Stefan Fritsch fd962221ea Fix integer overflow in ap_pregsub. This can be triggered e.g. ...

with mod_setenvif via a malicious .htaccess

CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1198940 13f79535-47bb-0310-9956-ffa450edef68

2011-11-07 21:13:40 +00:00

..

mpm

Add comment why the code is disabled

2011-10-25 22:32:22 +00:00

.indent.pro

Apache 1.3.9 baseline for the Apache 2.0 repository.

1999-08-24 06:46:03 +00:00

buildmark.c

update license header text

2006-07-11 20:33:53 +00:00

config.c

Cleanup effort in prep for GA push:

2011-09-23 13:39:32 +00:00

config.m4

Add server directory to INCLUDES.

2011-01-17 10:45:54 +00:00

connection.c

Some improvements for handling of many connections for MPM event:

2011-06-19 12:23:42 +00:00

core_filters.c

Introduce ap_(get|set)_core_module_config() functions/macros and use them

2011-06-06 21:26:56 +00:00

core.c

Only init the RNG once at startup. This saves some entropy and works around the APR bug

2011-11-07 20:57:02 +00:00

eoc_bucket.c

update license header text

2006-07-11 20:33:53 +00:00

eor_bucket.c

Change the eor bucket to use a pre-cleanup to run the log transaction hook.

2010-06-14 19:07:02 +00:00

error_bucket.c

update license header text

2006-07-11 20:33:53 +00:00

gen_test_char.c

mod_include: Add support for application/x-www-form-urlencoded encoding

2011-10-29 11:13:37 +00:00

gen_test_char.dsp

Remove all /machine:I386 references, these are getting in the way

2006-04-27 05:30:39 +00:00

listen.c

Introduce ap_(get|set)_core_module_config() functions/macros and use them

2011-06-06 21:26:56 +00:00

log.c

Cleanup effort in prep for GA push:

2011-09-23 13:39:32 +00:00

main.c

Only init the RNG once at startup. This saves some entropy and works around the APR bug

2011-11-07 20:57:02 +00:00

Makefile.in

Avoid using a tmpfile with fixed name when creating export_files, since this

2011-06-04 17:41:13 +00:00

mpm_common.c

Call apr_random_after_fork() manually in the child processes because the MPMs

2011-11-07 18:46:47 +00:00

mpm_unix.c

Cleanup effort in prep for GA push:

2011-09-23 13:39:32 +00:00

NWGNUmakefile

Use var for prelude so its possible to change it at one place.

2011-03-18 03:09:27 +00:00

protocol.c

* Correctly return a 400 (Bad request) in case of a HTTP/0.9 request like

2011-10-25 15:56:08 +00:00

provider.c

update license header text

2006-07-11 20:33:53 +00:00

request.c

More cleanup: Expand tabs and some more indentation fixes

2011-09-23 18:08:42 +00:00

scoreboard.c

More cleanup: Expand tabs and some more indentation fixes

2011-09-23 18:08:42 +00:00

util_cfgtree.c

Remove all references to CORE_PRIVATE.

2008-04-07 10:45:43 +00:00

util_charset.c

update license header text

2006-07-11 20:33:53 +00:00

util_cookies.c

Introduce ap_(get|set)_core_module_config() functions/macros and use them

2011-06-06 21:26:56 +00:00

util_debug.c

Introduce ap_(get|set)_core_module_config() functions/macros and use them

2011-06-06 21:26:56 +00:00

util_ebcdic.c

Introduce ap_(get|set)_core_module_config() functions/macros and use them

2011-06-06 21:26:56 +00:00

util_expr_eval.c

regex related cleanups:

2011-10-18 22:02:26 +00:00

util_expr_parse.c

Update autogenerated code. Now generated with bison 2.5 instead of 2.4.1

2011-10-10 20:44:40 +00:00

util_expr_parse.h

Update autogenerated code. Now generated with bison 2.5 instead of 2.4.1

2011-10-10 20:44:40 +00:00

util_expr_parse.y

Improve error message by removing 'unexpected T_ERROR' in one case.

2011-10-10 20:41:26 +00:00

util_expr_private.h

Improve error message by removing 'unexpected T_ERROR' in one case.

2011-10-10 20:41:26 +00:00

util_expr_scan.c

Update autogenerated code. Now generated with bison 2.5 instead of 2.4.1

2011-10-10 20:44:40 +00:00

util_expr_scan.l

Do proper length checks in the expression scanner. This allows to remove the

2011-08-13 09:59:43 +00:00

util_filter.c

Introduce ap_(get|set)_core_module_config() functions/macros and use them

2011-06-06 21:26:56 +00:00

util_md5.c

update license header text

2006-07-11 20:33:53 +00:00

util_mutex.c

Add -D DUMP_RUN_CFG option to dump some configuration items

2011-10-09 18:35:23 +00:00

util_pcre.c

Cleanup effort in prep for GA push:

2011-09-23 13:39:32 +00:00

util_regex.c

fix Sun Studio type mismatch warnings

2010-09-23 19:21:43 +00:00

util_script.c

Cleanup effort in prep for GA push:

2011-09-23 13:39:32 +00:00

util_time.c

Add ErrorLogFormat directive for configuring the error log format, including

2010-09-05 15:44:19 +00:00

util_xml.c

Introduce ap_(get|set)_core_module_config() functions/macros and use them

2011-06-06 21:26:56 +00:00

util.c

Fix integer overflow in ap_pregsub. This can be triggered e.g.

2011-11-07 21:13:40 +00:00

vhost.c

Cleanup effort in prep for GA push:

2011-09-23 13:39:32 +00:00