Re: svn commit: r1706275 - /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c

On Tue, Oct 06, 2015 at 02:37:32PM +, Plüm, Rüdiger, Vodafone Group wrote: > The drawback is that it will flush every time the handshake writes. > The handshake may write multiple times before it wants to read. > So the current approach probably causes bigger amounts of data sent > across the

Re: svn commit: r1704683 - /httpd/httpd/trunk/docs/manual/mod/mod_remoteip.xml

On Tue, Sep 22, 2015 at 11:09 PM, William A Rowe Jr wrote: > On Tue, Sep 22, 2015 at 8:48 PM, Eric Covener wrote: >> >> Maybe my followup is better phrased. No issue with handling of internal >> IPs. >> >> Currently, we act like RemoteIPTrustedProxy * by

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 5:34 PM, Graham Leggett wrote: > > apr_bucket_simple_copy() looks wrong - in theory we should have a proper copy > function that does the right thing with the second copy, for example by not > copying the pool. If we blindly copy the pool (or the request

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 3:51 PM, Yann Ylavic wrote: > On Tue, Oct 6, 2015 at 3:41 PM, Graham Leggett wrote: >> On 6 Oct 2015, at 14:32, Yann Ylavic wrote: >> >>> So it seems to relate to the EOR bucket, first not being passed >>>

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 3:36 PM, Stefan Eissing wrote: > FYI: /trunk no longer works with mod_http2. 2.4.x does. I see missing > response data, it seems, so the most likely cause are the changes in filter > handling. Did not find the time to investigate further. > >

AW: svn commit: r1706275 - /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c

> -Ursprüngliche Nachricht- > Von: Yann Ylavic [mailto:ylavic@gmail.com] > Gesendet: Dienstag, 6. Oktober 2015 16:06 > An: dev@httpd.apache.org > Betreff: Re: svn commit: r1706275 - > /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c > > On Thu, Oct 1, 2015 at 8:22 PM, Ruediger Pluem

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 5:22 PM, Yann Ylavic wrote: >> Just did that, same thing. >> I was using mpm_worker, but now tried mpm_event with same segfaults. > > Looks like mod_bucketeer is the culprit. > It fails to remove itself from the filter stack on EOS, and hence > makes a

AW: svn commit: r1706275 - /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c

> -Ursprüngliche Nachricht- > Von: Yann Ylavic [mailto:ylavic@gmail.com] > Gesendet: Dienstag, 6. Oktober 2015 18:18 > An: dev@httpd.apache.org > Betreff: Re: svn commit: r1706275 - > /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c > > On Tue, Oct 6, 2015 at 6:00 PM, Yann Ylavic

AW: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

> -Ursprüngliche Nachricht- > Von: Yann Ylavic [mailto:ylavic@gmail.com] > Gesendet: Dienstag, 6. Oktober 2015 17:54 > An: dev@httpd.apache.org > Betreff: Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ > modules/http/ modules/ssl/ server/ server/mpm/event/

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

> On Oct 6, 2015, at 1:29 PM, Graham Leggett wrote: > > On 06 Oct 2015, at 7:00 PM, Yann Ylavic wrote: > >> Yet another filter which does not remove itself after the EOS, and >> destroys the EOR bucket while still using *r after. > > I am wondering if

RE: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

> -Original Message- > From: Yann Ylavic [mailto:ylavic@gmail.com] > Sent: Dienstag, 6. Oktober 2015 01:40 > To: dev@httpd.apache.org > Subject: Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ > modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ >

Re: svn commit: r1703305 - /httpd/httpd/trunk/modules/aaa/mod_auth_digest.c

Le 05/10/2015 12:03, Plüm, Rüdiger, Vodafone Group a écrit : -Original Message- From: Marion & Christophe JAILLET [mailto:christophe.jail...@wanadoo.fr] Sent: Samstag, 3. Oktober 2015 21:57 To: dev@httpd.apache.org Subject: Re: svn commit: r1703305 -

