shell_ready function
Does the quote escaping really work in this function? It confuses emacs font-lock mode which doesn't see a closing quote so thinks the rest of the file is part of the string. This fixes at least the latter: Index: TestConfig.pm === RCS file: /home/cvs/httpd-test/perl-framework/Apache-Test/lib/Apache/TestConfig.pm,v retrieving revision 1.239 diff -u -r1.239 TestConfig.pm --- TestConfig.pm 15 Aug 2004 23:19:57 - 1.239 +++ TestConfig.pm 18 Aug 2004 08:55:29 - @@ -1754,7 +1754,7 @@ # escape quotes) sub shell_ready { my $arg = shift; -$arg =~ s//\/g; +$arg =~ s//\\/g; return qq[$arg]; }
Re: shell_ready function
Joe Orton wrote: Does the quote escaping really work in this function? hmm, it doesn't look like it does. I think this was part of some work that stas and ken were doing, though, and IIRC it was some win32 command line thing. but I could be wrong. It confuses emacs font-lock mode which doesn't see a closing quote so thinks the rest of the file is part of the string. This fixes at least the latter: -$arg =~ s//\/g; +$arg =~ s//\\/g; that looks better, but I'm not sure it's right either - if the input is already escaped then you've (both) over-quoted (if the first worked at all, that is :) so, you look to be fine here if pre-quoted input is forbidden or not expected, but not so if it's already quoted, in which case something like this is better: $arg =~ s!([^\\])!$1\\!g; the attached script runs through a few different regex and input combinations for visual inspection. hopefully that will help sort this issue out a bit (or the original author will clear things up ;) --Geoff #!/usr/bin/perl foreach my $data (DATA) { chomp $data; print 'old: ', shell_ready_old($data), \n; print 'joe: ', shell_ready_joe($data), \n; print 'geoff: ', shell_ready_geoff($data), \n; print '-' x 30, \n; } sub shell_ready_old { my $arg = shift; $arg =~ s//\/g; return qq[$arg]; } sub shell_ready_joe { my $arg = shift; $arg =~ s//\\/g; return qq[$arg]; } sub shell_ready_geoff { my $arg = shift; $arg =~ s!([^\\])!$1\\!g; return qq[$arg]; } __DATA__ one fish two fish red \fish\ blue \fish\ this one has a little star this one has a \little car say, \what \a \lot of fish there are
Re: shell_ready function
Geoffrey Young wrote: Joe Orton wrote: Does the quote escaping really work in this function? hmm, it doesn't look like it does. I think this was part of some work that stas and ken were doing, though, and IIRC it was some win32 command line thing. but I could be wrong. It confuses emacs font-lock mode which doesn't see a closing quote so thinks the rest of the file is part of the string. This fixes at least the latter: -$arg =~ s//\/g; +$arg =~ s//\\/g; that looks better, but I'm not sure it's right either - if the input is already escaped then you've (both) over-quoted (if the first worked at all, that is :) so, you look to be fine here if pre-quoted input is forbidden or not expected, but not so if it's already quoted, in which case something like this is better: $arg =~ s!([^\\])!$1\\!g; the attached script runs through a few different regex and input combinations for visual inspection. hopefully that will help sort this issue out a bit (or the original author will clear things up ;) Yeah, I guess it's the best to ask Ken, it worked for him. Jon's looks better, and Geoff's is even better, I've checked CPAN and found http://search.cpan.org/src/ROSCH/String-ShellQuote-1.00/ShellQuote.pm but it probably is not what you are after, right? Either way +1 to Geoff's version. and here is the optimized version of Geoff's one: sub shell_ready_stas { my $arg = shift; $arg =~ s!\\?!\\!g; return qq[$arg]; } :) -- __ Stas BekmanJAm_pH -- Just Another mod_perl Hacker http://stason.org/ mod_perl Guide --- http://perl.apache.org mailto:[EMAIL PROTECTED] http://use.perl.org http://apacheweek.com http://modperlbook.org http://apache.org http://ticketmaster.com
Re: shell_ready function
and here is the optimized version of Geoff's one: sub shell_ready_stas { my $arg = shift; $arg =~ s!\\?!\\!g; return qq[$arg]; } :) Benchmark: timing 100 iterations of geoff, stas... geoff: 64 wallclock secs (56.35 usr + 0.10 sys = 56.45 CPU) @ 17714.79/s (n=100) stas: 43 wallclock secs (40.27 usr + 0.06 sys = 40.33 CPU) @ 24795.44/s (n=100) /me bows to the master --Geoff
Re: proxy compile warnings
