Bug report for Apache httpd-1.3 [2009/08/23]

2009-08-24 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|10744|New|Nor|2002-07-12|suexec might fail to open log file|
|10747|New|Maj|2002-07-12|ftp SIZE command and 'smart' ftp servers results i|
|10760|New|Maj|2002-07-12|empty ftp directory listings from cached ftp direc|
|14518|Opn|Reg|2002-11-13|QUERY_STRING parts not incorporated by mod_rewrite|
|16013|Opn|Nor|2003-01-13|Fooling mod_autoindex + IndexIgnore   |
|16631|Inf|Min|2003-01-31|.htaccess errors logged outside the virtual host l|
|17318|Inf|Cri|2003-02-23|Abend on deleting a temporary cache file if proxy |
|19279|Inf|Min|2003-04-24|Invalid chmod options in solaris build|
|21637|Inf|Nor|2003-07-16|Timeout causes a status code of 200 to be logged  |
|21777|Inf|Min|2003-07-21|mod_mime_magic doesn't handle little gif files|
|22618|New|Maj|2003-08-21|MultiViews invalidates PATH_TRANSLATED if cgi-wrap|
|25057|Inf|Maj|2003-11-27|Empty PUT access control in .htaccess overrides co|
|26126|New|Nor|2004-01-14|mod_include hangs with request body   |
|26152|Ass|Nor|2004-01-15|Apache 1.3.29 and below directory traversal vulner|
|26790|New|Maj|2004-02-09|error deleting old cache file |
|29257|Opn|Nor|2004-05-27|Problem with apache-1.3.31 and mod_frontpage (dso,|
|29498|New|Maj|2004-06-10|non-anonymous ftp broken in mod_proxy |
|29538|Ass|Enh|2004-06-12|No facility used in ErrorLog to syslog|
|30207|New|Nor|2004-07-20|Piped logs don't close read end of pipe   |
|30877|New|Nor|2004-08-26|htpasswd clears passwd file on Sun when /var/tmp i|
|30909|New|Cri|2004-08-28|sporadic segfault resulting in broken connections |
|31975|New|Nor|2004-10-29|httpd-1.3.33: buffer overflow in htpasswd if calle|
|32078|New|Enh|2004-11-05|clean up some compiler warnings   |
|32539|New|Trv|2004-12-06|[PATCH] configure --enable-shared= brocken on SuSE|
|32974|Inf|Maj|2005-01-06|Client IP not set |
|33086|New|Nor|2005-01-13|unconsistency betwen 404 displayed path and server|
|33495|Inf|Cri|2005-02-10|Apache crashes with WSADuplicateSocket failed for|
|33772|New|Nor|2005-02-28|inconsistency in manual and error reporting by sue|
|33875|New|Enh|2005-03-07|Apache processes consuming CPU|
|34108|New|Nor|2005-03-21|mod_negotiation changes mtime to mtime of Document|
|34114|New|Nor|2005-03-21|Apache could interleave log entries when writing t|
|34404|Inf|Blk|2005-04-11|RewriteMap prg can not handle fpout   |
|34571|Inf|Maj|2005-04-22|Apache 1.3.33 stops logging  vhost|
|34573|Inf|Maj|2005-04-22|.htaccess not working / mod_auth_mysql|
|35424|New|Nor|2005-06-20|httpd disconnect in Timeout on CGI|
|35439|New|Nor|2005-06-21|Problem with remove /../ in util.c and mod_rewri|
|35547|Inf|Maj|2005-06-29|Problems with libapreq 1.2 and Apache::Cookie |
|3|New|Nor|2005-06-30|Can't find DBM on Debian Sarge|
|36375|Opn|Nor|2005-08-26|Cannot include http_config.h from C++ file|
|37166|New|Nor|2005-10-19|Under certain conditions, mod_cgi delivers an empt|
|37252|New|Reg|2005-10-26|gen_test_char reject NLS string   |
|38989|New|Nor|2006-03-15|restart + piped logs stalls httpd for 24 minutes (|
|39104|New|Enh|2006-03-25|[FR] fix build with -Wl,--as-needed   |
|39287|New|Nor|2006-04-12|Incorrect If-Modified-Since validation (due to syn|
|39937|New|Nor|2006-06-30|Garbage output if README.html is gzipped or compre|
|40224|Ver|Nor|2006-08-10|System time crashes Apache @year 2038 (win32 only?|
|41279|New|Nor|2007-01-02|Apache 1.3.37 htpasswd is vulnerable to buffer ove|
|42355|New|Maj|2007-05-08|Apache 1.3 permits non-rfc HTTP error code = 600 |
|43626|New|Maj|2007-10-15|r-path_info returning invalid value  |
|44768|New|Blk|2008-04-07|Server suddenly reverted to showing test page only|
|44926|New|Nor|2008-05-02|1.3.41 binary downloads are faulty MSIs   |