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 7:29 PM, Graham Leggett wrote: > I am wondering if the EOR bucket is a suboptimal way to clean up after > ourselves. > > The MPM itself is in a position to know when the filter buffers are all empty > and it is safe to delete a request pool. I am imagining

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 9:37 AM, Plüm, Rüdiger, Vodafone Group wrote: > >> From: Yann Ylavic [mailto:ylavic@gmail.com] >> >> Also it seems that we leak the hash iterator here (on c->pool). > > Why do we leak here? apr_hash_first(NULL, is used. So no new iterator is

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 9:37 AM, Plüm, Rüdiger, Vodafone Group wrote: > >> -Original Message- >> From: Yann Ylavic [mailto:ylavic@gmail.com] >> >> > Modified: httpd/httpd/trunk/server/mpm/event/event.c >> > URL: >>

Re: Supporting "SSL:" in the expression parser via mod_ssl

Am 06.10.2015 um 00:44 schrieb Stefan Fritsch: On Wednesday 30 September 2015 23:26:30, Rainer Jung wrote: I noticed that currently the expression parser in 2.4/trunk does not support the SSL:VARIABLE lookups that mod_rewrite supports. The expression parser uses ":" as an alternative function

RE: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

> -Original Message- > From: Yann Ylavic [mailto:ylavic@gmail.com] > Sent: Dienstag, 6. Oktober 2015 11:13 > To: dev@httpd.apache.org > Subject: Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ > modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ >

Re: Supporting "SSL:" in the expression parser via mod_ssl

On Tue, Oct 6, 2015 at 11:55 AM, Rainer Jung wrote: > > I will commit 3) but are very open to other opinions before suggesting a > backport. +1 Regards, Yann.

RE: Supporting "SSL:" in the expression parser via mod_ssl

+1 Regards Rüdiger > -Original Message- > From: Yann Ylavic [mailto:ylavic@gmail.com] > Sent: Dienstag, 6. Oktober 2015 12:07 > To: dev@httpd.apache.org > Subject: Re: Supporting "SSL:" in the expression parser via mod_ssl > > On Tue, Oct 6, 2015 at 11:55 AM, Rainer Jung

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 1:39 AM, Yann Ylavic wrote: >> + >> +/** Buffered data associated with the current filter. */ >> +apr_bucket_brigade *bb; >> + >> +/** Dedicated pool to use for deferred writes. */ >> +apr_pool_t *deferred_pool; > > Could we make these

Re: svn commit: r1707163 - /httpd/httpd/trunk/server/util_filter.c

On Wed, Oct 7, 2015 at 12:38 AM, wrote: > Author: minfrin > Date: Tue Oct 6 22:38:28 2015 > New Revision: 1707163 > > URL: http://svn.apache.org/viewvc?rev=1707163=rev > Log: > Make sure that transient buckets are morphed into real buckets before > the filter returns. > >

Re: svn commit: r1706275 - /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c

On Tue, Oct 6, 2015 at 8:41 PM, Plüm, Rüdiger, Vodafone Group wrote: > > > I am confused now. I understood that the state machine for the server case is > fine. Hence that it flushes automatically where needed. So we only should and > need to take care of the client

RE: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

> -Original Message- > From: Graham Leggett [mailto:minf...@sharp.fm] > Sent: Dienstag, 6. Oktober 2015 12:16 > To: dev@httpd.apache.org > Subject: Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ > modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ >

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 11:31 AM, Plüm, Rüdiger, Vodafone Group wrote: > > >> -Original Message- >> From: Yann Ylavic [mailto:ylavic@gmail.com] >> Sent: Dienstag, 6. Oktober 2015 11:13 >> To: dev@httpd.apache.org >> Subject: Re: svn commit: r1706669 - in

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 12:26 PM, Plüm, Rüdiger, Vodafone Group wrote: > How can you be sure that you don't have transient buckets in the brigade that > point to memory that changed or is invalid, once you reinstate the brigade? Because it’s a request filter, not a

