Fwd: svn commit: r1238824 - in /httpd/httpd/branches/2.4.x: ./ CHANGES server/core.c
Original Message Subject:svn commit: r1238824 - in /httpd/httpd/branches/2.4.x: ./ CHANGES server/core.c Date: Tue, 31 Jan 2012 21:50:03 GMT From: s...@apache.org Author: sf Date: Tue Jan 31 21:50:03 2012 New Revision: 1238824 URL: http://svn.apache.org/viewvc?rev=1238824view=rev Log: Merge r1225199: Check during configtest that the directories for error logs exist PR: 29941 Don't we need to backport r1225223 as well? Regards Rüdiger
RE: svn commit: r1238824 - in /httpd/httpd/branches/2.4.x: ./ CHANGES server/core.c
Never mind. I just saw that it was done in r1238833. Regards Rüdiger -Original Message- From: Rüdiger Plüm [mailto:ruediger.pl...@vodafone.com] Sent: Mittwoch, 1. Februar 2012 09:43 To: dev@httpd.apache.org Subject: Fwd: svn commit: r1238824 - in /httpd/httpd/branches/2.4.x: ./ CHANGES server/core.c Original Message Subject: svn commit: r1238824 - in /httpd/httpd/branches/2.4.x: ./ CHANGES server/core.c Date: Tue, 31 Jan 2012 21:50:03 GMT From: s...@apache.org Author: sf Date: Tue Jan 31 21:50:03 2012 New Revision: 1238824 URL: http://svn.apache.org/viewvc?rev=1238824view=rev Log: Merge r1225199: Check during configtest that the directories for error logs exist PR: 29941 Don't we need to backport r1225223 as well? Regards Rüdiger
Re: [PATCH] trunk/2.4 core output filter is broken
On 31.01.2012 22:30, Stefan Fritsch wrote: On Tuesday 31 January 2012, Gregg Smith wrote: On 1/29/2012 11:53 AM, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more isolated, rather than the current impl which is intrusive (which is part of what we're trying to avoid, aren't we?) OK, patch is attached. This needs review/testing for Windows. Patched trunk at r1237447, saw same after patching 2.4-HEAD so I tried trunk. Regards, Gregg Compiling... service.c .\server\mpm\winnt\service.c(38) : error C2370: 'mpm_winnt_module' : redefinition; different storage class c:\build3\httpd-head_r1237447\server\mpm\winnt\mpm_winnt.h(70) : see declaration of 'mpm_winnt_module' Oops. Please try this in addition. Thanks for the testing. No info about Windows, but: I applied the patches on trunk and ran the test suite against a reallyall build on Solaris 10. No test failures. Regards, Rainer
Re: 2.4.1….??
On Jan 31, 2012, at 5:04 PM, Stefan Fritsch wrote: r1233882 should probably be backported, too, but is unrelated. I agree with the above... This resolves an issue I observed.
APR_POOL_DEBUG
Hi, I have just compiled apr 1.4.5 with -DAPR_POOL_DEBUG=0x1f and --enable-threads. Is this a valid configuration? Is it supposed to survive make check? make check first calls ./testlockperf which succeeds. Then comes ./testmutexscope which fails. Called manually it says: POOL DEBUG: [PID/TID] ACTION (SIZE /POOL SIZE /TOTAL SIZE) POOL TAG __FILE__:__LINE__ (ALLOCS/TOTAL ALLOCS/CLEARS) POOL DEBUG: [9305/140618473854784] GLOBAL 0x604010 memory/unix/apr_pools.c:apr_pool_initialize POOL DEBUG: [9305/140618473854784] CREATE ( 0/ 0/ 200) 0x6045c0 misc/unix/start.c:58 misc/unix/start.c:58 (0/0/0) Trying proc mutexes with mechanism `default'... POOL DEBUG: [9305/140618473854784] CREATE ( 0/ 0/ 200) 0x604660 testmutexscope.c:116 testmutexscope.c:116 (0/0/0) POOL DEBUG: [9305/140618473854784] PCALLOC (48/48/ 248) 0x604660 testmutexscope.c:116 locks/unix/thread_mutex.c:50 (1/1/0) POOL DEBUG: [9305/140618473854784] PALLOC (80/80/ 280) 0x604660 testmutexscope.c:116 memory/unix/apr_pools.c:2212 (2/2/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 144/ 144/ 344) 0x604660 testmutexscope.c:116 locks/unix/proc_mutex.c:887 (3/3/0) POOL DEBUG: [9305/140618473854784] PALLOC ( 264/ 264/ 464) 0x604660 testmutexscope.c:116 locks/unix/proc_mutex.c:228 (4/4/0) POOL DEBUG: [9305/140618473854784] PALLOC ( 296/ 296/ 496) 0x604660 testmutexscope.c:116 memory/unix/apr_pools.c:2212 (5/5/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 336/ 336/ 536) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:154 (6/6/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 344/ 344/ 544) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:160 (7/7/0) POOL DEBUG: [9305/140618473854784] CREATE ( 0/ 0/ 544) 0x604ce0 threadproc/unix/thread.c:174 threadproc/unix/thread.c:174 (0/0/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 384/ 384/ 584) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:154 (8/8/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 392/ 392/ 592) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:160 (9/9/0) POOL DEBUG: [9305/140618473854784] CREATE ( 0/ 0/ 592) 0x604f00 threadproc/unix/thread.c:174 threadproc/unix/thread.c:174 (0/0/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 432/ 432/ 632) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:154 (10/10/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 440/ 440/ 640) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:160 (11/11/0) POOL DEBUG: [9305/140618473854784] CREATE ( 0/ 0/ 640) 0x605120 threadproc/unix/thread.c:174 threadproc/unix/thread.c:174 (0/0/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 480/ 480/ 680) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:154 (12/12/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 488/ 488/ 688) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:160 (13/13/0) POOL DEBUG: [9305/140618473854784] CREATE ( 0/ 0/ 688) 0x605340 threadproc/unix/thread.c:174 threadproc/unix/thread.c:174 (0/0/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 528/ 528/ 728) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:154 (14/14/0) POOL DEBUG: [9305/140618473854784] PCALLOC ( 536/ 536/ 736) 0x604660 testmutexscope.c:116 threadproc/unix/thread.c:160 (15/15/0) POOL DEBUG: [9305/140618473854784] CREATE ( 0/ 0/ 736) 0x605560 threadproc/unix/thread.c:174 threadproc/unix/thread.c:174 (0/0/0) Mutex mechanism `default' is global in scope on this platform. POOL DEBUG: [9305/140618454791936] THREAD 0x604ce0 memory/unix/apr_pools.c:apr_pool_integrity check POOL DEBUG: [9305/140618421221120] THREAD 0x605560 memory/unix/apr_pools.c:apr_pool_integrity check POOL DEBUG: [9305/140618438006528] THREAD 0x605120 memory/unix/apr_pools.c:apr_pool_integrity check POOL DEBUG: [9305/140618429613824] THREAD 0x605340 memory/unix/apr_pools.c:apr_pool_integrity check POOL DEBUG: [9305/140618446399232] THREAD 0x604f00 memory/unix/apr_pools.c:apr_pool_integrity check Aborted Torsten Förtsch -- Need professional modperl support? Hire me! (http://foertsch.name) Like fantasy? http://kabatinte.net
WebDAV and ACL (RFC3744), status?
Good evening. Where can I find out if httpd/mod_dav has support for ACL's? After digging in the mailinglist, there seem to have been some activity about the topic in 2007 and 2009 but no patches seem to be applied. I checked today on 2.3beta, there is no --enable-dav-acl option yet (unless enabled by default?). I could not find any bugzilla issue tracking the patches either, so now I ask here as a last resort if anyone knows status on it. :) Regards -- Andreas ... Mental backup in progress - Do Not Disturb!
Re: WebDAV and ACL (RFC3744), status?
I had started breaking up the patches from mod_dav_acl into smaller chunks and getting them imported into the trunk. My goal was to get a mod_dav_acl like module added. I say like because mod_dav_acl currently requires xfs and stores the auth information in the xfs attributes and I wanted to create a more authn type module. Something that could have a flat file, dbm, dbd, etc type plugins. After mod_dav_acl was done I wanted to get mod_caldav and mod_cardav imported as well, but free time dried up and I never finished. Brian On Feb 1, 2012, at 10:38 AM, Andreas wrote: Good evening. Where can I find out if httpd/mod_dav has support for ACL's? After digging in the mailinglist, there seem to have been some activity about the topic in 2007 and 2009 but no patches seem to be applied. I checked today on 2.3beta, there is no --enable-dav-acl option yet (unless enabled by default?). I could not find any bugzilla issue tracking the patches either, so now I ask here as a last resort if anyone knows status on it. :) Regards -- Andreas ... Mental backup in progress - Do Not Disturb!
Re: WebDAV and ACL (RFC3744), status?