--On Tuesday, August 17, 2004 4:52 PM -0500 William A. Rowe, Jr. [EMAIL PROTECTED] wrote: I have the same concern... Madhu is gone for about another week, I think you mean Mladen not Madhu. ;-) -- justin
Re: proxy compile warnings
Geoffrey Young wrote: William A. Rowe, Jr. wrote: At 04:36 PM 8/17/2004, Joe Orton wrote: On Tue, Aug 17, 2004 at 11:48:39AM -0400, Geoffrey Young wrote: hi all the attached patch is required for me to get mod_proxy to compile with -Werror. Thanks Geoff. The only thing I'm not sure of is whether this function should really be deleted or if it's actually intended to be exported: -PROXY_DECLARE(int) ap_proxy_post_request(proxy_worker *worker, - proxy_balancer *balancer, - request_rec *r, - proxy_server_conf *conf) -{ I have the same concern... Madhu is gone for about another week, we should have an answer, soon. sure, that's fine. I didn't consider the alternative, which is adding to mod_proxy.h. whoops :) Adding it to mod_proxy.h is right the thing. The idea is to have a ap_proxy_pre_request and ap_proxy_post_request: one called before processing the request and one after. You can check cvs revision log for the include file to see if he deliberate dropped it. this is the only reference I can find to that function at all http://www.mail-archive.com/[EMAIL PROTECTED]/msg61185.html but I haven't been following this complex proxy world with a lot of detail. however, it is a recent addition, so I would guess that the include is just missing the declaration. at any rate, no sense rushing it along in lieu of the proper people reviewing it - I was just trying to let people know about the warnings :) --Geoff
missing variable in suexec safe list
Hi, I just noticed that the safe_env_list in suexec.c has one variable name missing: SERVER_SIGNATURE. Here is a tivial patch to add it: --- httpd-2.0.50/support/suexec.c.~20040209205949~ 2004-02-09 22:59:49.0 +0200 +++ httpd-2.0.50/support/suexec.c 2004-08-18 09:46:51.0 +0300 @@ -134,6 +134,7 @@ SERVER_ADDR=, SERVER_PORT=, SERVER_PROTOCOL=, +SERVER_SIGNATURE=, SERVER_SOFTWARE=, UNIQUE_ID=, USER_NAME=, Please commit this to the CVS. Best, Zvi. -- Dr. Zvi Har'El mailto:[EMAIL PROTECTED]Department of Mathematics tel:+972-54-4227607 icq:179294841Technion - Israel Institute of Technology fax:+972-4-8293388 http://www.math.technion.ac.il/~rl/Haifa 32000, ISRAEL If you can't say somethin' nice, don't say nothin' at all. -- Thumper (1942) Wednesday, 1 Elul 5764, 18 August 2004, 9:42AM
Re: missing variable in suexec safe list
On Wed, 18 Aug 2004 09:56:53 +0300, Zvi Har'El [EMAIL PROTECTED] wrote: Hi, I just noticed that the safe_env_list in suexec.c has one variable name missing: SERVER_SIGNATURE. Here is a tivial patch to add it: thanks! patch committed to 2.1-dev and proposed for merging into 2.0.next
mod_deflate and no-gzip
Shouldn't we still set Vary: Accept-Encoding if no-gzip is set? Example, if I use SetEnvIf to disallow gzip for some browsers, shouldn't we still tell proxies to vary on Accept-Encoding? mod_deflate will send the Vary if the client does not have a proper Accept-Encoding header, but not if we set no-gzip. THis seems broken. If mod_deflate is called, if should send a Vary. -- Brian Akins Senior Systems Engineer CNN Internet Technologies
Re: mod_deflate and no-gzip
On Wed, 18 Aug 2004, Brian Akins wrote: Shouldn't we still set Vary: Accept-Encoding if no-gzip is set? Hmmm, makes sense. +1 Should we be looking at a wholesale backport from 2.1-head? There are a number of minor bugfixes, as well as the inflate output filter. -- Nick Kew
Re: proxy compile warnings
Adding it to mod_proxy.h is right the thing. The idea is to have a ap_proxy_pre_request and ap_proxy_post_request: one called before processing the request and one after. ok, cool. attached is a new patch that addresses this. sorry for the excess dialogue - this would have been obvious if I had followed the code a bit :) --Geoff Index: modules/proxy/mod_proxy.h === RCS file: /home/cvs/httpd-2.0/modules/proxy/mod_proxy.h,v retrieving revision 1.120 diff -u -r1.120 mod_proxy.h --- modules/proxy/mod_proxy.h 11 Aug 2004 23:30:17 - 1.120 +++ modules/proxy/mod_proxy.h 18 Aug 2004 13:11:26 - @@ -388,6 +388,7 @@ PROXY_DECLARE(const char *) ap_proxy_add_balancer(proxy_balancer **balancer, apr_pool_t *p, proxy_server_conf *conf, const char *url); PROXY_DECLARE(void) ap_proxy_add_worker_to_balancer(apr_pool_t *pool, proxy_balancer *balancer, proxy_worker *worker); PROXY_DECLARE(int) ap_proxy_pre_request(proxy_worker **worker, proxy_balancer **balancer, request_rec *r, proxy_server_conf *conf, char **url); +PROXY_DECLARE(int) ap_proxy_post_request(proxy_worker *worker, proxy_balancer *balancer, request_rec *r, proxy_server_conf *conf); PROXY_DECLARE(int) ap_proxy_determine_connection(apr_pool_t *p, request_rec *r, proxy_server_conf *conf, proxy_worker *worker, proxy_conn_rec *conn, apr_pool_t *ppool, apr_uri_t *uri, char **url, const char *proxyname, apr_port_t proxyport, char *server_portstr, int server_portstr_size); Index: modules/proxy/proxy_ftp.c === RCS file: /home/cvs/httpd-2.0/modules/proxy/proxy_ftp.c,v retrieving revision 1.145 diff -u -r1.145 proxy_ftp.c --- modules/proxy/proxy_ftp.c 11 Aug 2004 23:28:58 - 1.145 +++ modules/proxy/proxy_ftp.c 18 Aug 2004 13:11:30 - @@ -745,7 +745,8 @@ return OK; } -static ftp_proxyerror(request_rec *r, proxy_conn_rec *conn, int statuscode, const char *message) +static +int ftp_proxyerror(request_rec *r, proxy_conn_rec *conn, int statuscode, const char *message) { proxy_ftp_cleanup(r, conn); return ap_proxyerror(r, statuscode, message); @@ -782,7 +783,6 @@ int len, rc; int one = 1; char *size = NULL; -apr_socket_t *origin_sock = NULL; char xfer_type = 'A'; /* after ftp login, the default is ASCII */ int dirlisting = 0; #if defined(USE_MDTM) (defined(HAVE_TIMEGM) || defined(HAVE_GMTOFF)) Index: modules/proxy/proxy_util.c === RCS file: /home/cvs/httpd-2.0/modules/proxy/proxy_util.c,v retrieving revision 1.135 diff -u -r1.135 proxy_util.c --- modules/proxy/proxy_util.c 13 Aug 2004 12:20:53 - 1.135 +++ modules/proxy/proxy_util.c 18 Aug 2004 13:11:34 - @@ -19,6 +19,10 @@ #include scoreboard.h #include apr_version.h +#if APR_HAVE_UNISTD_H +#include unistd.h /* for getpid() */ +#endif + #if (APR_MAJOR_VERSION 1) #undef apr_socket_create #define apr_socket_create apr_socket_create_ex
Re: cvs commit: httpd-2.0/modules/aaa NWGNUauthnzldap mod_authnz_ldap.c NWGNUmakefile
Brad Nicholes wrote: BTW, since I am not a Linux makefile guru, the new authnz_ldap module has not been added to the Linux build scripts. Can somebody make the appropriate changes to the makefiles? Done. Are you going to move util_ldap to the ldap directory, or should I do it? I am not a netware guru, so you would have to do the build scripts :) Can we cvs rm mod_auth_ldap from it's old location? Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature
Re: cvs commit: httpd-2.0/modules/aaa NWGNUauthnzldap mod_authnz_ldap.c NWGNUmakefile
If you have time to move it before I do, by all mean, go for it. I probably won't get around to it until this afternoon anyway. Thanks for taking care of the build scripts. I'm pretty sure that I can handle the util_ldap netware build files once it is moved :) Experimental/Mod_auth_ldap should probably be thrown into the attic so we can at least preserve the history. Brad Brad Nicholes Senior Software Engineer Novell, Inc., the leading provider of Net business solutions http://www.novell.com [EMAIL PROTECTED] Wednesday, August 18, 2004 7:24:13 AM Brad Nicholes wrote: BTW, since I am not a Linux makefile guru, the new authnz_ldap module has not been added to the Linux build scripts. Can somebody make the appropriate changes to the makefiles? Done. Are you going to move util_ldap to the ldap directory, or should I do it? I am not a netware guru, so you would have to do the build scripts :) Can we cvs rm mod_auth_ldap from it's old location? Regards, Graham --
Re: mod_deflate and no-gzip
On Wed, 18 Aug 2004, Brian Akins wrote: Shouldn't we still set Vary: Accept-Encoding if no-gzip is set? Example, if I use SetEnvIf to disallow gzip for some browsers, shouldn't we still tell proxies to vary on Accept-Encoding? mod_deflate will send the Vary if the client does not have a proper Accept-Encoding header, but not if we set no-gzip. THis seems broken. If mod_deflate is called, if should send a Vary. What about SetEnvIf Request_URI file[0-9]+\.html no-gzip This doesn't require a Vary-header. And in fact, the example you site requires a Vary: User-Agent, not Vary: Accept-Encoding. This is a rather difficult problem, and I don't have a good solution to propose. Currently, it is the responsibility of the admin to deal with Vary if they use no-gzip. For an example, see http://httpd.apache.org/docs-2.0/mod/mod_deflate.html#recommended and for a discussion: http://httpd.apache.org/docs-2.0/mod/mod_deflate.html#proxies Joshua.