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 12:36 PM, Yann Ylavic wrote: >> Although the brigade is empty, don't we need to prevent the brigade being >> used by multiple threads in parallel? >> Using one per connection prevents this. > > Hmm, the filters are also allocated per connection/request

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 12:15 PM, Graham Leggett wrote: > On 06 Oct 2015, at 1:39 AM, Yann Ylavic wrote: > >>> + >>> +/** Buffered data associated with the current filter. */ >>> +apr_bucket_brigade *bb; >>> + >>> +/** Dedicated pool to use for

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 12:57 PM, Graham Leggett wrote: > > On 06 Oct 2015, at 12:36 PM, Yann Ylavic wrote: >> BTW, I wonder if we can "reinstate" the filters in arbitrary order >> like in the above loop (the order seems to depend on the calls to >>

Re: T of 2.4.17 this week

On 10/06/2015 02:01 PM, Jeff Trawick wrote: > On Tue, Oct 6, 2015 at 7:44 AM, Daniel Gruno > wrote: > > On 10/05/2015 06:35 PM, Daniel Gruno wrote: > > +1! > > There's so much new goodness we have to share! :) > > > > On

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 3:51 PM, Yann Ylavic wrote: > > Just did that, same thing. > I was using mpm_worker, but now tried mpm_event with same segfaults. FWIW, I'm running an (old) Debian 6.0.10 (squeeze, 64bit).

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 1:07 PM, Yann Ylavic wrote: > What I meant is that passing an empty brigade to a reinstate-able > filter may make it pass its data to the next filter, so we may want to > do this only on the first reinstate-able filter starting from > r->output_filters.

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 12:36 PM, Graham Leggett wrote: >> How can you be sure that you don't have transient buckets in the brigade >> that point to memory that changed or is invalid, once you reinstate the >> brigade? > > Because it’s a request filter, not a connection filter.

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 3:41 PM, Graham Leggett wrote: > On 6 Oct 2015, at 14:32, Yann Ylavic wrote: > >> So it seems to relate to the EOR bucket, first not being passed >> through, and second leading to a double-free or alike. >> >> Did not investigate

Re: svn commit: r1706275 - /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c

On Thu, Oct 1, 2015 at 8:22 PM, Ruediger Pluem wrote: > > The issue is that openssl during the connect handshake to a clieent does not > tell httpd to flush. Hence the CLIENT_HELLO > remains in the core output filter buffer and openssl waits for the > SERVER_HELLO from the

Re: T of 2.4.17 this week

On 10/05/2015 06:35 PM, Daniel Gruno wrote: > +1! > There's so much new goodness we have to share! :) > > On 10/5/2015, 5:54:04 PM, Jim Jagielski wrote: >> I propose a T of 2.4.17 this week with a release for next. I >> will RM. >> >> Comments? >> Also, if someone could

Re: T of 2.4.17 this week

On Tue, Oct 6, 2015 at 7:44 AM, Daniel Gruno wrote: > On 10/05/2015 06:35 PM, Daniel Gruno wrote: > > +1! > > There's so much new goodness we have to share! :) > > > > On 10/5/2015, 5:54:04 PM, Jim Jagielski wrote: > >> I propose a T of 2.4.17 this week

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Sun, Oct 4, 2015 at 12:10 PM, wrote: > Author: minfrin > Date: Sun Oct 4 10:10:51 2015 > New Revision: 1706669 > > URL: http://svn.apache.org/viewvc?rev=1706669=rev > Log: > core: Extend support for asynchronous write completion from the > network filter to any connection

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 3:32 PM, Yann Ylavic wrote: > > Just wanted to run the tests framework on trunk for a local change but > it seems that this commit (bisected to) makes many tests to segfault. Forgot to mention, same thing with follow up r1706670 applied.

