Re: [VOTE] Release httpd-2.4.59-rc1 as httpd-2.4.59
-1 Get an error: Error C2065 'DAV_WALKTYPE_TOLERANT': undeclared identifier mod_dav_fs C:\VS17\Win32\httpd-2.4\modules\dav\fs\repos.c 1599 Steffen On 2024/04/03 12:26:09 Eric Covener wrote: > Hi all, > > (After only minor embarrassment of patching tags/2.4.55 instead of 2.4.x...) > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a SHORTENED VOTE to release > this candidate tarball httpd-2.4.59-rc1 as 2.4.59: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > = e4ec4ce12c6c8f5a794dc2263d126cb1d6ef667f034c4678ec945d61286e8b0f > = > baa96a7c9bba48f758ca9b3e3d63f0c65db960653618109d4d7bcbf3d4776d1d51453beb65e5af57655f0b1cfb88913842bc3a117fe7acc754ddb43d4524bc82 > > The SVN candidate source is found at tags/2.4.59-rc1-candidate. >
Re: svn commit: r1898181 - /httpd/httpd/branches/2.4.x/STATUS
Yep, next week I try PCRE 8.45 with the branche at https://github.com/ylavic/httpd/tree/pcre2_tls On Friday 18/02/2022 at 14:16, Eric Covener wrote: @Steffen Land any chance you can test the pcre8 update on Windows prior to integration in 2.4.x? + https://github.com/apache/httpd/pull/289.diff + (PR: https://github.com/apache/httpd/pull/289) + +1: ylavic, rpluem, covener + ylavic: This backport proposal inludes the PCRE2 backport already accepted, + we can apply this one instead or the original one first and then + this one (I'd have to rebase the github PR first). + ylavic: Can someone test this on Windows too?
Season Greetings
Happy holidays to all the HTTPD Community developers and users and enjoy the holidays ! We wish for you, your friends and your families time to reconnect, enjoy traditions, and to find some rest during the holiday season. Whatever you celebrate, I hope you take a moment to reflect on the year that is closing and on your goals for 2022 as it approaches. For the next weeks, I'll be spending time with my family enjoying Christmas and end of year festivities. As exciting as computers and servers can be, this year will also forever serve as a reminder of what is really important: family, friends and the compassion of strangers. Steffen
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
+1 looks ok on Windows On Thursday 07/10/2021 at 15:17, ste...@eissing.org wrote: Hi all, due to found security weaknesses in our 2.4.50 release, the security team feels it is necessary to do a new release on very short notice. We will skip the usual 3 day voting period and close the vote once we feel comfortable with our testing. Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days^h^h^h^hhours to release this candidate tarball httpd-2.4.51-rc1 as 2.4.51: [ ] +1: It's not just good, it's hopefully good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 *httpd-2.4.51-rc1.tar.gz sha512: 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 *httpd-2.4.51-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.51-rc1. Kind Regards, Stefan
Re: trunk/rc usable with OpenSSL 3.0.0 ?
