Eric Covener e66cbabeda Merge r1933389 from trunk: ...

Add ap_*_timingsafe() constant-time comparison functions:

* include/httpd.h: Declare ap_memeq_timingsafe(), ap_streq_timingsafe(), ap_strneq_timingsafe().

* server/util.c: Implement, wrapping apr_*_timingsafe() if APR >= 1.8, with a fallback to copied-in versions.

* modules/aaa/mod_auth_digest.c: Replace apr_crypto_equals() with ap_memeq_timingsafe(). Remove apr_crypto.h include.

* modules/session/mod_session_crypto.c: Replace local ap_crypto_equals() with ap_memeq_timingsafe(). Remove the local implementation and macro alias.

* include/ap_mmn.h: Bump MMN minor.

Submitted by:  jorton
Reviewed by: jorton, rpluem, covener

Github: closes #639


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1933444 13f79535-47bb-0310-9956-ffa450edef68

2026-04-28 18:10:32 +00:00

..

mpm

Merge r1918003, r1918022, r1918035, r1918078, r1918098, r1918099, r1918257, r1918482, r1918483, r1918491, r1919141, r1919148 from trunk

2024-07-27 14:18:49 +00:00

.indent.pro

…

buildmark.c

Merge r1909450 from trunk:

2024-02-02 11:50:07 +00:00

config.c

Merge r1918551 from trunk:

2024-06-24 17:54:34 +00:00

config.m4

Add server directory to INCLUDES.

2011-01-17 10:45:54 +00:00

connection.c

Merge r1894171 from trunk:

2021-12-03 15:34:16 +00:00

core_filters.c

Backport to v2.4:

2023-07-17 20:36:38 +00:00

core.c

Merge r1930162 from trunk:

2025-12-01 12:05:45 +00:00

eoc_bucket.c

update license header text

2006-07-11 20:33:53 +00:00

eor_bucket.c

Merge r1707084, r1707093, r1707159, r1707362 from trunk:

2019-06-13 11:09:12 +00:00

error_bucket.c

core, modules: Avoid error response/document handling by the core if some

2015-05-29 20:07:15 +00:00

gen_test_char.c

Merge r1893971 from trunk:

2021-10-07 12:27:43 +00:00

gen_test_char.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

gen_test_char.dsp

Remove all /machine:I386 references, these are getting in the way

2006-04-27 05:30:39 +00:00

gen_test_char.mak

Win32-specific build files.

2016-03-23 03:53:49 +00:00

listen.c

Merge r1927885, r1927916, r1928022 from trunk:

2025-11-07 08:32:34 +00:00

log.c

Merge r1917578 from trunk:

2024-06-21 14:31:54 +00:00

main.c

Backport to v2.4:

2023-07-17 21:16:59 +00:00

Makefile.in

Merge of [r1886840, r1887085, r1887087, r1887134, r1887151, r1887152,

2021-05-12 10:14:42 +00:00

mpm_common.c

Merged r1891919 from trunk:

2021-08-10 08:43:11 +00:00

mpm_fdqueue.c

Merge of 1891716-1891719,1891721,1891724,1891726-1891728 from trunk:

2021-08-10 08:08:12 +00:00

mpm_fdqueue.h

Merge of 1891716-1891719,1891721,1891724,1891726-1891728 from trunk:

2021-08-10 08:08:12 +00:00

mpm_unix.c

Backport to v2.4:

2023-11-20 13:17:25 +00:00

NWGNUmakefile

Updated typo NWGNUmakefile

2024-01-24 14:46:36 +00:00

protocol.c

Merge r1906539 from trunk:

2023-01-10 13:20:09 +00:00

provider.c

Merge r1883184 from trunk:

2021-03-09 16:12:52 +00:00

request.c

Merge r1893971 from trunk:

2021-10-07 12:27:43 +00:00

scoreboard.c

Merge r1923806 from trunk:

2025-06-04 07:37:32 +00:00

ssl.c

Merge r1890605, r1893164, r1893179 from trunk:

2021-09-09 15:22:23 +00:00

util_cfgtree.c

Remove all references to CORE_PRIVATE.

2008-04-07 10:45:43 +00:00

util_charset.c

Merge r1611858, r1611908, r1611916 from trunk

2014-11-01 09:19:17 +00:00

util_cookies.c

Merge of r1767936,1768160,1769192,1769550 from trunk:

2016-11-14 11:15:08 +00:00

util_debug.c

Merge r1809302, r1809303, r1809305, r1809311, r1809314, r1809713 from trunk:

2018-01-13 15:49:17 +00:00

util_ebcdic.c

Merge r1619297, r1621806 from trunk:

2014-09-26 10:59:00 +00:00

util_expr_eval.c

backport 1927033 from trunk

2025-07-07 12:02:22 +00:00

util_expr_parse.c

*) Easy patches: synch 2.4.x and trunk

2025-01-07 15:00:40 +00:00

util_expr_parse.h

remove mistakenly commited patches...

2012-01-23 11:58:30 +00:00

util_expr_parse.y

Merge r1204087, 1204090:

2011-11-21 22:24:12 +00:00

util_expr_private.h

Improve error message by removing 'unexpected T_ERROR' in one case.

2011-10-10 20:41:26 +00:00

util_expr_scan.c

Update autogenerated code. Now generated with bison 2.5 instead of 2.4.1

2011-10-10 20:44:40 +00:00

util_expr_scan.l

Do proper length checks in the expression scanner. This allows to remove the

2011-08-13 09:59:43 +00:00

util_fcgi.c

Merge r1775487 from trunk:

2017-01-09 21:13:46 +00:00

util_filter.c

Merge r1782986 from trunk:

2021-10-12 08:13:29 +00:00

util_md5.c

Backport to v2.4:

2021-01-17 17:07:42 +00:00

util_mutex.c

Merge r1822931, r1827783 from trunk:

2018-04-09 15:39:44 +00:00

util_pcre.c

ap_regex: Use Thread Local Storage (if efficient) to avoid allocations.

2022-02-28 11:56:43 +00:00

util_regex.c

add AP_REG_NO_DEFAULT to allow opt-out of pcre defaults

2020-02-19 12:26:31 +00:00

util_script.c

Merge r1930163 from trunk:

2025-12-01 12:06:00 +00:00

util_time.c

Backport to v2.4:

2023-07-17 21:16:59 +00:00

util_xml.c

core: Make sure and check that LimitXMLRequestBody fits in system memory.

2022-03-07 14:48:54 +00:00

util.c

Merge r1933389 from trunk:

2026-04-28 18:10:32 +00:00

vhost.c

Merge of GH PR #440

2024-06-24 12:30:01 +00:00