On 01 Feb 2012, at 5:38 PM, Andreas wrote: Where can I find out if httpd/mod_dav has support for ACL's? After digging in the mailinglist, there seem to have been some activity about the topic in 2007 and 2009 but no patches seem to be applied. I checked today on 2.3beta, there is no --enable-dav-acl option yet (unless enabled by default?). I could not find any bugzilla issue tracking the patches either, so now I ask here as a last resort if anyone knows status on it. :) There is an externally maintained module at http://sourceforge.net/projects/moddavacl/ that does this, which in the past required some patches to httpd in order to work. The effort you saw was an attempt to get these patches into httpd proper, so the module could be used as is unmodified without patching httpd. Not sure at this point whether moddavacl has yet been ported to httpd v2.4, you would have to ask that project to confirm. Regards, Graham -- smime.p7s Description: S/MIME cryptographic signature
Re: [PATCH] trunk/2.4 core output filter is broken
On 1/31/2012 1:30 PM, Stefan Fritsch wrote: On Tuesday 31 January 2012, Gregg Smith wrote: On 1/29/2012 11:53 AM, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more isolated, rather than the current impl which is intrusive (which is part of what we're trying to avoid, aren't we?) OK, patch is attached. This needs review/testing for Windows. Patched trunk at r1237447, saw same after patching 2.4-HEAD so I tried trunk. Regards, Gregg Compiling... service.c .\server\mpm\winnt\service.c(38) : error C2370: 'mpm_winnt_module' : redefinition; different storage class c:\build3\httpd-head_r1237447\server\mpm\winnt\mpm_winnt.h(70) : see declaration of 'mpm_winnt_module' Oops. Please try this in addition. Thanks for the testing. --- a/server/mpm/winnt/mpm_winnt.h +++ b/server/mpm/winnt/mpm_winnt.h @@ -67,7 +67,7 @@ void mpm_nt_eventlog_stderr_flush(void); /* From mpm_winnt.c: */ -extern module mpm_winnt_module; +extern module AP_MODULE_DECLARE_DATA mpm_winnt_module; extern int ap_threads_per_child; extern DWORD my_pid; Getting closer Linking... Creating library .\Release/libhttpd.lib and object .\Release/libhttpd.exp mpm_winnt.obj : error LNK2019: unresolved external symbol _winnt_insert_network_bucket referenced in function _winnt_hooks I don't quite get this error though.
Re: WebDAV and ACL (RFC3744), status?
Yeah: mod_dav itself has no direct support for ACLs. Way back when, when I wrote mod_dav and was working on DAV stuff in general, the ACL stuff created an interesting problem: how to propagate access control changes to all the httpd processes. If the processes do not contain the ACLs, then the implication is a query on each(!) request. That made me a bit uncomfortable, and I never pursued it much further. It may be fair to say that servers today (compared to a decade ago, when I worked on this stuff) are highly overpowered relative to the network bandwidth, and this kind of dynamic ACL query is not a problem any more. Cheers, -g On Wed, Feb 1, 2012 at 10:53, Brian J. France br...@brianfrance.com wrote: I had started breaking up the patches from mod_dav_acl into smaller chunks and getting them imported into the trunk. My goal was to get a mod_dav_acl like module added. I say like because mod_dav_acl currently requires xfs and stores the auth information in the xfs attributes and I wanted to create a more authn type module. Something that could have a flat file, dbm, dbd, etc type plugins. After mod_dav_acl was done I wanted to get mod_caldav and mod_cardav imported as well, but free time dried up and I never finished. Brian On Feb 1, 2012, at 10:38 AM, Andreas wrote: Good evening. Where can I find out if httpd/mod_dav has support for ACL's? After digging in the mailinglist, there seem to have been some activity about the topic in 2007 and 2009 but no patches seem to be applied. I checked today on 2.3beta, there is no --enable-dav-acl option yet (unless enabled by default?). I could not find any bugzilla issue tracking the patches either, so now I ask here as a last resort if anyone knows status on it. :) Regards -- Andreas ... Mental backup in progress - Do Not Disturb!
