Re: Memory Pool

2010-10-12 Thread Martin Townsend
On 11/10/2010 20:48, Nick Kew wrote: On Mon, 11 Oct 2010 15:14:02 +0100 Martin Townsendmartin.towns...@power-oasis.com wrote: Hi, I have created a pool from the child pool for storing warning messages that can live across requests, the final request will insert the warnings into the

Re: Memory Pool

2010-10-12 Thread Ben Noordhuis
Martin, if you are working in a constrained environment, then you are probably better off using something like libmicrohttpd[1] or libevent's evhttp interface[2]. Apache has a rather heavy resource footprint. [1] http://www.gnu.org/software/libmicrohttpd/ [2]

Re: svn commit: r1021546 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/mod_cache.xml include/ap_mmn.h modules/cache/cache_util.h modules/cache/mod_cache.c modules/cache/mod_cache.h modules/cache/mo

2010-10-12 Thread Ruediger Pluem
On 10/12/2010 01:32 AM, minf...@apache.org wrote: Author: minfrin Date: Mon Oct 11 23:32:56 2010 New Revision: 1021546 URL: http://svn.apache.org/viewvc?rev=1021546view=rev Log: mod_cache: Optionally serve stale data when a revalidation returns a 5xx response, controlled by the

Re: svn commit: r1021546 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/mod_cache.xml include/ap_mmn.h modules/cache/cache_util.h modules/cache/mod_cache.c modules/cache/mod_cache.h modules/cache/mo

2010-10-12 Thread Graham Leggett
On 12 Oct 2010, at 8:16 AM, Ruediger Pluem wrote: Modified: httpd/httpd/trunk/modules/cache/mod_disk_cache.c URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/mod_disk_cache.c?rev=1021546r1=1021545r2=1021546view=diff = = = = = = = = =

Re: Planning some tags, and more tags

2010-10-12 Thread Rainer Jung
On 11.10.2010 20:35, William A. Rowe Jr. wrote: ... and tagged 0.9. Note 0.9 -util tag already failed on Darwin and we are holding 2.0 tag for a bundled expat for -util fix. There are four backport bullets in 2.0 STATUS with two signoffs already, if anyone has eyeballs to invest between now

[PATCH] mod_cgi: Mitigating some header injections by dropping invalid headers?

2010-10-12 Thread Malte S. Stretz
Hi folks, a few days ago on a bored afternoon thumbed through the Unusual Web Bugs presentation [1] from 24C3. On slide 19/20 the author shows a way to inject otherwise filtered headers from Flash into CGI scripts. This is caused by sloppy filtering on the client side and the simple

Re: [PATCH] mod_cgi: Mitigating some header injections by dropping invalid headers?

2010-10-12 Thread Dirk-Willem van Gulik
On 12 Oct 2010, at 15:30, Malte S. Stretz wrote: I had a quick look at the Apache source and the solution was simple: Just drop headers which contain any character outside the range [a-zA-Z0-9-]. The patch against trunk is attached. This made me think of something we had a while ago; and

Problem with building httpd without /dev/random, link of htpasswd fails: ERROR: Undefined symbol: .apr_generate_random_bytes

2010-10-12 Thread Michael Felt
Error message during make all in support: ld: 0711-317 ERROR: Undefined symbol: .apr_generate_random_bytes .apr_generate_random_bytes [46]ER PR htpasswd.c(.libs/htpasswd.o) 001c .textR_RBR[521] .seed_rand Using gcc on AIX 4.3.3 with following

Re: [PATCH] mod_cgi: Mitigating some header injections by dropping invalid headers?

2010-10-12 Thread William A. Rowe Jr.
On 10/12/2010 10:06 AM, Dirk-Willem van Gulik wrote: On 12 Oct 2010, at 15:30, Malte S. Stretz wrote: I had a quick look at the Apache source and the solution was simple: Just drop headers which contain any character outside the range [a-zA-Z0-9-]. The patch against trunk is attached.