Re: Where is the AJP code...
William A. Rowe, Jr. wrote: At 01:56 AM 8/17/2004, jean-frederic clere wrote: William A. Rowe, Jr. wrote: At 03:58 PM 8/16/2004, Brad Nicholes wrote: The addition of the proxy_ajp module to the httpd project presents a build problem. The AJP module code exists in httpd/modules/proxy in the httpd project but the AJP lib code still sits in the jakarta-tomcat-connectors\ajp\ajplib\test in the jakarta project. Is the AJPLIB code going to be migrated to the httpd project? Why is the AJPLIB code in a test directory? I'm +1 for placing it in modules/proxy/ ... iff it will be maintained and kept up to date. +1 Then let's go ahead, would you please commit the current flavor of the ajp sources to modules/proxy/ (not modules/proxy/ajp/) with a commit message to their official source location within jakarta-tomcat-connectors/ (the real location, not the temporary ajp/test/ajplib). The real location has not been decided in jakarta-tomcat-connectors... For the moment the ajplib files are in jakarta-tomcat-connectors/ajp/test/ajplib. Just in case another maintainer wants to look aside at their development. Then just a few tweaks so we don't delve the ./ajp/ directory. Bill
AJP lib files added to httpd-2.0 repos
Hi, I have added to the httpd-2.0/modules/proxy the following files: ajp.h ajp_header.c ajp_header.h ajp_link.c ajp_msg.c They are also in jakarta-tomcat-connectors/ajp/ajplib/test. They have to be kept up to date (synchronized) please remember to mail the diff to the other repos dev-list when something is changed. Cheers Jean-Frederic
vacation
Hi, I'll be on vacation til 7th september. I will (try to) go on the new proxy implementation but I will only read my apache.org mail, so if you find something wrong in the new code (and want a quick fix) mail me there. Cheers Jean-Frederic
Re: Windows 2003 IA64 builds?
I posted a companion patch to the apr list last night. This patch against HEAD along with the apr patch get the three core dlls cross compiling with Visual Studio 6 + IA64 SDK. It addresses most /W2 warnings and fixes a couple of bugs. I haven't looked at many of the modules yet. As I mentioned in the other note there are a lot more warnings that are thrown with /W3 that need to be investigated furher. In addition to fixing compiler warnings there is the question of the build process. I'm currently running setenv /SRV64 /RETAIL from the SDK to set the IA64 environment, then running msdev with the /USEENV option. This requires a separate set of .dsp files that have been munged to specify /machine:IA64 among other things. Keeping the .dsp's separate rather than folding into the existing ones if for convenience and maintainability at least in the short term, maybe the long term too. One problem that comes up is that there are 3 executables built that are used to generate tables at compile time, but since everything is cross compiled IA64 that doesn't work. I'll have to hack around that somehow, maybe store the prebuilt files in CVS and copy to the appropriate locations. I'm open to suggestions if anyone has a better idea. If this sounds reasonable I'll proceed along this path. Allan -- Index: os/win32/ap_regkey.c === RCS file: /home/cvs/httpd-2.0/os/win32/ap_regkey.c,v retrieving revision 1.11 diff -U3 -r1.11 ap_regkey.c --- os/win32/ap_regkey.c9 Feb 2004 20:40:49 - 1.11 +++ os/win32/ap_regkey.c17 Aug 2004 21:02:48 - @@ -236,7 +236,7 @@ */ valuelen = (size - 1) * 3 + 1; *result = apr_palloc(pool, valuelen); -rv = apr_conv_ucs2_to_utf8(wvalue, size, *result, valuelen); +rv = apr_conv_ucs2_to_utf8(wvalue, (apr_size_t *)size, *result, valuelen); if (rv != APR_SUCCESS) return rv; else if (size) @@ -309,7 +309,7 @@ wvallen = alloclen = size; wvalue = apr_palloc(pool, alloclen * 2); -rv = apr_conv_utf8_to_ucs2(value, size, wvalue, wvallen); +rv = apr_conv_utf8_to_ucs2(value, (apr_size_t *)size, wvalue, wvallen); if (rv != APR_SUCCESS) return rv; else if (size) @@ -363,7 +363,7 @@ return APR_ENAMETOOLONG; /* Read to NULL buffer to determine value size */ rc = RegQueryValueExW(key-hkey, wvalname, 0, resulttype, - NULL, resultsize); + NULL, (LPDWORD)resultsize); if (rc != ERROR_SUCCESS) { return APR_FROM_OS_ERROR(rc); } @@ -371,7 +371,7 @@ /* Read value based on size query above */ *result = apr_palloc(pool, *resultsize); rc = RegQueryValueExW(key-hkey, wvalname, 0, resulttype, - (LPBYTE)*result, resultsize); + (LPBYTE)*result, (LPDWORD)resultsize); } #endif /* APR_HAS_UNICODE_FS */ #if APR_HAS_ANSI_FS @@ -379,14 +379,14 @@ { /* Read to NULL buffer to determine value size */ rc = RegQueryValueEx(key-hkey, valuename, 0, resulttype, - NULL, resultsize); + NULL, (LPDWORD)resultsize); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); /* Read value based on size query above */ *result = apr_palloc(pool, *resultsize); rc = RegQueryValueEx(key-hkey, valuename, 0, resulttype, - (LPBYTE)*result, resultsize); + (LPBYTE)*result, (LPDWORD)resultsize); if (rc != ERROR_SUCCESS) return APR_FROM_OS_ERROR(rc); } @@ -452,7 +452,7 @@ char *buf; char *tmp; DWORD type; -DWORD size = 0; +apr_size_t size = 0; rv = ap_regkey_value_raw_get(value, size, type, key, valuename, pool); if (rv != APR_SUCCESS) { Index: server/mpm/winnt/child.c === RCS file: /home/cvs/httpd-2.0/server/mpm/winnt/child.c,v retrieving revision 1.37 diff -U3 -r1.37 child.c --- server/mpm/winnt/child.c14 Aug 2004 10:57:13 - 1.37 +++ server/mpm/winnt/child.c17 Aug 2004 21:02:48 - @@ -684,7 +684,7 @@ { int rc; DWORD BytesRead; -DWORD CompKey; +apr_size_t CompKey; LPOVERLAPPED pol; mpm_recycle_completion_context(context); Index: server/mpm/winnt/mpm_winnt.c === RCS file: /home/cvs/httpd-2.0/server/mpm/winnt/mpm_winnt.c,v retrieving revision 1.311 diff -U3 -r1.311 mpm_winnt.c --- server/mpm/winnt/mpm_winnt.c24 Apr 2004 11:23:14 - 1.311 +++ server/mpm/winnt/mpm_winnt.c17 Aug 2004 21:02:49 - @@ -416,7 +416,7 @@ HANDLE hDup; HANDLE
Re: mod_deflate and no-gzip
* Nick Kew [EMAIL PROTECTED] wrote: On Wed, 18 Aug 2004, Brian Akins wrote: Shouldn't we still set Vary: Accept-Encoding if no-gzip is set? Hmmm, makes sense. +1 Nope. mod_deflate doesn't know whether it depends on the request (more than the URL). Location /foo SetEnv no-gzip /Location Possible solutions would be either a special value (like vary) or another variable (no-gzip-but-vary or the like) or just to use mod_headers. nd -- $_=q?tvc!uif)%*|#Bopuifs!A`#~tvc!Xibu)%*|qsjou#Kvtu!A`#~tvc!KBQI!)*|~ tvc!ifmm)%*|#Qfsm!A`#~tvc!jt)%*|(Ibdlfs(~ # What the hell is JAPH? ; @_=split/\s\s+#/;$_=(join''=map{chr(ord( # André Malo ; $_)-1)}split//=$_[0]).$_[1];s s.*s$_see; # http://www.perlig.de/ ;
[STATUS] (apache-1.3) Wed Aug 18 23:45:06 EDT 2004
APACHE 1.3 STATUS: -*-text-*- Last modified at [$Date: 2004/05/20 15:16:42 $] Release: 1.3.32-dev: In development 1.3.31: Tagged May 7, 2004. Announced May 11, 2004. 1.3.30: Tagged April 9, 2004. Not released. 1.3.29: Tagged October 24, 2003. Announced Oct 29, 2003. 1.3.28: Tagged July 16, 2003. Announced ?? 1.3.27: Tagged September 30, 2002. Announced Oct 3, 2002. 1.3.26: Tagged June 18, 2002. 1.3.25: Tagged June 17, 2002. Not released. 1.3.24: Tagged Mar 21, 2002. Announced Mar 22, 2002. 1.3.23: Tagged Jan 21, 2002. 1.3.22: Tagged Oct 8, 2001. Announced Oct 12, 2001. 1.3.21: Not released. (Pulled for htdocs/manual config mismatch. t/r Oct 5, 2001) 1.3.20: Tagged and rolled May 15, 2001. Announced May 21, 2001. 1.3.19: Tagged and rolled Feb 26, 2001. Announced Mar 01, 2001. 1.3.18: Tagged and rolled Not released. (Pulled because of an incorrect unescaping fix. t/r Feb 19, 2001) 1.3.17: Tagged and rolled Jan 26, 2001. Announced Jan 29, 2001. 