Re: svn commit: r1239151 - /httpd/httpd/branches/1.3.x/STATUS
I don't have that checked out. Record +1's from me. On 2/1/2012 8:41 AM, traw...@apache.org wrote: Author: trawick Date: Wed Feb 1 14:41:59 2012 New Revision: 1239151 URL: http://svn.apache.org/viewvc?rev=1239151view=rev Log: wrowe seemed interested in publishing patches, and the current text for CVE-2011-3368 implies that a patch will be made available any other interested parties? Modified: httpd/httpd/branches/1.3.x/STATUS Modified: httpd/httpd/branches/1.3.x/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/branches/1.3.x/STATUS?rev=1239151r1=1239150r2=1239151view=diff == --- httpd/httpd/branches/1.3.x/STATUS (original) +++ httpd/httpd/branches/1.3.x/STATUS Wed Feb 1 14:41:59 2012 @@ -59,6 +59,19 @@ Release: ** THIS BRANCH IS CLOSED TO DEVELOPMENT AND MAINTENANCE ** +POST-RETIREMENT SECURITY PATCHES: + + (for distribution in the official patches directory) + + *) CVE-2011-3368/CVE-2011-4317 + http://people.apache.org/~trawick/1.3-CVE-2011-4317-r1235443.patch + +1: trawick + + *) CVE-2012-0053 + http://people.apache.org/~trawick/1.3-CVE-2012-0053-r1234837.patch + +1: trawick + trawick: I'll update the security doc once I get an idea of whether + or not a patch will be made available. UNADDRESSED ISSUES:
Re: [PATCH] trunk/2.4 core output filter is broken
On Wednesday 01 February 2012, Gregg Smith wrote: Getting closer Linking... Creating library .\Release/libhttpd.lib and object .\Release/libhttpd.exp mpm_winnt.obj : error LNK2019: unresolved external symbol _winnt_insert_network_bucket referenced in function _winnt_hooks I don't quite get this error though. Having a Windows compiler myself would really help :-/ Try removing the static: --- a/server/mpm/winnt/child.c +++ b/server/mpm/winnt/child.c @@ -736,9 +736,9 @@ static winnt_conn_ctx_t *winnt_get_connection(winnt_conn_ctx_t *context) return context; } -static apr_status_t winnt_insert_network_bucket(conn_rec *c, -apr_bucket_brigade *bb, -apr_socket_t *socket) +apr_status_t winnt_insert_network_bucket(conn_rec *c, + apr_bucket_brigade *bb, + apr_socket_t *socket) { apr_bucket *e; winnt_conn_ctx_t *context = ap_get_module_config(c-conn_config,
Re: svn commit: r1239336 - /httpd/httpd/branches/1.3.x/STATUS
Actually, I did find two of them, but when I had replied, I hadn't gone digging, and wanted to make it easy for someone, anyone to also vote for these patches without returning to STATUS. Since 1.3 branch is closed, shouldn't the STATUS file also be closed? Just don't want anyone to see 'last updated' on that tree and assume it was still alive for any purpose whatsoever. Just my 2c On 2/1/2012 3:40 PM, traw...@apache.org wrote: Author: trawick Date: Wed Feb 1 21:40:58 2012 New Revision: 1239336 URL: http://svn.apache.org/viewvc?rev=1239336view=rev Log: gee, some people don't even have a checkout of 1.3.x Modified: httpd/httpd/branches/1.3.x/STATUS Modified: httpd/httpd/branches/1.3.x/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/branches/1.3.x/STATUS?rev=1239336r1=1239335r2=1239336view=diff == --- httpd/httpd/branches/1.3.x/STATUS (original) +++ httpd/httpd/branches/1.3.x/STATUS Wed Feb 1 21:40:58 2012 @@ -65,11 +65,11 @@ POST-RETIREMENT SECURITY PATCHES: *) CVE-2011-3368/CVE-2011-4317 http://people.apache.org/~trawick/1.3-CVE-2011-4317-r1235443.patch - +1: trawick + +1: trawick, wrowe *) CVE-2012-0053 http://people.apache.org/~trawick/1.3-CVE-2012-0053-r1234837.patch - +1: trawick + +1: trawick, wrowe trawick: I'll update the security doc once I get an idea of whether or not a patch will be made available.