Re: Detecting when KeepAlive connection timeouts (retrieving the browser fd)

2009-08-24 Thread Sorin Manolache
On Mon, Aug 24, 2009 at 00:08, Alexander
Farberalexander.far...@gmail.com wrote:
 Hello,

 I have a multiplayer game with Flash clients:

 1) The Flash client sends HTTP requests to the Apache module,
 2) then the module write()s it over a Unix pipe to the game daemon,
 3) then the Apache module read()s the daemon's response
 4) and finally ap_rwrite()s it back to the browser.

 Because I want to implement a server push,
 my game daemon doesn't write() anything back
 to the Apache module when there are no new infos,
 but blocks instead (i.e. the step 3 above blocks).

 When the blocking HTTP requests timeouts,
 I notice this at the Flash client and just restart it.

 My problem is that at the game daemon side
 I don't notice this, since the Apache module
 itself can only notice the timeout in the step 4
 (but it doesn't come sofar - it blocks in step 3).

 So I think I should select() or poll() on 2 fds
 in my Apache module - one is the Unix pipe
 to the game daemon and another fd should
 be the socket fd to the browser.

 My question is how do I retrieve the latter fd,
 so that I can select() or poll() on it?


Hook pre_connection(conn_rec *c, void *csd)

The csd is the abstract type apr_socket_t. This one has a field
socketdes. I think this is the descriptor you are looking for.

Please note that I base my recommendation on Apache 2.2.x (not 1.3.x)!
Also, I have not tried out the solution I'm proposing ;-).

S

 Thank you
 Alex

 PS: I'm using Apache 1.3.29 on OpenBSD 4.5 with
   KeepAlive On and KeepAliveTimeout 300




-- 
A: Because it reverses the logical flow of conversation.
Q: Why is top-posting frowned upon?
A: Top-posting.
Q: What is the most annoying thing in e-mail?


Re: Apache HTTP Server development

2009-08-24 Thread Akins, Brian
Patches welcome.

On 8/23/09 11:58 PM, tim robertson tim...@email.com wrote:

 . Events will 
 help Apache server handle lots of concurrent connections because currently
 Apache cannot handle 10,000 concurrent connections on a low end single core
 server without Apache crashing or running very slow.

FWIW, we very easily handle 50k+ concurrent connections on fairly modest
hardware - 4 total cores, 4-8GB of RAM.  (That's a very affordable server.)
If you need to handle 10k concurrent clients and only have a single core
box, you have other issues.



-- 
Brian Akins




Re: Apache HTTP Server development

2009-08-24 Thread Jorge Schrauwen
Speaking of fastCGI, wasn't a fastCGI module donated to the incubator?

Maybe it's time to look more into it if people aren't already.

~Jorge



On Mon, Aug 24, 2009 at 8:24 PM, Akins, Brianbrian.ak...@turner.com wrote:
 On 8/24/09 1:58 PM, Paul Querna p...@querna.org wrote:

 They then switch to lighttpd, because it is so much faster, mostly
 because it runs all the dynamic langauges via FastCGI, like we should.

 +1

 I still like the idea (maybe it was yours, Paul) of running basically
 everything externally using HTTP as the protocol.  Especially, if we
 supported things like basic external process management (like fcgid ) and
 ability to use domain sockets as well as TCP (it may be academic, but there
 can be some nice performance gains).

