summaryrefslogtreecommitdiffstats
path: root/usr.sbin/httpd/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* isinf/isnan are macros now, therefore ap_config_auto.h differ. regenmartynas2008-07-241-10/+0
| | | | from sthen@. discussed w/ millert@. "yep" sthen@.
* more negotation -> negotiation; ok sthen@martynas2008-07-224-7/+7
|
* Make the proxy module work with https again by allowing the destinationmbalmer2008-07-042-5/+12
| | | | | | | | port to be set in the config file instead of using HTTP_DEFAULT_PORT in all cases. Prevent a segfault that would happen when the SSL connection from the proxy fails. Problem found and analyzed by Mischa Diehm; fix by me.
* Move the Apache manual out of etcXX and to miscXX where it belongs.jdixon2008-06-075-15/+15
| | | | | | | | It has also been moved to /usr/share/doc/html/httpd/. This will ease sysmerge upgrades and help keep htdocs clean. Help from okan and phessler, doc tweaks by jmc ok deraadt@ millert@ beck@
* grammar fixes; from Jochem Kossen, system/5822;jmc2008-05-271-13/+13
| | | | ok henning
* de-register, remove #ifdefs and #ifndefs using SIN6_LEN, add OpenBSD cvsmbalmer2008-05-2511-82/+74
| | | | | | markers. no binary changes
* KNF and readability changes. de-register, remove #ifndef SIN6_LEN defines.mbalmer2008-05-237-1280/+1233
| | | | | | Add OpenBSD cvs markers. No binary changes.
* de-registermbalmer2008-05-233-21/+21
|
* Last chunk of KNF and readability changes here.mbalmer2008-05-231-231/+241
| | | | no binary changes.
* More KNF and readability.mbalmer2008-05-221-638/+669
| | | | no binary changes.
* KNF and readability changes.mbalmer2008-05-211-437/+468
| | | | No binary changes.
* Remove #ifndef SIN6_LEN/#else/#endif constructs.mbalmer2008-05-214-63/+9
| | | | Suggested by djm a while ago. No binary changes.
* Document and implement -U option, fix usage information for '-?'.mbalmer2008-05-211-3/+9
| | | | Documentation corrections and spelling by jmc.
* The default address family to be used is stored in a global variable. Ifmbalmer2008-05-211-22/+53
| | | | | | | | | | | | | | no options are given on the commandline, it is set to PF_INET. The configuration file parser did not use this variable in all cases, but used PF_UNSPEC for getaddrinfo/getnameinfo, leading to bogus error messages in some cases (but httpd operated as expected). Use the global variable instead of the hardcode PF_UNSPEC in the cases. Add a new commandline flag, -U, to set the default address family to PF_UNSPEC for ambigous directives. Discussed with sthen.
* Permit compilation on 3 architectures which show that this diff wasderaadt2008-05-191-2/+2
| | | | | not tested on them. Older gcc's require decl before code, and this is supposed to be portable code in that sense.
* documentation tweaks.sobrado2008-05-172-7/+4
| | | | ok (some time ago) jmc@
* Add OpenBSD markers.mbalmer2008-05-1511-551/+551
| | | | no binary change.
* fix comment.mbalmer2008-05-141-2/+2
|
* Next chunk of KNF/readability.mbalmer2008-05-142-1263/+1333
| | | | no binary changes.
* More KNF/readability changes.mbalmer2008-05-142-1116/+1137
| | | | no binary changes.
* Next chunk of KNF/readability changes.mbalmer2008-05-143-1254/+1282
| | | | no binary change.
* knf. no binary changes.mbalmer2008-05-131-341/+343
|
* A first chunk of readability/knf changes. Since there is nothing morembalmer2008-05-138-3002/+3130
| | | | | | | | | to merge from upstream, we can safely sanitize the code and hopefully the build system. Discussed with and feedback from sthen, todd, dlg and henning. no binary changes.