Re: svn commit: r1239336 - /httpd/httpd/branches/1.3.x/STATUS
On Wed, Feb 1, 2012 at 4:52 PM, William A. Rowe Jr. wr...@rowe-clan.net wrote: Actually, I did find two of them, but when I had replied, I hadn't gone digging, and wanted to make it easy for someone, anyone to also vote for these patches without returning to STATUS. sorry for my lame commit message; no complaint/insult/whatever intended ;) Since 1.3 branch is closed, shouldn't the STATUS file also be closed? Just don't want anyone to see 'last updated' on that tree and assume it was still alive for any purpose whatsoever. Just my 2c I started to fret about that but decided not to worry about modifying this bit of release metadata given the context -- discussion of some specific support for 1.3 and recent updates to the 1.3 security document stating that a patch would be available. On 2/1/2012 3:40 PM, traw...@apache.org wrote: Author: trawick Date: Wed Feb 1 21:40:58 2012 New Revision: 1239336 URL: http://svn.apache.org/viewvc?rev=1239336view=rev Log: gee, some people don't even have a checkout of 1.3.x Modified: httpd/httpd/branches/1.3.x/STATUS Modified: httpd/httpd/branches/1.3.x/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/branches/1.3.x/STATUS?rev=1239336r1=1239335r2=1239336view=diff == --- httpd/httpd/branches/1.3.x/STATUS (original) +++ httpd/httpd/branches/1.3.x/STATUS Wed Feb 1 21:40:58 2012 @@ -65,11 +65,11 @@ POST-RETIREMENT SECURITY PATCHES: *) CVE-2011-3368/CVE-2011-4317 http://people.apache.org/~trawick/1.3-CVE-2011-4317-r1235443.patch - +1: trawick + +1: trawick, wrowe *) CVE-2012-0053 http://people.apache.org/~trawick/1.3-CVE-2012-0053-r1234837.patch - +1: trawick + +1: trawick, wrowe trawick: I'll update the security doc once I get an idea of whether or not a patch will be made available. -- Born in Roswell... married an alien...
Re: test message: still not received a message from the list
That is the idea I believe. My first submission (also to dev@ as I still do not see packagers@) a tar file with buildaix.ksh (to do the build), aixproto.ksh (to create a very simple AIX template and create an installable image, and lastly, an example of a new layout for AIX (which I used for this packaging). On Wed, Feb 1, 2012 at 7:51 PM, Rich Bowen rbo...@rcbowen.com wrote: I, for one, wish that the packagers@ list was more active. I think it would solve many problems of inter-platform differences. And, after all, I started the list myself for that reason. But, alas, the list has gotten no traction at all, although I've personally invited a large number of package managers. Welcome, and perhaps we can start a conversation! :) On Feb 1, 2012, at 2:32 PM, Michael Felt wrote: William Rowe suggested it, that I discuss a layout for AIX here, rather than in dev. He is looking into it. At least I know for sure that I am not mistyping the email address. Thanks for the reply, Michael On Wed, Feb 1, 2012 at 6:16 PM, Rich Bowen rbo...@rcbowen.com wrote: I have received all three of your messages, but I'm not sure what, exactly, you're testing. This list is mostly dead. On Feb 1, 2012, at 1:08 PM, Michael Felt wrote: testing after 20+ hours -- Rich Bowen rbo...@rcbowen.com :: @rbowen rbo...@apache.org -- Rich Bowen rbo...@rcbowen.com :: @rbowen rbo...@apache.org aixpkg.tar Description: Unix tar archive
Re: test message: still not received a message from the list
should have changed the subject, i.e. started over - but probably have all see the other posts anyway ;) On Wed, Feb 1, 2012 at 10:40 PM, Michael Felt mamf...@gmail.com wrote: That is the idea I believe. My first submission (also to dev@ as I still do not see packagers@) a tar file with buildaix.ksh (to do the build), aixproto.ksh (to create a very simple AIX template and create an installable image, and lastly, an example of a new layout for AIX (which I used for this packaging). On Wed, Feb 1, 2012 at 7:51 PM, Rich Bowen rbo...@rcbowen.com wrote: I, for one, wish that the packagers@ list was more active. I think it would solve many problems of inter-platform differences. And, after all, I started the list myself for that reason. But, alas, the list has gotten no traction at all, although I've personally invited a large number of package managers. Welcome, and perhaps we can start a conversation! :) On Feb 1, 2012, at 2:32 PM, Michael Felt wrote: William Rowe suggested it, that I discuss a layout for AIX here, rather than in dev. He is looking into it. At least I know for sure that I am not mistyping the email address. Thanks for the reply, Michael On Wed, Feb 1, 2012 at 6:16 PM, Rich Bowen rbo...@rcbowen.com wrote: I have received all three of your messages, but I'm not sure what, exactly, you're testing. This list is mostly dead. On Feb 1, 2012, at 1:08 PM, Michael Felt wrote: testing after 20+ hours -- Rich Bowen rbo...@rcbowen.com :: @rbowen rbo...@apache.org -- Rich Bowen rbo...@rcbowen.com :: @rbowen rbo...@apache.org