1.3.16: Not released. (Pulled because of vhosting bug. t/r Jan 20, 2001) 1.3.15: Not released. (Pulled due to CVS dumping core during the tagging when it reached src/os/win32/) 1.3.14: Tagged and Rolled Oct 10, 2000. Released/announced on the 13th. 1.3.13: Not released. (Pulled in the first minutes due to a Netware build bug) 1.3.12: Tagged and rolled Feb. 23, 2000. Released/announced on the 25th. 1.3.11: Tagged and rolled Jan. 19, 2000. Released/announced on the 21st. 1.3.10: Not released. (Pulled at last minute due to a build bug in the MPE port) 1.3.9: Tagged and rolled on Aug. 16, 1999. Released and announced on 19th. 1.3.8: Not released. 1.3.7: Not released. 1.3.6: Tagged and rolled on Mar. 22, 1999. Released and announced on 24th. 1.3.5: Not released. 1.3.4: Tagged and rolled on Jan. 9, 1999. Released on 11th, announced on 12th. 1.3.3: Tagged and rolled on Oct. 7, 1998. Released on 9th, announced on 10th. 1.3.2: Tagged and rolled on Sep. 21, 1998. Announced and released on 23rd. 1.3.1: Tagged and rolled on July 19, 1998. Announced and released. 1.3.0: Tagged and rolled on June 1, 1998. Announced and released on the 6th. 2.0 : Available for general use, see httpd-2.0 repository RELEASE SHOWSTOPPERS: RELEASE NON-SHOWSTOPPERS BUT WOULD BE REAL NICE TO WRAP THESE UP: * PR: 27023 Cookie could not delivered if the cookie made before proxy module. * isn't ap_die() broken with recognizing recursive errors Message-Id: [EMAIL PROTECTED] +1: jeff, jim * Current vote on 3 PRs for inclusion: Bugz #17877 (passing chunked encoding thru proxy) (still checking if RFC compliant... vote is on the correctness of the patch code only). +1: jim, chuck, minfrin Bugz #9181 (Unable to set headers on non-2XX responses) +1: Martin, Jim Gnats #10246 (Add ProxyConnAllow directive) +0: Martin (or rather -.5, see dev@ Message [EMAIL PROTECTED]) * htpasswd.c and htdigest.c use tmpnam()... consider using mkstemp() when available. Message-ID: [EMAIL PROTECTED] Status: * Dean's unescaping hell (unescaping the various URI components at the right time and place, esp. unescaping the host name). Message-ID: [EMAIL PROTECTED] Status: * Martin observed a core dump because a ipaddr_chain struct contains a NULL-server pointer when being dereferenced by invoking httpd -S. Message-ID: [EMAIL PROTECTED] Status: Workaround enabled. Clean solution can come after 1.3.19 * long pathnames with many components and no AllowOverride None Workaround is to define Directory / with AllowOverride None, which is something all sites should do in any case. Status: Marc was looking at it. (Will asks 'wasn't this patched?') * Ronald Tschalär's patch to mod_proxy to allow other modules to set headers too (needed by mod_auth_digest) Message-ID: [EMAIL PROTECTED] Status: Available Patches (Most likely, will be ported to 2.0 as appropriate): * A rewrite of ap_unparse_uri_components() by Jeffrey W. Baker [EMAIL PROTECTED] to more fully close some segfault potential. Message-ID: [EMAIL PROTECTED] Status: Jim +1 (for 1.3.19), Martin +0 * Andrew Ford's patch (1999/12/05) to add absolute times to mod_expires Message-ID: [EMAIL PROTECTED] Status: Martin +1, Jim +1, Ken +1 (on concept) * Raymond S Brand's path to mod_autoindex to fix the header/readme include processing so the envariables are correct for the included documents. (Actually, there are two variants in the patch message, for two different ways of doing it.) Message-ID: [EMAIL
[STATUS] (httpd-2.0) Wed Aug 18 23:45:11 EDT 2004
APACHE 2.0 STATUS: -*-text-*- Last modified at [$Date: 2004/08/18 14:46:02 $] Release: 2.0.51 : in development 2.0.50 : released June 30, 2004 as GA. 2.0.49 : released March 19, 2004 as GA. 2.0.48 : released October 29, 2003 as GA. 2.0.47 : released July 09, 2003 as GA. 2.0.46 : released May 28, 2003 as GA. 2.0.45 : released April 1, 2003 as GA. 2.0.44 : released January 20, 2003 as GA. 2.0.43 : released October 3, 2002 as GA. 2.0.42 : released September 24, 2002 as GA. 2.0.41 : rolled September 16, 2002. not released. 2.0.40 : released August 9, 2002 as GA. 2.0.39 : released June 17, 2002 as GA. 2.0.38 : rolled June 16, 2002. not released. 2.0.37 : rolled June 11, 2002. not released. 