 I still like lua embedded, though. (Or something similar)


 --
 Brian Akins
 Chief Operations Engineer
 Turner Digital Media Technologies




Re: svn commit: r806010 - in /httpd/httpd/trunk: include/ap_listen.h server/listen.c

2009-08-24 Thread Ruediger Pluem


On 08/20/2009 01:55 AM, n...@apache.org wrote:
 Author: niq
 Date: Wed Aug 19 23:55:14 2009
 New Revision: 806010
 
 URL: http://svn.apache.org/viewvc?rev=806010view=rev
 Log:
 Don't require all listeners to be created equal ...
 
 Modified:
 httpd/httpd/trunk/include/ap_listen.h
 httpd/httpd/trunk/server/listen.c

What is the idea or use case for this change? Currently I am having
trouble figuring this out.

Regards

Rüdiger



Re: svn commit: r806692 - in /httpd/httpd/trunk/modules/database: mod_dbd.c mod_dbd.h

2009-08-24 Thread Ruediger Pluem


On 08/21/2009 09:40 PM, n...@apache.org wrote:
 Author: niq
 Date: Fri Aug 21 19:40:17 2009
 New Revision: 806692
 
 URL: http://svn.apache.org/viewvc?rev=806692view=rev
 Log:
 Switch mod_dbd to using APR_STATUS_IS_foo macros in error handling
 
 Modified:
 httpd/httpd/trunk/modules/database/mod_dbd.c
 httpd/httpd/trunk/modules/database/mod_dbd.h
 

 
 Modified: httpd/httpd/trunk/modules/database/mod_dbd.h
 URL: 
 http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/database/mod_dbd.h?rev=806692r1=806691r2=806692view=diff
 ==
 --- httpd/httpd/trunk/modules/database/mod_dbd.h (original)
 +++ httpd/httpd/trunk/modules/database/mod_dbd.h Fri Aug 21 19:40:17 2009
 @@ -116,7 +116,7 @@
  APR_DECLARE_OPTIONAL_FN(void, ap_dbd_prepare, (server_rec*, const char*, 
 const char*));
  
  APR_DECLARE_EXTERNAL_HOOK(dbd, DBD, apr_status_t, post_connect,
 -  (apr_pool_t *, dbd_cfg_t *, ap_dbd_t *));
 +  (apr_pool_t *, dbd_cfg_t *, ap_dbd_t *))

Why this one?

Regards

Rüdiger


Re: Apache HTTP Server development

2009-08-24 Thread Ruediger Pluem


On 08/24/2009 09:13 PM, Jorge Schrauwen wrote:
 Speaking of fastCGI, wasn't a fastCGI module donated to the incubator?
 
 Maybe it's time to look more into it if people aren't already.
 
 ~Jorge

Besides the existing proxy module in trunk, the donation of mod_fcgid
is already there:

http://svn.apache.org/viewvc/httpd/mod_fcgid/

Regards

Rüdiger



Re: Apache HTTP Server development

2009-08-24 Thread William A. Rowe, Jr.
Ruediger Pluem wrote:
 
 On 08/24/2009 09:13 PM, Jorge Schrauwen wrote:
 Speaking of fastCGI, wasn't a fastCGI module donated to the incubator?

 Maybe it's time to look more into it if people aren't already.

 ~Jorge
 
 Besides the existing proxy module in trunk, the donation of mod_fcgid
 is already there:
 
 http://svn.apache.org/viewvc/httpd/mod_fcgid/

It appears folks neglected to update the site, for example;

http://httpd.apache.org/modules/
http://httpd.apache.org/download.html

I'm prepared to do so over the next few days with a 2.3.1 release candidate,
after resolving the envvar flaws.

Bill


Re: svn commit: r807015 - in /httpd/httpd/trunk: CHANGES modules/http/http_request.c

2009-08-24 Thread Joe Orton
On Sun, Aug 23, 2009 at 08:30:47PM -, n...@apache.org wrote:
 Author: niq
 Date: Sun Aug 23 20:30:47 2009
 New Revision: 807015
 
 URL: http://svn.apache.org/viewvc?rev=807015view=rev
 Log:
 Preserve port over internal redirection
 PR#35999
 A four-year-old buglet!

Please, please, please, can you follow the standard format for commit 
messages with MIMEy context headers, which has been used since the 
dinosaurs roamed the earth.


Description of changes.

