httpd

Checkout Tools
  • last updated 6 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates

Changeset 82740 is being indexed.

Rework the ap_MD5Encode() routine to use FreeBSD's algorithm

and a private significator ("$apr1"); also make it reentrant.

Abstract the password checking into a new routine,

ap_validate_password(plaintext, hashed), and modify mod_auth*.c

to use it instead of each doing the algorithm check.

Obtained from: FreeBSD 3.0 /usr/src/lib/libcrypt/crypt.c (MD5)

    • -1
    • +5
    /httpd/branches/1.3.x/src/include/ap_mmn.h
    • -0
    • +1
    /httpd/branches/1.3.x/src/support/httpd.exp
    • -1
    • +3
    /httpd/branches/1.3.x/src/include/ap_md5.h
    • -5
    • +6
    /httpd/branches/1.3.x/src/support/htpasswd.c
    • -0
    • +1
    /httpd/branches/1.3.x/src/ApacheCore.def
    • -39
    • +213
    /httpd/branches/1.3.x/src/ap/ap_md5c.c
Some known bugs in 1.3.4.

Clear up some descriptions

Oops. You should not leave your comments floating around whilst checking the %m milisecond code

Holed up in Africa. No flights out. Bored. Fetched and tried some patches. More Tomorrow

people seem to think I'm a help desk for Perl, so cut out my crap

PR:

Obtained from:

Submitted by:

Reviewed by:

We have found the prototype for crypt. Since people actually once in

a while are "nice enough" to write in telling me that they know where

the prototype is on their system based on that comment, plus we

don't do the casting associated with the comment any more, it can

go away.

PR:

Obtained from:

Submitted by:

Reviewed by:

purple.

PR:

Obtained from:

Submitted by:

Reviewed by:

Win32: The filename validity checker now allows "COM" but refuses access

to "COM1" through "COM4". This allows filenames such as "com.name" to be

served. If was supposed to work like this but a bug meant that the "COM1"

invalid filename was matching "COM". Similarly the check for "LPT1" would

have denied access to filenames with a "LPT" segment.

PR: 3769

    • -4
    • +5
    /httpd/branches/1.3.x/src/os/win32/util_win32.c
Add various new files: icons/small, vhost/mass.html,

update for new locaiton of {ap_}md5.c. Add htpasswd.{mak,dsp}.

Remove some libs which may not exist on user's machines (OBDC, OLE, UUID,

etc). Make "Release" the active configuration (this is the default on

other Win32 makefiles).

Whoops; forgot to add the new ap_MD5Encode() function..

    • -1
    • +2
    /httpd/branches/1.3.x/src/include/ap_mmn.h
    • -0
    • +1
    /httpd/branches/1.3.x/src/support/httpd.exp
    • -0
    • +1
    /httpd/branches/1.3.x/src/ApacheCore.def

Add another vendor..

BS2000 only: Adapt to the new ufork() system call interface which will

make subtasking easier on the OSD/POSIX mainframe environment.

    • -1
    • +1
    /httpd/branches/1.3.x/src/main/http_main.c
    • -71
    • +114
    /httpd/branches/1.3.x/src/os/bs2000/bs2login.c
More idiot-proofing?

More idiot-proofing?

    • -2
    • +5
    /httpd/trunk/docs/manual/misc/security_tips.html
Add the long address and remove the mailto to make this more idiot-proof?

Add the new ap_find_opaque_token() function to the export

lists. (Oops.)

    • -0
    • +1
    /httpd/branches/1.3.x/src/support/httpd.exp
    • -0
    • +1
    /httpd/branches/1.3.x/src/ApacheCore.def
Add a compatibility define for escape_uri() -> ap_escape_uri() to ap_compat.h

Submitted by: David White <david@persimmon.com>

Reviewed by: Ralf S. Engelschall

PR: 3725

    • -0
    • +1
    /httpd/branches/1.3.x/src/include/ap_compat.h
Fix version as pointed ot by Tony Finch <fanf@demon.net> in PR#3768

Make NDBM file suffix determination for mod_rewrite more accurate, i.e.

use `.db' instead of `.pag' not only for FreeBSD, but also when

the NDBM library looks like Berkeley-DB based.

Submitted by: Ralf S. Engelschall

PR: 3773

This commit was manufactured by cvs2svn to create tag 'v0_30_01'.
    • ?
    /apreq/tags/v0_30_01/Request/.cvsignore
    • ?
    /apreq/tags/v0_30_01/Request/Request.pm
    • ?
    /apreq/tags/v0_30_01/c/apache_request.c
    • ?
    /apreq/tags/v0_30_01/Cookie/.cvsignore
date stamp

change NULL to 0 for array of ints

    • -1
    • +1
    /apreq/branches/1.x/c/apache_request.c
some dynamic target fixups

    • -1
    • +1
    /apreq/branches/1.x/Request/Request.pm

ETags aren't normal tokens by the RFC 2068 definition; they

explicitly contain quoted strings and can include stuff *outside*

the quotes as well ('W/' for a weak ETag). So add a new function

that treats *everything* except ',' and ' ' (and not even those,

if they're in a quoted string) as part of the token, and fix the

ETag checks to use it.

PR: 2065, 3657

    • -0
    • +61
    /httpd/branches/1.3.x/src/main/util.c
    • -0
    • +2
    /httpd/branches/1.3.x/src/include/httpd.h
    • -1
    • +3
    /httpd/branches/1.3.x/src/include/ap_mmn.h
This commit was manufactured by cvs2svn to create tag 'v0_20_02'.
    • ?
    /apreq/tags/v0_20_02/Request/.cvsignore
    • ?
    /apreq/tags/v0_20_02/Cookie/.cvsignore
cleanups

    • -0
    • +4
    /apreq/branches/1.x/.cvsignore
    • -0
    • +4
    /apreq/branches/1.x/Cookie/.cvsignore
    • -0
    • +3
    /apreq/branches/1.x/c/.cvsignore
    • -0
    • +4
    /apreq/branches/1.x/Request/.cvsignore
added

    • -0
    • +69
    /apreq/branches/1.x/c/Makefile.PL
One item already added by someone sometime, one that should be.

PR:

Obtained from:

Submitted by:

Reviewed by: