Eric Covener
e66cbabeda
Merge r1933389 from trunk:
Add ap_*_timingsafe() constant-time comparison functions:
* include/httpd.h: Declare ap_memeq_timingsafe(), ap_streq_timingsafe(), ap_strneq_timingsafe().
* server/util.c: Implement, wrapping apr_*_timingsafe() if APR >= 1.8, with a fallback to copied-in versions.
* modules/aaa/mod_auth_digest.c: Replace apr_crypto_equals() with ap_memeq_timingsafe(). Remove apr_crypto.h include.
* modules/session/mod_session_crypto.c: Replace local ap_crypto_equals() with ap_memeq_timingsafe(). Remove the local implementation and macro alias.
* include/ap_mmn.h: Bump MMN minor.
Submitted by: jorton
Reviewed by: jorton, rpluem, covener
Github: closes #639
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1933444 13f79535-47bb-0310-9956-ffa450edef68
2026-04-28 18:10:32 +00:00
..
1999-08-24 05:50:50 +00:00
2006-07-11 20:33:53 +00:00
2006-07-11 20:55:32 +00:00
2012-08-14 23:59:24 +00:00
2020-02-21 00:33:40 +00:00
2011-09-23 18:08:42 +00:00
2025-11-07 08:32:34 +00:00
2026-04-28 18:10:32 +00:00
Merge r1918003, r1918022, r1918035, r1918078, r1918098, r1918099, r1918257, r1918482, r1918483, r1918491, r1919141, r1919148 from trunk
2024-07-27 14:18:49 +00:00
2012-07-03 19:29:11 +00:00
2022-02-28 11:56:43 +00:00
2011-09-23 13:38:09 +00:00
2026-01-04 15:15:46 +00:00
2013-11-17 20:10:28 +00:00
2025-01-07 15:00:40 +00:00
2011-09-23 18:08:42 +00:00
2014-06-17 12:06:05 +00:00
2022-02-23 14:39:07 +00:00
2021-09-26 14:11:22 +00:00
2024-06-24 17:52:15 +00:00
2016-08-25 12:48:18 +00:00
2012-03-25 22:24:13 +00:00
2024-06-24 17:54:34 +00:00
Merged /httpd/httpd/trunk:r1879074-1879080,1879094-1879095,1879110-1879112,1879114,1879116-1879117,1879137,1879144-1879145,1879147,1879149,1879235,1879360
2021-08-10 08:27:18 +00:00
2022-08-21 20:26:51 +00:00
Merged r1734009,r1734231,r1734281,r1838055,r1838079,r1840229,r1876664,r1876674,r1876784,r1879078,r1881620,r1887311,r1888871 from trunk:
2021-05-27 13:08:21 +00:00
2026-04-28 18:10:32 +00:00
2020-02-21 00:33:40 +00:00
2012-09-24 09:49:55 +00:00
2011-02-18 18:40:31 +00:00
2025-11-07 08:32:34 +00:00
2025-06-03 08:02:35 +00:00
2011-09-23 13:38:09 +00:00
2014-11-01 09:19:17 +00:00
2012-01-09 13:18:26 +00:00
2014-11-01 09:19:17 +00:00
2020-02-21 00:33:40 +00:00
2013-04-15 12:37:59 +00:00
2023-07-07 12:03:32 +00:00
2014-07-16 22:11:33 +00:00
2011-10-09 18:35:23 +00:00
2024-04-03 12:10:49 +00:00
2023-07-17 21:16:59 +00:00
2014-07-19 17:22:30 +00:00
2014-07-19 17:22:30 +00:00