Re: Problem with building httpd without /dev/random, link of htpasswd fails: ERROR: Undefined symbol: .apr_generate_random_bytes

2010-10-12 Thread William A. Rowe Jr.
On 10/12/2010 10:47 AM, Michael Felt wrote: I have the disable of auth_digest because configue complained that it could not complete without /dev/random or egb installed. I prefer not to install egb. Suggestions for how I can 'neatly' satisfy htpasswd need for

Re: Problem with building httpd without /dev/random, link of htpasswd fails: ERROR: Undefined symbol: .apr_generate_random_bytes

2010-10-12 Thread Michael Felt
i wonder how i did this before on AIX before it had /dev/random. Ok. I'll look for egb then, or something similar. Thanks. On Tue, Oct 12, 2010 at 6:15 PM, William A. Rowe Jr. wr...@rowe-clan.netwrote: On 10/12/2010 10:47 AM, Michael Felt wrote: I have the disable of auth_digest because

Re: Problem with building httpd without /dev/random, link of htpasswd fails: ERROR: Undefined symbol: .apr_generate_random_bytes

2010-10-12 Thread Igor Galić
- Michael Felt mamf...@gmail.com wrote: Error message during make all in support: ld: 0711-317 ERROR: Undefined symbol: .apr_generate_random_bytes .apr_generate_random_bytes [46] ER PR htpasswd.c(.libs/htpasswd.o) 001c .text R_RBR [521] .seed_rand Using gcc on AIX 4.3.3 with

Re: Problem with building httpd without /dev/random, link of htpasswd fails: ERROR: Undefined symbol: .apr_generate_random_bytes

2010-10-12 Thread Michael Felt
That's right, and still being used. Amazing how fast it boots, even on old hardware. Compiling, however, takes it's time :) Using gcc on AIX 4.3.3 with following configure command: According to: http://en.wikipedia.org/wiki/AIX#Versions AIX 4.3.3 is 11 years old now. -- Igor Galić

Re: [PATCH] mod_cgi: Mitigating some header injections by dropping invalid headers?

2010-10-12 Thread Malte S. Stretz
On Tuesday 12 October 2010 18:13:46 William A. Rowe Jr. wrote: On 10/12/2010 10:06 AM, Dirk-Willem van Gulik wrote: On 12 Oct 2010, at 15:30, Malte S. Stretz wrote: I had a quick look at the Apache source and the solution was simple: Just drop headers which contain any character outside

Re: logging patch bug

2010-10-12 Thread Stefan Fritsch
On Monday 11 October 2010, William A. Rowe Jr. wrote: Why were ap_errorlog_format_item-min_loglevel and ap_errorlog_info-level declared with two different types? ap_errorlog_info-level is -1 if no log level is available, i.e. when logging per-request/per-conn info. However,

Re: svn commit: r1000814 - in /httpd/httpd/trunk: CHANGES server/mpm/event/event.c

2010-10-12 Thread Jeff Trawick
On Fri, Sep 24, 2010 at 7:25 AM, traw...@apache.org wrote: Author: trawick Date: Fri Sep 24 11:25:25 2010 New Revision: 1000814 URL: http://svn.apache.org/viewvc?rev=1000814view=rev Log: Fix crash accessing pollset on worker thread when child process is exiting. The timeout mutex and

Re: svn commit: r1021924 - in /httpd/httpd/trunk: ./ docs/conf/extra/ docs/manual/ docs/manual/misc/ docs/manual/mod/ docs/manual/platform/ server/ server/mpm/event/ server/mpm/winnt/ server/mpm/worke

2010-10-12 Thread William A. Rowe Jr.
On 10/12/2010 4:12 PM, s...@apache.org wrote: URL: http://svn.apache.org/viewvc?rev=1021924view=rev Log: Rename MaxRequestsPerChild to MaxConnectionsPerChild, which describes more accurately what the directive does. Doesn't this actually mean MaxConnectionsPerWorker?

Re: svn commit: r1021924 - in /httpd/httpd/trunk: ./ docs/conf/extra/ docs/manual/ docs/manual/misc/ docs/manual/mod/ docs/manual/platform/ server/ server/mpm/event/ server/mpm/winnt/ server/mpm/worke

2010-10-12 Thread William A. Rowe Jr.
On 10/12/2010 4:55 PM, William A. Rowe Jr. wrote: On 10/12/2010 4:12 PM, s...@apache.org wrote: URL: http://svn.apache.org/viewvc?rev=1021924view=rev Log: Rename MaxRequestsPerChild to MaxConnectionsPerChild, which describes more accurately what the directive does. Doesn't this actually

Re: svn commit: r1000814 - in /httpd/httpd/trunk: CHANGES server/mpm/event/event.c

2010-10-12 Thread William A. Rowe Jr.
On 10/12/2010 4:22 PM, Jeff Trawick wrote: Someone mentioned using 2.2 event in production on the list,today or yesterday, so I peeked at 2.2 and this bug appears to affect it. Any interest out there in seeing what it takes to backport? (away from working env until tonight; dunno when