anticipating also a possible (likely?) OpenSSL 3.0.1, as a common then when releases are done and the test base broadens significantly. +1 for 3.0.1 Steffen On Monday 13/09/2021 at 10:08, ste...@eissing.org wrote: Am 13.09.2021 um 07:23 schrieb Dennis Clarke : ALL : I may receive no reply to this but in general I have been able to build Apache httpd from any release tarball as well as from trunk. When httpd needed to get TLS 1.3 working it was a slam dunk to get that working and it did. However now we have OpenSSL 3.0.0 and it seems that neither the latest RC works nor does trunk. So then ... how to proceed ? The plan is to make a "OpenSSL 3.0" ready release soon after 2.4.49, anticipating also a possible (likely?) OpenSSL 3.0.1, as a common then when releases are done and the test base broadens significantly. That's my understanding. One could argue, that 2.4.49 should do that as well, which would mean delaying it. And there are security relevant changes, not visible in the candidate, that sit on a timeline. My personal opinion is that we need to release every other month and take into it what is ready. The old model of waiting till all stars align - which is nice as a developer - does not work for CVEs. - Stefan -- Dennis Clarke RISC-V/SPARC/PPC/ARM/CISC UNIX and Linux spoken GreyBeard and suspenders optional PS: trunk 1893292 fails even autoreconf and then more horror follows
vulnerabilities page vs change log
Thanks Christophe for all the work, nice process changes ! See a little one: - at https://httpd.apache.org/security/vulnerabilities_24.html I see under 2.4.48 the CVE 13938 and in the change log under 2.4.47 - in changelog I see under 2.4.48 the CVE 31618 and at the page under 2.4.47 Steffen
Re: Current branches mod_proxy link error
Thanks MJ, Found that I did not updated my build script for libhttpd.dll Struggling now with the rest. --- Original message --- Subject: Re: Current branches mod_proxy link error From: Marion JAILLET To: , Steffen Land Date: Saturday, 15/05/2021 18:43 Le 15/05/2021 à 16:18, Steffen Land a écrit : Try to build branches revision 1889914 mod_proxy.obj : error LNK2019: unresolved external symbol __imp__ap_ssl_conn_is_ssl@4 referenced in function _ap_proxy_conn_is_https@4 mod_proxy.obj : error LNK2019: unresolved external symbol __imp__ap_ssl_var_lookup@20 referenced in function _ap_proxy_ssl_val@20 Do I miss a (new) include ? Steffen Hi Steffen, this is likely related to r1889793. CJ
Current branches mod_proxy link error
Try to build branches revision 1889914 mod_proxy.obj : error LNK2019: unresolved external symbol __imp__ap_ssl_conn_is_ssl@4 referenced in function _ap_proxy_conn_is_https@4 mod_proxy.obj : error LNK2019: unresolved external symbol __imp__ap_ssl_var_lookup@20 referenced in function _ap_proxy_ssl_val@20 Do I miss a (new) include ? Steffen
Re: Trunk warnings win64 2-sept-2020
Trunk revision 1881390 02 sept 2020 404 01 sept 2020 405 On Tuesday 01/09/2020 at 16:30, Steffen Land wrote: Trunk revision 1881351 date 1 sept 2020 New layout list, more readable now. 01 sept 2020 405 some solved already by jailletc36 14 May 2020 416 Steffen Warning C4244 util_expr_scan.c1911'=': conversion from '__int64' to 'int', possible loss of data Warning C4267 util_expr_scan.c2349'=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 util_expr_scan.c2383'=': conversion from 'size_t' to 'int', possible loss of data Warning C4244 support\rotatelogs.c185 'return': conversion from '__int64' to 'adjusted_time_t', possible loss of data Warning C4267 support\passwd_common.c 56 'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\passwd_common.c 208 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\passwd_common.c 56 'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\passwd_common.c 208 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\htcacheclean.c 1171'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\htcacheclean.c 1172'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\htcacheclean.c 1690'=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c1625'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c2433'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c2436'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c2448'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c2451'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c839 