2.0.36 : released May 6, 2002 as GA. 2.0.35 : released April 5, 2002 as GA. 2.0.34 : tagged March 26, 2002. 2.0.33 : tagged March 6, 2002. not released. 2.0.32 : released Feburary 16, 2002 as beta. 2.0.31 : rolled Feburary 1, 2002. not released. 2.0.30 : tagged January 8, 2002. not rolled. 2.0.29 : tagged November 27, 2001. not rolled. 2.0.28 : released November 13, 2001 as beta. 2.0.27 : rolled November 6, 2001 2.0.26 : tagged October 16, 2001. not rolled. 2.0.25 : rolled August 29, 2001 2.0.24 : rolled August 18, 2001 2.0.23 : rolled August 9, 2001 2.0.22 : rolled July 29, 2001 2.0.21 : rolled July 20, 2001 2.0.20 : rolled July 8, 2001 2.0.19 : rolled June 27, 2001 2.0.18 : rolled May 18, 2001 2.0.17 : rolled April 17, 2001 2.0.16 : rolled April 4, 2001 2.0.15 : rolled March 21, 2001 2.0.14 : rolled March 7, 2001 2.0a9 : released December 12, 2000 2.0a8 : released November 20, 2000 2.0a7 : released October 8, 2000 2.0a6 : released August 18, 2000 2.0a5 : released August 4, 2000 2.0a4 : released June 7, 2000 2.0a3 : released April 28, 2000 2.0a2 : released March 31, 2000 2.0a1 : released March 10, 2000 Please consult the following STATUS files for information on related projects: * srclib/apr/STATUS * srclib/apr-util/STATUS * docs/STATUS Contributors looking for a mission: * Just do an egrep on TODO or XXX in the source. * Review the PatchAvailable bugs in the bug database. Append a comment saying Reviewed and tested. * Open bugs in the bug database. RELEASE SHOWSTOPPERS: PATCHES TO BACKPORT FROM 2.1 [ please place file names and revisions from HEAD here, so it is easy to identify exactly what the proposed changes are! ] *) Fix mod_userdir vs mod_suexec identity hook ordering. http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/mappers/mod_userdir.c?r1=1.58r2=1.59 PR: 18156 +1: jorton, slive *) [SECURITY] mod_ssl: Fix potential input filter segfaults in SPECULATIVE mode. http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/ssl/ssl_engine_io.c?r1=1.125r2=1.126 PR: 30134 +1: jorton *) [SECURITY] mod_ssl: Fix potential infinite loop. http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/ssl/ssl_engine_io.c?r1=1.124r2=1.125 PR: 29964 +1: jorton, nd, jerenkrantz *) mod_ssl: Use anon shm in shmcb by default. http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/ssl/ssl_scache_shmcb.c?r1=1.23r2=1.24 PR: 21335 +1: jorton, minfrin, nd *) apachectl: Fix a problem finding envvars if sbindir != bindir. PR 30723. [Friedrich Haubensak hsk imb-jena.de] http://cvs.apache.org/viewcvs.cgi/httpd-2.0/support/apachectl.in?r1=1.22r2=1.23 +1: trawick, jorton *) suexec: Pass the SERVER_SIGNATURE envvar through to CGIs. http://cvs.apache.org/viewcvs.cgi/httpd-2.0/support/suexec.c?r1=1.32r2=1.33 +1: trawick, jorton, slive *) Proposal: Several folks want to aggressively backport changes from mod_cache, mod_mem_cache and mod_file_cache from Apache 2.1 back into the 2.0 tree. Proposal is this: Lets drop the '3 vote' backport rule for mod_cache, mod_mem_cache and mod_file cache (for xx days?). This is a very tightly scoped easing of a rule that has served us well and we can even put an expiration date on it if we like. I intentionally did not include all exerimental modules out of respect for folks working on ldap. stoddard: +1 jwoolley: +0.5 (if we're going to backport, I don't mind us doing so aggressively since these are experimental. but i'm also of the opinion that these should not be backported at all, but rather be the 'key feature' motivating a 2.2 release.) jerenkrantz: +0.5. What Cliff said. Plus, the changes aren't just scoped to mod_cache - there's a number of
[STATUS] (httpd-2.1) Wed Aug 18 23:45:15 EDT 2004
