Build Update for apache/httpd
-
Build: #2036
Status: Fixed
Duration: 3 mins and 34 secs
Commit: 2baea6b (trunk)
Author: Ruediger Pluem
Message: * Good catch by Yann: This is dead code
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1894034
On 10/8/21 5:21 PM, Yann Ylavic wrote:
> On Fri, Oct 8, 2021 at 12:49 PM wrote:
>>
>> Author: rpluem
>> Date: Fri Oct 8 10:49:06 2021
>> New Revision: 1894024
>>
>> URL: http://svn.apache.org/viewvc?rev=1894024=rev
>> Log:
>> * Make aliases more robust against potential traversal attacks, by
On Fri, Oct 8, 2021 at 3:23 PM ste...@eissing.org wrote:
>
> Yann, thanks for you PRs. Just one thing:
>
> ap_server_root_relative("/") -> "/"
>
> in my reading of the code. Why am I wrong?
Nothing wrong, it was my bad, but ap_server_root_relative() normalizes too so:
On Fri, Oct 8, 2021 at 12:49 PM wrote:
>
> Author: rpluem
> Date: Fri Oct 8 10:49:06 2021
> New Revision: 1894024
>
> URL: http://svn.apache.org/viewvc?rev=1894024=rev
> Log:
> * Make aliases more robust against potential traversal attacks, by using
> apr_filepath_merge to merge the real path
Yann, thanks for you PRs. Just one thing:
ap_server_root_relative("/") -> "/"
in my reading of the code. Why am I wrong?
Build Update for apache/httpd
-
Build: #2033
Status: Broken
Duration: 17 mins and 29 secs
Commit: d8b3d1f (trunk)
Author: Ruediger Pluem
Message: * Make aliases more robust against potential traversal attacks, by
using
apr_filepath_merge to merge the real
HE CHANGED THE SACRED CODE!
浪
> Am 08.10.2021 um 11:02 schrieb rpl...@apache.org:
>
> Author: rpluem
> Date: Fri Oct 8 09:02:30 2021
> New Revision: 1894021
>
> URL: http://svn.apache.org/viewvc?rev=1894021=rev
> Log:
> * Optimize performance by moving calculation of loop invariant out of
On Fri, Sep 24, 2021 at 02:28:15PM +0200, Yann Ylavic wrote:
> On Fri, Sep 24, 2021 at 2:06 PM Yann Ylavic wrote:
> >
> > On Mon, Sep 6, 2021 at 5:30 PM Joe Orton wrote:
> > >
> > > If you're logged into Github you can restart
> > > individual jobs which are Errored, which I've done just now.
>
The 2.4.51 announcement on annou...@httpd.apache.org did not make it, as seen
in the mailing list archives.
I have no idea why not. Any moderator of that list here?
- Stefan