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4244 support\ab.c1414'function': conversion from 'apr_os_sock_t' to 'int', possible loss of data Warning C4267 support\ab.c1538'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c1625'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c2433'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c2436'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c2448'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 support\ab.c2451'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_script.c334 'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_script.c335 'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_script.c516 '=': conversion from 'size_t' to 'int', possible loss of data Warning C4244 server\util_script.c851 '=': conversion from '__int64' to 'int', possible loss of data Warning C4267 server\util_regex.c 162 '=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_regex.c 170 '+=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_pcre.c 329 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_pcre.c 331 '=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_expr_eval.c 127 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_expr_eval.c 128 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_expr_eval.c 131 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_expr_eval.c 361 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_expr_eval.c 364 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_expr_eval.c 389 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4090 server\util_expr_eval.c 434 'initializing': different 'const' qualifiers Warning C4267 server\util_expr_eval.c 589 '=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util_expr_eval.c 1463'function': conversion from 'size_t' to 'int', possible loss of data Warning C4267
Trunk warnings win64 1-sept-2020
Trunk revision 1881351 date 1 sept 2020 New layout list, more readable now. 01 sept 2020 405 some solved already by jailletc36 14 May 2020 416 Steffen
Re: Trunk Link error 1 sept 2020
Ah..found it. Was using an old .dsp for libhttpd. Later I post the Win64 warnings On Tuesday 01/09/2020 at 12:21, Steffen Land wrote: I saw that jailletc36 was picking up the warnings ! So to check building trunk from today, revision 1881351 Creating library .\Release\mod_dav_fs.lib and object .\Release\mod_dav_fs.exp repos.obj : error LNK2019: unresolved external symbol __imp_ap_make_etag_ex referenced in function dav_fs_getetag Creating library .\Release\libhttpd.lib and object .\Release\libhttpd.exp core.obj : error LNK2019: unresolved external symbol ap_set_etag_fd referenced in function default_handler All others building fine Steffen
Trunk Link error 1 sept 2020
I saw that jailletc36 was picking up the warnings ! So to check building trunk from today, revision 1881351 Creating library .\Release\mod_dav_fs.lib and object .\Release\mod_dav_fs.exp repos.obj : error LNK2019: unresolved external symbol __imp_ap_make_etag_ex referenced in function dav_fs_getetag Creating library .\Release\libhttpd.lib and object .\Release\libhttpd.exp core.obj : error LNK2019: unresolved external symbol ap_set_etag_fd referenced in function default_handler All others building fine Steffen
Re: [VOTE] Release httpd-2.4.46
WIN32 APR 1.7.0 APR-UTIL 1.6.1 with Analyses Warning C6386 \apr\time\win32\timestr.c 189 Buffer overrun while writing to 'new_format': the writable size is 'max+11' bytes, but 'j' bytes might be written. Warning C26451 \apr\time\win32\time.c 239 Arithmetic overflow: Using operator '+' on a 4 byte value and then casting the result to a 8 byte value. Cast the value to the wider type before calling operator '+' to avoid overflow (io.2). Warning C26451 \apr\time\win32\time.c 239 Arithmetic overflow: Using operator '-' on a 4 byte value and then casting the result to a 8 byte value. Cast the value to the wider type before calling operator '-' to avoid overflow (io.2). Warning C6248 \apr\threadproc\win32\proc.c320 Setting a SECURITY_DESCRIPTOR's DACL to NULL will result in an unprotected object. Warning C28182 \apr\tables\apr_skiplist.c 516 Dereferencing NULL pointer. 