APACHE 2.1 STATUS: -*-text-*- Last modified at [$Date: 2004/04/27 22:09:17 $] Release [NOTE that only Alpha/Beta releases occur in 2.1 development]: 2.1.0 : in development Please consult the following STATUS files for information on related projects: * srclib/apr/STATUS * srclib/apr-util/STATUS * docs/STATUS Contributors looking for a mission: * Just do an egrep on TODO or XXX in the source. * Review the PatchAvailable bugs in the bug database. Append a comment saying Reviewed and tested. * Open bugs in the bug database. CURRENT RELEASE NOTES: * When the CVS-SVN is done, there's a bogus avendor branch that should be removed from most files. The branch was created 4/27/2004. It's safest (and easiest) for now just to leave it in there; the MAIN branch and the APACHE_2_0_BRANCH are untouched and unharmed. --jwoolley RELEASE SHOWSTOPPERS: * Handling of non-trailing / config by non-default handler is broken http://marc.theaimsgroup.com/?l=apache-httpd-devm=105451701628081w=2 * the edge connection filter cannot be removed http://marc.theaimsgroup.com/?l=apache-httpd-devm=105366252619530w=2 CURRENT VOTES: * Promote mod_cache from experimental to non-experimental status (keep issues noted below in EXPERIMENTAL MODULES as items to be addressed as a supported module). +1: jim, bnicholes -0: jerenkrantz -1: stoddard There are a couple of problems that need to be resolved before this module is moved out of experimental. 1) We need to at least review and comment on the RFC violations 2) Resolve issue of how to cache page fragements (or perhaps -if- we want to cache page fragements). Today, mod_cache/mod_mem_cache will cache #include 'virtual' requests (but not #include 'file' requests). This was accomplished by making CACHE_IN a CONTENT_SET-1 filter to force it to run before the SUBREQ_CORE filter. But now responses cannot be cached that include the effects of having been run through CONTENT_SET filters (mod_deflate, mod_expires, etc). We could rerun all the CONTENT_SET filters on the cached response, but this will not work in all cases. For example, mod_expires relies on installing the EXPIRATION filter during fixups. Contents served out of mod_cache (out of the quick_handler) bypass -all- the request line server hooks (Ryan really hated this. It is great for performance, but bad because of the complications listed above). jerenkrantz: There are a slew of RFC compliance bugs filed in Bugzilla for mod_cache (see 'RFC 2616 violations' below). I think fixing them is a pre-requisite before it isn't experimental. * httpd-std.conf and friends a) httpd-std.conf should be tailored by install (from src or binbuild) even if user has existing httpd.conf +1: trawick, slive, gregames, ianh, Ken, wrowe, jwoolley, jim, nd, erikabele wrowe - prefer httpd.default.conf to avoid ambiguity with cvs b) tailored httpd-std.conf should be copied by install to sysconfdir/examples -0: striker c) tailored httpd-std.conf should be installed to sysconfdir/examples or manualdir/exampleconf/ +1: slive, trawick, Ken, nd (prefer the latter), erikabele d) Installing a set of default config files when upgrading a server doesn't make ANY sense at all. +1: ianh - medium/big sites don't use 'standard config' anyway, as it usually needs major customizations -1: Ken, wrowe, jwoolley, jim, nd, erikabele wrowe - diff is wonderful when comparing old/new default configs, even for customized sites that ianh mentions jim - ... assuming that the default configs have been updated with the required inline docs to explain the changes * If the parent process dies, should the remaining child processes gracefully self-terminate. Or maybe we should make it a runtime option, or have a concept of 2 parent processes (one being a hot spare). See: Message-ID: [EMAIL PROTECTED] Self-destruct: Ken, Martin, Lars Not self-destruct: BrianP, Ian, Cliff, BillS Make it runtime configurable: Aaron, jim, Justin, wrowe, rederpj, nd /* The below was a concept on *how* to handle the problem */ Have 2 parents: +1: jim -1: Justin, wrowe, rederpj, nd +0: Lars, Martin (while standing by, could it do something useful?) * Make the worker MPM the default MPM for threaded Unix boxes. +1: Justin, Ian, Cliff, BillS, striker, wrowe, nd +0: BrianP, Aaron