h

* Add extern "C" linkage to several headers to make it easier to use

2007-05-04 11:11:26 +00:00

ap_mmn.h

Add alternative fixes for CVE-2007-3304:

2007-06-29 10:33:14 +00:00

ap_mpm.h

* Add extern "C" linkage to several headers to make it easier to use

2007-05-04 11:11:26 +00:00

ap_provider.h

* Add extern "C" linkage to several headers to make it easier to use

2007-05-04 11:11:26 +00:00

ap_regex.h

update license header text

2006-07-11 20:33:53 +00:00

ap_regkey.h

update license header text

2006-07-11 20:33:53 +00:00

ap_release.h

update license header text

2006-07-11 20:33:53 +00:00

http_config.h

Introduce a check_config phase between pre_config and open_logs,

2006-08-14 22:55:45 +00:00

http_connection.h

update license header text

2006-07-11 20:33:53 +00:00

http_core.h

re-introduce ap_satisfies API back into core and modify how the access_checker, check_user_id and auth_checker hooks are called so that they respect the precedence that is set through the satisfy ALL/ANY directive. This also restores the directives order, allow, deny, satisfyas supported directives rather than being deprecated. These directives still remain in mod_access_compat however.

2007-05-02 16:31:39 +00:00

http_log.h

update license header text

2006-07-11 20:33:53 +00:00

http_main.h

update license header text

2006-07-11 20:33:53 +00:00

http_protocol.h

update license header text

2006-07-11 20:33:53 +00:00

http_request.h

update license header text

2006-07-11 20:33:53 +00:00

http_vhost.h

update license header text

2006-07-11 20:33:53 +00:00

httpd.h

Fixup style nitpicks:

2007-06-12 20:55:57 +00:00

mpm_common.h

Add alternative fixes for CVE-2007-3304:

2007-06-29 10:33:14 +00:00

scoreboard.h

update license header text

2006-07-11 20:33:53 +00:00

util_cfgtree.h

* Add extern "C" linkage to several headers to make it easier to use

2007-05-04 11:11:26 +00:00

util_charset.h

update license header text

2006-07-11 20:33:53 +00:00

util_ebcdic.h

update license header text

2006-07-11 20:33:53 +00:00

util_filter.h

update license header text

2006-07-11 20:33:53 +00:00

util_ldap.h

* Add extern "C" linkage to several headers to make it easier to use

2007-05-04 11:11:26 +00:00

util_md5.h

update license header text

2006-07-11 20:33:53 +00:00

util_mutex.h

Once SSLMutex allowed for the setting of both the

2006-10-24 13:17:29 +00:00

util_script.h

update license header text

2006-07-11 20:33:53 +00:00

util_time.h

update license header text

2006-07-11 20:33:53 +00:00

util_xml.h

update license header text

2006-07-11 20:33:53 +00:00