'tmp' contains the same NULL value as 'm->next' did. See line 511 for an earlier location where this can occur Warning C6011 \apr\tables\apr_skiplist.c 570 Dereferencing NULL pointer 'ret'. Warning C6011 \apr\tables\apr_skiplist.c 571 Dereferencing NULL pointer 'li'. See line 570 for an earlier location where this can occur Warning C6011 \apr\tables\apr_hash.c 505 Dereferencing NULL pointer 'new_vals'. Warning C6237 \apr\strings\apr_snprintf.c 819 ( && ) is always zero. is never evaluated and might have side effects. Warning C6285 \apr\strings\apr_snprintf.c 822 ( || ) is always a non-zero constant. Did you intend to use the bitwise-and operator? Warning C6285 \apr\strings\apr_snprintf.c 834 ( || ) is always a non-zero constant. Did you intend to use the bitwise-and operator? Warning C26451 \apr\random\unix\sha2.c 399 Arithmetic overflow: Using operator '<<' on a 4 byte value and then casting the result to a 8 byte value. Cast the value to the wider type before calling operator '<<' to avoid overflow (io.2). Warning C6297 \apr\random\unix\sha2.c 399 Arithmetic overflow: 32-bit value is shifted, then cast to 64-bit value. Results might not be an expected value. Warning C26451 \apr\random\unix\sha2.c 406 Arithmetic overflow: Using operator '<<' on a 4 byte value and then casting the result to a 8 byte value. Cast the value to the wider type before calling operator '<<' to avoid overflow (io.2). Warning C6297 \apr\random\unix\sha2.c 406 Arithmetic overflow: 32-bit value is shifted, then cast to 64-bit value. Results might not be an expected value. Warning C26451 \apr\random\unix\sha2.c 422 Arithmetic overflow: Using operator '<<' on a 4 byte value and then casting the result to a 8 byte value. Cast the value to the wider type before calling operator '<<' to avoid overflow (io.2). Warning C6297 \apr\random\unix\sha2.c 422 Arithmetic overflow: 32-bit value is shifted, then cast to 64-bit value. Results might not be an expected value. Warning C6001 \apr\network_io\win32\sockopt.c 280 Using uninitialized memory 'oobmark'. Warning C6255 \apr\network_io\win32\sendrecv.c118 _alloca indicates failure by raising a stack overflow exception. Consider using _malloca instead. Warning C6287 \apr\network_io\win32\sendrecv.c378 Redundant code: the left and right sub-expressions are identical. Warning C6387 \apr\network_io\win32\sendrecv.c381 'sock->overlapped->hEvent' could be '0': this does not adhere to the specification for the function 'WaitForSingleObject'. Warning C6001 \apr\network_io\unix\inet_pton.c114 Using uninitialized memory 'tmp'. Warning C6001 \apr\mmap\win32\mmap.c 59 Using uninitialized memory '**themmap[BYTE:4]'. Warning C6001 \apr\mmap\win32\mmap.c 59 Using uninitialized memory '*themmap[BYTE:4]'. Warning C28159 \apr\misc\win32\misc.c 32 Consider using 'IsWindows*' instead of 'GetVersionExA'. Reason: Deprecated. Use VerifyVersionInfo* or IsWindows* macros from VersionHelpers. Warning C6011 \apr\misc\win32\misc.c 218 Dereferencing NULL pointer 'sbuf'. Warning C6387 \apr\misc\win32\misc.c 258 'sbuf' could be '0': this does not adhere to the specification for the function 'sprintf'. See line 218 for an earlier location where this can occur Warning C6387 \apr\misc\win32\misc.c 262 'sbuf' could be '0': this does not adhere to the specification for the function 'strlen'. See line 218 for an earlier location where this can occur Warning C6262 \apr\misc\win32\env.c 45 Function uses '16424' bytes of stack: exceeds /analyze:stacksize '16384'. Consider moving some data to heap. Warning C6262 \apr\misc\win32\env.c 121 Function uses '16412' bytes of stack: exceeds /analyze:stacksize '16384'. Consider moving some data to heap. Warning C6262 \apr\misc\win32\env.c 163 Function uses '16396' bytes of stack: exceeds
Re: [VOTE] Release httpd-2.4.45
aplogno warnings on 2.4.40 was a reason to skip. www.apachelounge.com/viewtopic.php?t=8329=aplogno On Thursday 30/07/2020 at 17:10, Jim Jagielski wrote: On Jul 30, 2020, at 5:55 AM, Christophe JAILLET wrote: I wouldn't say it is a show stopper, but I thought that we had a travis job for that. Apparently, it is on trunk only (see r1879370 which is not backported, maybe on purpose) I agree that it's not a show-stopper but it is something that seems easy to fix and, considering that (1) we want to release the best possible version as we can and (2) there is quite a bit of time between releases, I wouldn't be opposed if the RM decided to skip 2.4.45 and go w/ 2.4.46.
