Eric Covener e66cbabeda Merge r1933389 from trunk: ...

Add ap_*_timingsafe() constant-time comparison functions:

* include/httpd.h: Declare ap_memeq_timingsafe(), ap_streq_timingsafe(), ap_strneq_timingsafe().

* server/util.c: Implement, wrapping apr_*_timingsafe() if APR >= 1.8, with a fallback to copied-in versions.

* modules/aaa/mod_auth_digest.c: Replace apr_crypto_equals() with ap_memeq_timingsafe(). Remove apr_crypto.h include.

* modules/session/mod_session_crypto.c: Replace local ap_crypto_equals() with ap_memeq_timingsafe(). Remove the local implementation and macro alias.

* include/ap_mmn.h: Bump MMN minor.

Submitted by:  jorton
Reviewed by: jorton, rpluem, covener

Github: closes #639


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1933444 13f79535-47bb-0310-9956-ffa450edef68

2026-04-28 18:10:32 +00:00

..

config.m4

Merge r1324760 from trunk:

2012-08-02 13:05:28 +00:00

Makefile.in

…

mod_session_cookie.c

Merge r1709121 from trunk:

2019-08-09 10:42:24 +00:00

mod_session_cookie.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_session_cookie.dsp

…

mod_session_cookie.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_session_crypto.c

Merge r1933389 from trunk:

2026-04-28 18:10:32 +00:00

mod_session_crypto.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_session_crypto.dsp

…

mod_session_crypto.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_session_dbd.c

mod_session_dbd: set_cookie_name: ensure correct format

2025-06-10 11:00:37 +00:00

mod_session_dbd.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_session_dbd.dsp

…

mod_session_dbd.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_session.c

Merge r1900335 from trunk:

2022-05-17 18:14:29 +00:00

mod_session.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_session.dsp

…

mod_session.h

Merge r1709121 from trunk:

2019-08-09 10:42:24 +00:00

mod_session.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

NWGNUmakefile

Kill some NetWare build warnings (backport r1481040).

2013-05-10 15:29:31 +00:00

NWGNUsession

Some NetWare build tweaks: removed obsolete include paths.

2011-10-29 14:27:14 +00:00

NWGNUsession_cookie

Some NetWare build tweaks: removed obsolete include paths.

2011-10-29 14:27:14 +00:00

NWGNUsession_crypto

Some NetWare build tweaks: removed obsolete include paths.

2011-10-29 14:27:14 +00:00

NWGNUsession_dbd

Some NetWare build tweaks: removed obsolete include paths.

2011-10-29 14:27:14 +00:00