strange behaviour using mod_proxy when the r-filename partially overlaps the requested uri

2012-08-21 Thread nik600
Dear all i've got a strange behaviour in my custom module: it seems that if the set filename overlaps the requested uri ths final uri passed to mod_proxy is wrong, or has some added strange characters. some information: * the module is activated only when the requested uri contains the string

Re: strange behaviour using mod_proxy when the r-filename partially overlaps the requested uri

2012-08-21 Thread nik600
2012/8/21 Sorin Manolache sor...@gmail.com: On 2012-08-21 13:39, nik600 wrote: Replace with apr_pcalloc(r-pool, strlen(newurl) + 1); in order to allocate space for the closing '\0'. Oh, i'm stupid...thanks -- /*/ nik600 http://www.kumbe.it

Re: svn commit: r1365001 - in /httpd/httpd/trunk: CHANGES include/ap_mmn.h modules/proxy/mod_proxy.h modules/proxy/mod_proxy_connect.c modules/proxy/mod_proxy_ftp.c modules/proxy/proxy_util.c

2012-08-21 Thread Joe Orton
On Mon, Aug 20, 2012 at 10:38:14AM +0200, Guenter Knauf wrote: Hi Joe, your commit is missing a log number ... mod_proxy_connect.c .\mod_proxy_connect.c(257) : warning C4003: not enough actual parameters for macro 'APLOGNO' Damn, sorry about that Guenter, does this break the build for you?

Re: svn commit: r1365001 - in /httpd/httpd/trunk: CHANGES include/ap_mmn.h modules/proxy/mod_proxy.h modules/proxy/mod_proxy_connect.c modules/proxy/mod_proxy_ftp.c modules/proxy/proxy_util.c

2012-08-21 Thread Guenter Knauf
Hi Joe, Am 21.08.2012 09:32, schrieb Joe Orton: On Mon, Aug 20, 2012 at 10:38:14AM +0200, Guenter Knauf wrote: your commit is missing a log number ... mod_proxy_connect.c .\mod_proxy_connect.c(257) : warning C4003: not enough actual parameters for macro 'APLOGNO' Damn, sorry about that

Re: svn commit: r1374214 - in /httpd/httpd/trunk: CHANGES modules/ssl/ssl_engine_init.c

2012-08-21 Thread Joe Orton
On Sat, Aug 18, 2012 at 09:00:00AM +0200, Kaspar Brand wrote: On 17.8.12 13:59, jor...@apache.org wrote: @@ -1412,6 +1421,8 @@ static void ssl_init_proxy_certs(server_ ssl_die(s); } +/* ### Why is all the following done? Why is it necessary or + * useful for

[ANNOUNCEMENT] Apache HTTP Server 2.4.3 Released

2012-08-21 Thread Jim Jagielski
Apache HTTP Server 2.4.3 Released The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.4.3 of the Apache HTTP Server (Apache). This version of Apache is our 3rd GA release of the new generation 2.4.x branch of

Re: strange behaviour using mod_proxy when the r-filename partially overlaps the requested uri

2012-08-21 Thread Sorin Manolache
On 2012-08-21 13:39, nik600 wrote: static int kcache_handler_translate(request_rec* r) { if (r-method_number != M_GET r-method_number != M_POST){ return HTTP_METHOD_NOT_ALLOWED; } if( strstr(r-unparsed_uri, /files/anteprima)==NULL){

A possible bug found // RE: svn commit: r783 - /release/httpd/

2012-08-21 Thread PKU-bswen
A possible subtle bug with httpd-2.4.3 on Windows (Server 2008 R2) was found in the following source file, which was compiled using VS2010: httpd-2.4.3/server/config.c // line 602: ap_module_short_names[m-module_index] = strdup(sym_name); // line 680:

Re: A possible bug found // RE: svn commit: r783 - /release/httpd/

2012-08-21 Thread Eric Covener
I don't think a source code change should be required. http://msdn.microsoft.com/en-US/library/we1whae7(v=vs.80) When the application is linked with a debug version of the C run-time libraries, free resolves to _free_dbg. For more information about how the heap is managed during the debugging

RE: A possible bug found // RE: svn commit: r783 - /release/httpd/

2012-08-21 Thread PKU-bswen
The cited documentation seems to apply only to Windows Server 2003? As I've tested, free() didn't seem to resolve to _free_dbg on Windows Server 2008 + VS2010, or on Windows Server 2012 + VS2012. The installed httpd-2.4.3 binaries just can not run if the code is not changed. So please verify why

Re: A possible bug found // RE: svn commit: r783 - /release/httpd/

2012-08-21 Thread Rainer Jung
On 21.08.2012 16:22, PKU-bswen wrote: The cited documentation seems to apply only to Windows Server 2003? Unfortunately I can't easily check myself, but the documentation states the automatic chosing of the debug variants also for VS 2012: http://msdn.microsoft.com/en-us/library/z8h19c37