Re: [VOTE] Release httpd-2.4.45
HTTPd 2.4.45 Warning C4267 modules\http\http_filters.c 284 '+=': conversion from 'size_t' to 'apr_int32_t', possible loss of data Warning C4267 modules\http\http_filters.c 473 '=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 modules\http\http_filters.c 980 'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 modules\http\http_filters.c 1850'return': conversion from 'size_t' to 'long', possible loss of data Warning C4267 modules\http\http_protocol.c942 'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 modules\http\http_protocol.c1468'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4312 os\win32\util_win32.c 100 'type cast': conversion from 'int' to 'char *' of greater size Warning C4267 server\config.c 608 'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\config.c 609 'initializing': conversion from 'size_t' to 'int', possible loss of data Warning C4311 server\config.c 1474'type cast': pointer truncation from 'void *' to 'long' Warning C4311 server\config.c 1487'type cast': pointer truncation from 'void *' to 'long' Warning C4311 server\config.c 1505'type cast': pointer truncation from 'void *' to 'long' Warning C4311 server\config.c 1516'type cast': pointer truncation from 'void *' to 'long' Warning C4311 server\config.c 1527'type cast': pointer truncation from 'void *' to 'long' Warning C4311 server\config.c 1544'type cast': pointer truncation from 'void *' to 'long' Warning C4018 server\config.c 1745'>=': signed/unsigned mismatch Warning C4311 server\core.c 2999'type cast': pointer truncation from 'void *' to 'long' Warning C4244 server\core.c 4043'return': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\core.c 5277'=': conversion from 'unsigned long' to 'apr_uint16_t', possible loss of data Warning C4018 server\core_filters.c 264 '<': signed/unsigned mismatch Warning C4018 server\core_filters.c 270 '<': signed/unsigned mismatch Warning C4018 server\core_filters.c 295 '<': signed/unsigned mismatch Warning C4267 server\core_filters.c 821 'function': conversion from 'size_t' to 'apr_int32_t', possible loss of data Warning C4244 server\log.c590 'return': conversion from '__int64' to 'int', possible loss of data Warning C4267 server\log.c781 '+=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\log.c1019'+=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\log.c1069'+=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\log.c1551'+=': conversion from 'size_t' to 'int', possible loss of data Warning C4311 server\mpm\winnt\child.c791 'type cast': pointer truncation from 'void *' to 'int' Warning C4312 server\mpm\winnt\child.c1006'type cast': conversion from 'int' to 'void *' of greater size Warning C4090 server\mpm\winnt\mpm_winnt.c364 'function': different 'volatile' qualifiers Warning C4090 server\mpm\winnt\mpm_winnt.c1089'function': different 'volatile' qualifiers Warning C4244 server\protocol.c 643 'return': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\protocol.c 2078'initializing': conversion from '__int64' to 'int', possible loss of data Warning C4267 server\protocol.c 2135'return': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\request.c1468'=': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\scoreboard.c 147 'return': conversion from 'size_t' to 'int', possible loss of data Warning C4267 server\util.c 401 'function': conversion from 'size_t' to 'int', possible loss of data Warning C4244 server\util.c 507 '=': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\util.c 654 '=': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\util.c 686 '=': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\util.c 714 '=': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\util.c 811 'function': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\util.c 821 'function': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\util.c 865 'function': conversion from '__int64' to 'int', possible loss of data Warning C4244 server\util.c 875 'function': conversion from '__int64' to 'int', possible loss of data Warning C4267 server\util.c
Warning free code
Once in a while I post the build warnings in Windows 32/64. Till now this is not really picked up, some times it is solved. Should it not be a goal to get warning free code on all platforms ? What do you think. Steffen
Trunk :: crashes libhttpd.dll (scoreboard.c)
Running production. Get crashes, mostly few times a day: Error log: [mpm_winnt:notice] [pid 11936:tid 744] AH00428: Parent: child process 4980 exited with status 3221225477 -- Restarting The thread tried to read from or write to a virtual address for which it does not have the appropriate access. Attached scoreboard.png callstack.png locals.png Steffen
