Re: svn commit: r1726009 - in /httpd/httpd/trunk: include/scoreboard.h modules/generators/mod_status.c modules/ssl/ssl_engine_kernel.c server/scoreboard.c

2016-02-08 Thread Eric Covener
I think this went in as a major bump, but I think it only needed a minor. Probably not intentional because major would not be backportable. Anyone elses 2c and I'll flip it? On Thu, Jan 21, 2016 at 11:57 AM, Stefan Eissing wrote: > Ah, of course, just a moment... >

Re: svn commit: r1726009 - in /httpd/httpd/trunk: include/scoreboard.h modules/generators/mod_status.c modules/ssl/ssl_engine_kernel.c server/scoreboard.c

2016-02-08 Thread Stefan Eissing
You are correct. The changes were just additions to the API. > Am 08.02.2016 um 16:55 schrieb Eric Covener : > > I think this went in as a major bump, but I think it only needed a > minor. Probably not intentional because major would not be > backportable. > > Anyone elses 2c

Re: Improper string concatenation in mod_alias allows code execution out of bounds defined in apache config file.

2016-02-08 Thread William A Rowe Jr
On Sat, Feb 6, 2016 at 5:20 AM, Bartłomiej Żogała wrote: > 5. Some day he wanted the blog to be visible from example.com/ root but > with mod_alias instead mod_rewrite. So he changed line "Alias /wp > /usr/share/wordpress" to "Alias / /usr/share/wordpress". Instead wordpress

Re: Improper string concatenation in mod_alias allows code execution out of bounds defined in apache config file.

2016-02-08 Thread William A Rowe Jr
Thanks Eric, now looping back to http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/mappers/mod_alias.c?revision=153384=co to see if this behavior was changed, by which commit, so that we ensure the docs match the behavior and can determine what the "correct" behavior was supposed to be in the

Re: svn commit: r1725149 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/core.xml include/ap_mmn.h include/http_core.h server/core.c

2016-02-08 Thread Eric Covener
To close the loop, I made this implicit and added it to the backport proposal. I think handler strings should be safe enough. On Mon, Jan 18, 2016 at 5:03 AM, Graham Leggett wrote: > On 18 Jan 2016, at 1:40 AM, cove...@apache.org wrote: > >> Author: covener >> Date: Sun Jan 17

Re: Netware proxy makefiles and USE_STDSOCKETS

2016-02-08 Thread NormW
A Sunny Afternoon Rainer, On 9/02/2016 10:31 AM, Rainer Jung wrote: I note the Windock imports are back where needed and all of /proxy now builds again without issue. As for /http2, ir seems I was rather hasty myself. My original NWGNU for http2 assumed a wildcard list of all .c in the

Proposal for a new mod_event documentation page

2016-02-08 Thread Luca Toscano
+dev for visibility -- Messaggio inoltrato -- Da: "Luca Toscano" Data: 06 feb 2016 15:10 Oggetto: Proposal for a new mod_event documentation page A: Cc: Hi Apache Devs! I started an email thread some days ago on the dev mailing

Re: Improper string concatenation in mod_alias allows code execution out of bounds defined in apache config file.

2016-02-08 Thread William A Rowe Jr
So after a little more digging, Roy's observation (As documented) was correct... for the case of matching trailing-slashes, both with or both omitted. All of this dates to well before 2.0.55... and there is absolutely no argument that an Alias src with a trailing slash, including "/" should

Re: Improper string concatenation in mod_alias allows code execution out of bounds defined in apache config file.

2016-02-08 Thread William A Rowe Jr
On Mon, Feb 8, 2016 at 11:21 AM, William A Rowe Jr wrote: > I think my text below should have stated; > > Note that unexpected expansion occurs when trailing slashes are > not balanced between the source url and target path. For example, > Alias / /usr/share/htdocs > will

httpd-2.4 --enable-load-all-modules side-effect

2016-02-08 Thread William A Rowe Jr
./configure [...] "--with-mods-shared=all" \ "--enable-mods-shared=all" \ "--enable-mpms-shared=all" \ "--enable-load-all-modules" \ "--with-mpm=worker" \ While this should be great for testing a variety of modules and is very helpful for building it all, the resulting httpd.conf isn't quite

mod_proxy_http2

2016-02-08 Thread Stefan Eissing
FYI: I just checked in a very experimental mod_proxy_http2 that registers on h2:// and h2c:// proxy URLs. I did this naming to have the module totally separate from mod_proxy_http, not wanting to make a mess. So a sample configuration looks like: BalancerMember

Re: mod_proxy_http2

2016-02-08 Thread Jim Jagielski
very very cool! > On Feb 8, 2016, at 12:07 PM, Stefan Eissing > wrote: > > FYI: I just checked in a very experimental mod_proxy_http2 that registers on > h2:// and h2c:// proxy URLs. I did this naming to have the module totally > separate from mod_proxy_http,

Re: Netware proxy makefiles and USE_STDSOCKETS

2016-02-08 Thread NormW
G/M Brad, G/M Rainer On 8/02/2016 9:17 AM, Brad Nicholes wrote: Rainer, It has actually been quite a while since I have been on this list. I did most of the initial Netware port of Apache. Apache for Netware uses its own implementation of Winsock as the socket layer. This is the reason

Re: ABI report

2016-02-08 Thread William A Rowe Jr
This is excellent, thanks for the effort! You should note that there was no binary compatibility between 2.2.x final and 2.4.x. And there will be no binary compatibility between 2.next (3.0?) and 2.4.x. The interesting branches to compare for 2.2.next and 2.4.next to anticipate any binary

Re: httpd-2.4 --enable-load-all-modules side-effect

2016-02-08 Thread Rainer Jung
Hi Bill, Am 08.02.2016 um 19:11 schrieb William A Rowe Jr: ./configure [...] "--with-mods-shared=all" \ "--enable-mods-shared=all" \ "--enable-mpms-shared=all" \ "--enable-load-all-modules" \ "--with-mpm=worker" \ While this should be great for testing a variety of modules and is very helpful

httpd-trunk/modules/http2 gets a proxy

2016-02-08 Thread NormW
G/M, Recent additions to http-trunk/modules/http2 require the attached apatch to the http2 NetWare build file: Index: modules/http2/NWGNUmakefile === --- modules/http2/NWGNUmakefile (revision 1729251) +++

Re: Netware proxy makefiles and USE_STDSOCKETS

2016-02-08 Thread Rainer Jung
Hi Norm, Am 08.02.2016 um 22:45 schrieb NormW: G/M Brad, G/M Rainer On 8/02/2016 9:17 AM, Brad Nicholes wrote: Rainer, It has actually been quite a while since I have been on this list. I did most of the initial Netware port of Apache. Apache for Netware uses its own implementation of

Re: mod_proxy_http2

2016-02-08 Thread Gregg Smith
On 2/8/2016 9:07 AM, Stefan Eissing wrote: PS. I did not update Windows Makefiles. I feel bad. Don't, I need to play catch-up anyway :) Should this be in modules/proxy like all the rest of the mod_proxy_* modules? I personally do not care, I was just thinking (which in itself can be

Re: Netware proxy makefiles and USE_STDSOCKETS

2016-02-08 Thread Rainer Jung
Thanks for the background info! Regards, Rainer Am 07.02.2016 um 23:17 schrieb Brad Nicholes: Rainer, It has actually been quite a while since I have been on this list. I did most of the initial Netware port of Apache. Apache for Netware uses its own implementation of Winsock as the