Re: A possible bug found // RE: svn commit: r783 - /release/httpd/

2012-08-21 Thread Eric Covener
On Tue, Aug 21, 2012 at 10:50 AM, Rainer Jung rainer.j...@kippdata.de wrote: On 21.08.2012 16:22, PKU-bswen wrote: The cited documentation seems to apply only to Windows Server 2003? Unfortunately I can't easily check myself, but the documentation states the automatic chosing of the debug

Updating 2.4 security page

2012-08-21 Thread Rainer Jung
Now that 2.4.3 is released and annouced I'm in the process of updating the security page (the xml file with the known vulnerabilities) to include the two issues that are in CHANGES. The XSS mod_negotitation issues I think is clearly of severity level 4 (low), but I'm a bit uncertain about the

Bugzilla version 2.4.3 added to Apache httpd-2

2012-08-21 Thread Rainer Jung
See subject.

Re: Updating 2.4 security page

2012-08-21 Thread Jeff Trawick
On Tue, Aug 21, 2012 at 11:30 AM, Rainer Jung rainer.j...@kippdata.de wrote: Now that 2.4.3 is released and annouced I'm in the process of updating the security page (the xml file with the known vulnerabilities) to include the two issues that are in CHANGES. The XSS mod_negotitation issues I

RE: Updating 2.4 security page

2012-08-21 Thread Plüm , Rüdiger , Vodafone Group
-Original Message- From: Jeff Trawick [mailto:] Sent: Dienstag, 21. August 2012 17:37 To: dev@httpd.apache.org Subject: Re: Updating 2.4 security page On Tue, Aug 21, 2012 at 11:30 AM, Rainer Jung wrote: Now that 2.4.3 is released and annouced I'm in the process of updating

Re: svn commit: r1362538 - in /httpd/httpd/trunk: CHANGES server/util_script.c

2012-08-21 Thread Chris Darroch
Jeff Trawick wrote: what about limiting the number of characters logged and potentially sent to the client via error-notes? (%.120s anyone?) Sounds good to me ... are there any debug/trace log which truncate output in a similar way that could serve as best practices examples? I fished

Re: Updating 2.4 security page

2012-08-21 Thread Rainer Jung
Done. On 21.08.2012 17:41, Plüm, Rüdiger, Vodafone Group wrote: -Original Message- From: Jeff Trawick [mailto:] Sent: Dienstag, 21. August 2012 17:37 To: dev@httpd.apache.org Subject: Re: Updating 2.4 security page On Tue, Aug 21, 2012 at 11:30 AM, Rainer Jung wrote: Now that 2.4.3

Re: [ANNOUNCEMENT] Apache HTTP Server 2.4.3 Released

2012-08-21 Thread Christophe JAILLET
Hi, I just noted that http://httpd.apache.org/download.cgi#apache24 has been updated, but *not* the main page (http://httpd.apache.org) Best regards. Le 21/08/2012 13:55, Jim Jagielski a écrit : Apache HTTP Server 2.4.3 Released

Re: [ANNOUNCEMENT] Apache HTTP Server 2.4.3 Released

2012-08-21 Thread Christophe JAILLET
Le 21/08/2012 20:40, Christophe JAILLET a écrit : Hi, I just noted that http://httpd.apache.org/download.cgi#apache24 has been updated, but *not* the main page (http://httpd.apache.org) Best regards. Le 21/08/2012 13:55, Jim Jagielski a écrit : Apache HTTP Server 2.4.3

Re: [ANNOUNCEMENT] Apache HTTP Server 2.4.3 Released

2012-08-21 Thread Tim Bannister
On 21 Aug 2012, Jim Jagielski wrote: NOTE to Windows users: The issues with AcceptFilter None replacing Win32DisableAcceptEx appears to have resolved starting with version 2.4.3 make Apache httpd 2.4.x suitable for Windows servers. I know what this means, but the grammar doesn't seem very

Re: [ANNOUNCEMENT] Apache HTTP Server 2.4.3 Released

2012-08-21 Thread Jeff Trawick
On Tue, Aug 21, 2012 at 3:14 PM, Tim Bannister is...@jellybaby.net wrote: On 21 Aug 2012, Jim Jagielski wrote: NOTE to Windows users: The issues with AcceptFilter None replacing Win32DisableAcceptEx appears to have resolved starting with version 2.4.3 make Apache httpd 2.4.x suitable for

[Vote] httpd 2.2.23 release

2012-08-21 Thread William A. Rowe Jr.
Candidate binaries are available from http://httpd.apache.org/dev/dist/ - these do not yet constitute ASF releases. Win32 specific artifacts (x86 binary distribution and -win32-src.zip) will follow sometime later this evening. Feedback and edits to the draft announcement are greatly appreciated,

Limitations of mod_dbd - single server per vhost

2012-08-21 Thread Mikhail T.
From reading the module's documentation http://httpd.apache.org/docs/2.4/mod/mod_dbd.html, it seems, a single vhost can only use one DB-server (and only with one set of credentials): only a single DBDriver and DBDParams is possible, for example. Also, the syntax of mod_rewrite's dbd/fastdbd