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

FYI: /trunk no longer works with mod_http2. 2.4.x does. I see missing response data, it seems, so the most likely cause are the changes in filter handling. Did not find the time to investigate further. Please be aware the mod_h2 uses pool/brigade hierarchies in new and unexpected ways. The

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 6 Oct 2015, at 14:32, Yann Ylavic wrote: > So it seems to relate to the EOR bucket, first not being passed > through, and second leading to a double-free or alike. > > Did not investigate further... Did you rebuild you tree completely clean before trying it out?

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

+1 (concept) > On Oct 6, 2015, at 11:53 AM, Yann Ylavic wrote: > > On Tue, Oct 6, 2015 at 5:34 PM, Graham Leggett wrote: >> >> apr_bucket_simple_copy() looks wrong - in theory we should have a proper >> copy function that does the right thing with the

Re: svn commit: r1704683 - /httpd/httpd/trunk/docs/manual/mod/mod_remoteip.xml

> On Oct 6, 2015, at 10:47 AM, Eric Covener wrote: > > On Tue, Sep 22, 2015 at 11:09 PM, William A Rowe Jr > wrote: >> On Tue, Sep 22, 2015 at 8:48 PM, Eric Covener wrote: >>> >>> Maybe my followup is better phrased. No issue with

Re: T of 2.4.17 this week

On 2015-10-05 23:07, Yann Ylavic wrote: > On Mon, Oct 5, 2015 at 8:30 PM, olli hauer wrote: >> >> would you mind to look at #58126 ? >> >> It contains a simple patch for acinclude.m4 to suppress warnings about >> underquoted calls to AC_DEFUN. > > Committed in r1706918, backport

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On 06 Oct 2015, at 7:00 PM, Yann Ylavic wrote: > Yet another filter which does not remove itself after the EOS, and > destroys the EOR bucket while still using *r after. I am wondering if the EOR bucket is a suboptimal way to clean up after ourselves. The MPM itself is

Re: svn commit: r1706275 - /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c

On Tue, Oct 6, 2015 at 6:00 PM, Yann Ylavic wrote: > On Tue, Oct 6, 2015 at 5:44 PM, Joe Orton wrote: >> >> Hence In the server case, it seems reasonable to rely on BIO_flush() >> being called at the "right" times during the handshake. Modulo the odd >>

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 5:53 PM, Yann Ylavic wrote: > On Tue, Oct 6, 2015 at 5:34 PM, Graham Leggett wrote: >> >> apr_bucket_simple_copy() looks wrong - in theory we should have a proper >> copy function that does the right thing with the second copy, for

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 6:29 PM, Yann Ylavic wrote: > > all tests pass now. I spoke too soon... New segfault is in mod_substitute: Program terminated with signal 11, Segmentation fault. (gdb) bt #0 0x7fa02fbaec2b in allocator_free (allocator=0x1cedcb0, node=0x0) at

Re: svn commit: r1706275 - /httpd/httpd/trunk/modules/ssl/ssl_engine_io.c

On Tue, Oct 6, 2015 at 5:44 PM, Joe Orton wrote: > > Hence In the server case, it seems reasonable to rely on BIO_flush() > being called at the "right" times during the handshake. Modulo the odd > bug! > > But ssl/s3_clnt.c is not following that coding style at all, and it

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 7:00 PM, Yann Ylavic wrote: > On Tue, Oct 6, 2015 at 6:29 PM, Yann Ylavic wrote: >> >> all tests pass now. > > I spoke too soon... > > New segfault is in mod_substitute: Fixed in r1707091. Now all tests really pass :p I wonder

Re: svn commit: r1706669 - in /httpd/httpd/trunk: ./ include/ modules/http/ modules/ssl/ server/ server/mpm/event/ server/mpm/motorz/ server/mpm/simple/

On Tue, Oct 6, 2015 at 5:22 PM, Yann Ylavic wrote: > still the new filter should probably work > with the existing... s/new filter/new filter stack mechanism/