PR: 35999
Submitted by: Person Who Wrote the Patch If Not You persons address.com


Regards, Joe


Re: Apache HTTP Server development

2009-08-24 Thread Jeff Trawick
On Mon, Aug 24, 2009 at 4:11 PM, William A. Rowe, Jr.
wr...@rowe-clan.netwrote:

 Ruediger Pluem wrote:
 
  On 08/24/2009 09:13 PM, Jorge Schrauwen wrote:
  Speaking of fastCGI, wasn't a fastCGI module donated to the incubator?
 
  Maybe it's time to look more into it if people aren't already.
 
  ~Jorge
 
  Besides the existing proxy module in trunk, the donation of mod_fcgid
  is already there:
 
  http://svn.apache.org/viewvc/httpd/mod_fcgid/

 It appears folks neglected to update the site, for example;

 http://httpd.apache.org/modules/
 http://httpd.apache.org/download.html

 I'm prepared to do so over the next few days with a 2.3.1 release
 candidate,


great; I was thinking about that a few hours ago -- high time to put out an
*ASF* release of that beast, even though there aren't a great number of
fixes since 2.2



 after resolving the envvar flaws.

 Bill



Re: svn commit: r807368 - /httpd/mod_fcgid/trunk/mod_fcgid/CHANGES

2009-08-24 Thread Ruediger Pluem


On 08/24/2009 10:35 PM, wr...@apache.org wrote:
 Author: wrowe
 Date: Mon Aug 24 20:35:09 2009
 New Revision: 807368
 
 URL: http://svn.apache.org/viewvc?rev=807368view=rev
 Log:
 Note changes
 
 Modified:
 httpd/mod_fcgid/trunk/mod_fcgid/CHANGES
 
 Modified: httpd/mod_fcgid/trunk/mod_fcgid/CHANGES
 URL: 
 http://svn.apache.org/viewvc/httpd/mod_fcgid/trunk/mod_fcgid/CHANGES?rev=807368r1=807367r2=807368view=diff
 ==
 --- httpd/mod_fcgid/trunk/mod_fcgid/CHANGES [utf8] (original)
 +++ httpd/mod_fcgid/trunk/mod_fcgid/CHANGES [utf8] Mon Aug 24 20:35:09 2009
 @@ -1,5 +1,12 @@
   -*- coding: utf-8 
 -*-
 -Changes with mod_fcgid 2.3
 +Changes with mod_fcgid 2.3.1
 +
 +  *) Provide a default, manditory environment as with mod_cgi (with the

Should that be mandatory instead?

Regards

Rüdiger


Re: svn commit: r806010 - in /httpd/httpd/trunk: include/ap_listen.h server/listen.c

2009-08-24 Thread Nick Kew


On 20 Aug 2009, at 21:07, Ruediger Pluem wrote:




On 08/20/2009 01:55 AM, n...@apache.org wrote:

Author: niq
Date: Wed Aug 19 23:55:14 2009
New Revision: 806010

URL: http://svn.apache.org/viewvc?rev=806010view=rev
Log:
Don't require all listeners to be created equal ...

Modified:
httpd/httpd/trunk/include/ap_listen.h
httpd/httpd/trunk/server/listen.c


What is the idea or use case for this change? Currently I am having
trouble figuring this out.


Think perchild.  No, that's not what I'm working on (wait-and-see),
but it's somewhat analagous with child processes.

Basically I want to spawn children that'll have different roles,
to be determined at child startup.  And they may also sit at
different nodes of a virtual network.  The children are basically
HTTPD slaves, and need to be able to re-use existing
MPM code (any MPM) but have their own dedicated listeners.

--
Nick Kew


Re: svn commit: r806692 - in /httpd/httpd/trunk/modules/database: mod_dbd.c mod_dbd.h

2009-08-24 Thread Nick Kew


On 22 Aug 2009, at 06:00, Ruediger Pluem wrote:


 APR_DECLARE_EXTERNAL_HOOK(dbd, DBD, apr_status_t, post_connect,
-  (apr_pool_t *, dbd_cfg_t *, ap_dbd_t *));
+  (apr_pool_t *, dbd_cfg_t *, ap_dbd_t *))


Why this one?


Oh, er, just shutting up a compiler warning about an empty declaration.
Didn't seem as significant as the real change in the .c.

--
Nick Kew