Joe Orton 5f31fca13d Backport fix for memory consumption DoS, CVE CAN-2004-0942: ...

* server/protocol.c (ap_rgetline_core): Don't trim trailing whitespace
from the buffer here.
(ap_get_mime_headers_core): Trim trailing whitespace here, after
reading a complete field including continuation lines.  Also simplify
code to remove whitespace between field-name and colon.

Reviewed by: stoddard, jorton, nd


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/APACHE_2_0_BRANCH@105730 13f79535-47bb-0310-9956-ffa450edef68

2004-11-10 11:32:40 +00:00

..

mpm

Win32: Fix stranded piped loggers on apache -k start,restart,config,install

2004-08-27 18:46:52 +00:00

.cvsignore

Back-port changes to allow build without an in-tree apr and apr-util.

2002-11-29 11:05:58 +00:00

.indent.pro

Apache 1.3.9 baseline for the Apache 2.0 repository.

1999-08-24 06:46:03 +00:00

buildmark.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

config.c

Include directives no longer refuse to process symlinks on

2004-08-27 19:11:21 +00:00

config.m4

Remove some unneeded autoconf checks. We now have no duplicate libraries

2001-08-27 04:47:17 +00:00

connection.c

Fix mod_ssl to issue SSL close_notify alerts before the connection is

2004-03-08 17:40:38 +00:00

core.c

SECURITY: CAN-2004-0811 (cve.mitre.org)

2004-09-21 13:21:16 +00:00

eoc_bucket.c

This commit was manufactured by cvs2svn to create branch

2004-03-08 17:40:38 +00:00

error_bucket.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

gen_test_char.c

Add mod_log_forensic.

2004-04-11 18:36:58 +00:00

gen_test_char.dsp

After discussions at length on dev@apr/httpd, it is determined that

2003-03-11 01:08:10 +00:00

listen.c

Backport of the 'httpready' Accept Filter changes from 2.1-dev

2004-08-18 02:52:15 +00:00

log.c

* modules/loggers/mod_log_config.c, server/log.c (open_error_log,

2004-06-01 15:30:16 +00:00

main.c

initialize server arrays prior to calling ap_setup_prelinked_modules

2004-07-06 18:25:14 +00:00

Makefile.in

Fix mod_ssl to issue SSL close_notify alerts before the connection is

2004-03-08 17:40:38 +00:00

mpm_common.c

merge this feature, and code cleanups for signal handlers,

2004-02-26 20:32:23 +00:00

NWGNUmakefile

Fix a path searching problem so that NetWare can build the genchars.nlm support utility before the main build is started

2004-06-01 17:21:27 +00:00

protocol.c

Backport fix for memory consumption DoS, CVE CAN-2004-0942:

2004-11-10 11:32:40 +00:00

provider.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

request.c

Minor comment fixes, no code changes:

2004-10-11 19:28:10 +00:00

rfc1413.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

scoreboard.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

util_cfgtree.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

util_charset.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

util_debug.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

util_ebcdic.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

util_filter.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

util_md5.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

util_script.c

Backport from HEAD:

2004-08-27 09:03:24 +00:00

util_time.c

fix name of The Apache Software Foundation

2004-02-09 20:59:50 +00:00

util_xml.c

* server/util_xml.c (ap_xml_parse_input): Give a 413 (Request Entity

2004-04-15 20:10:38 +00:00

util.c

Fix the handling of URIs containing %2F when AllowEncodedSlashes

2004-09-18 00:44:00 +00:00

vhost.c

<VirtualHost myhost> now applies to all IP addresses for myhost

2004-06-11 19:39:11 +00:00