* Add support for IPv6 while keeping the default at IPv4 to not breakmbalmer2008-05-0928-716/+1773
| | | | | | | | | | | | existing installations. See the documentation for the IPv6 related configuration. This changes the module ABI since addresses are now struct addrinfo. This has been tested by many people and run on production machines for several months. feedback many, ok todd
* neccessary -> necessary; from Pierre Riteaujmc2008-04-252-3/+3
|
* Use arc4random_buf() when requesting more than a single word of outputdjm2008-04-131-8/+2
| | | | | | | Use arc4random_uniform() when the desired random number upper bound is not a power of two ok deraadt@ millert@
* "read(..., ..., sizeof Y) < sizeof Y" is a dangerous idiom because itkrw2008-01-241-2/+2
| | | | | | | | does an unsigned comparison and read() can return -1. Use '!=' instead of '<' since read() can't return more than 'sizeof Y'. Not perfect (that would require a separate test for -1) but a very common usage. ok henning@
* Fix mod_status XSS CVE-2007-6388:martynas2008-01-122-15/+15
| | | | | | | | | | | | | | | A flaw was found in the mod_status module. On sites where mod_status is enabled and the status pages were publicly accessible, a cross-site scripting attack is possible. Note that the server-status page is not enabled by default and it is best practice to not make this publicly available. Fix mod_imap XSS CVE-2007-5000: A flaw was found in the mod_imap module. On sites where mod_imap is enabled and an imagemap file is publicly available, a cross-site scripting attack is possible. ok miod@
* fix yacc/lex parallel file generationespie2007-11-241-1/+11
|
* do not print "Processing config {dir,file} ...." messages unless the -trobert2007-11-191-3/+5
| | | | | | | or -T option is specified, which is only going to do a syntax check on the config file(s) ok henning@, deraadt@
* 'expresion' -> 'expression'. Reported by Jung on tech@.krw2007-10-141-2/+2
|
* [fF]uther -> [fF]urther in comments and man page. First one spotted onkrw2007-09-151-2/+2
| | | | tech@ by Jung.
* use strcspn to properly overwrite '\n' in fgets returned buffergilles2007-09-112-15/+5
| | | | ok pyr@, ray@, millert@, moritz@, chl@
* Add a new configuration directive 'RLimitNOFILE' to set the number ofmbalmer2007-08-242-1/+16
| | | | | | of open filedescriptors (like RLimitNPROC for the number of processes). ok ckuethe, "no objection" henning
* fix CVE-2007-3304martynas2007-08-091-6/+17
| | | | | | | | | | | The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A local attacker with the ability to run scripts on the HTTP server could manipulate the scoreboard and cause arbitrary processes to be terminated which could lead to a denial of service. ok miod@ (who also noticed to protect reclaim_child_processes); henning@; djm@
* fix CVE-2006-5752martynas2007-08-081-5/+5
| | | | | | | | | | A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is enabled this could lead to a cross-site scripting attack. Note that the server-status page is not enabled by default and it is best practice to not make this publicly available. ok miod@, henning@
* fix a variable shadowing problemhenning2007-07-231-3/+3
| | | | PR5549, From: veins@evilkittens.org
* paranoid snprintf length calculation to avoid a possible bufferpvalchev2007-06-011-1/+1
| | | | | overflow in SSL session id parsing (by reaching a negative size arg) ok henning
* convert to new .Dd format;jmc2007-05-318-16/+16
|
* "interupt" -> "interrupt" in various comments. Mostly from Diego Casati.krw2007-05-252-3/+3
|
* another extra test i missed before, from charles longeautedu2007-04-051-1/+1
|
* Restore full version reporting when using the -v and -V switch.pyr2007-03-301-1/+3
| | | | | This unbreaks some configuration scripts. ok henning@, xsa@, espie@
* remove the unneccessary options descriptions from usage();jmc2007-03-261-8/+0
| | | | | noticed by Igor Sobrado ok henning
* fix lines with too many args; from Igor Sobradojmc2007-03-261-5/+13
|
* remove default output of version numbers to silence confused auditingpyr2007-03-221-3/+3
| | | | | programs. prompted by deraadt@ and cloder@, ok cloder@, henning@, xsa@
* remove some bogus *p tests from charles longeautedu2007-03-207-12/+12
| | | | ok deraadt millert
* - Pass full buffer to fgets().ray2007-03-061-4/+4
| | | | | | | | | - Use sizeof(buf) instead of BUFSIZ. - Only overwrite '\n'. From Charles Longeau. OK millert@ and moritz@.
* spell address correctly; ok jmc@ henning@david2007-03-014-7/+7
|
* Change hard coded numbers to sizeof(buf). Also change someray2007-02-201-1/+1
| | | | | | | | sizeof(buf) - 1 to sizeof(buf), since fgets takes the whole buffer size. Based on diff from Charles Longeau <chl at tuxfamily dot org> long ago. OK millert@.
* regen, DEV_RANDOM is gonehenning2007-02-151-5/+0
|
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.