Re: 1.3.26: Content-Length header too strict now

Hmmm... The problem is that an all whitespace content-length value is noted as an error. I would agree that if that is the case, Apache should default to setting it to 0. This is easy to work around. Since I've already added the ProtocolReqCheck directive, would people think it's a good idea to

time for a 2.0.40 me thinks

I'm going to do a start the TR process on thursday for a 2.0.40 release so if you've got things which you want in there and are stable (apr_poll) comes to mind please commit them. If all goes well we should have a tarball out the door this time next week. Regards Ian

Re: 1.3.26: Content-Length header too strict now

On Tue, Jul 09, 2002 at 10:21:11AM -0400, Jim Jagielski wrote: we would need to check errno just for ERANGE and then adjust the endstr check as well... Or else just keep the test as is, and allow for all blank beforehand. I think I'd prefer this method, since it provides a specific solution

Re: [patch] mod_negotiation and authorization

On Tue, Jul 02, 2002 at 10:31:53AM -0400, Rodent of Unusual Size wrote: Did anyone check this one out? (I haven't) It sounds as though it would scratch some itches.. Not many other itches, by the looks of things :-( On the assumption that it would be convenient to make available a version

RE: time for a 2.0.40 me thinks

I'm going to do a start the TR process on thursday for a 2.0.40 release so if you've got things which you want in there and are stable (apr_poll) comes to mind please commit them. If all goes well we should have a tarball out the door this time next week. Regards Ian I'll try to run a

RE: time for a 2.0.40 me thinks

At 12:18 PM 7/9/2002, Bill Stoddard wrote: I'm going to do a start the TR process on thursday for a 2.0.40 release so if you've got things which you want in there and are stable (apr_poll) comes to mind please commit them. Ian I'll try to run a profile on the new apr_poll code posted

Re: time for a 2.0.40 me thinks

William A. Rowe, Jr. wrote: At 12:18 PM 7/9/2002, Bill Stoddard wrote: I'm going to do a start the TR process on thursday for a 2.0.40 release so if you've got things which you want in there and are stable (apr_poll) comes to mind please commit them. Ian I'll try to run a profile

Re: cvs commit: apache-1.3/src/main http_protocol.c

WTF? -1 Jim, that code is doing an error check prior to the strtol. It is not looking for the start of the number, but ensuring that the number is non-negative and all digits prior to calling the library routine. A simple check of *lenp would have been sufficient for the blank case. I need

[PATCH] mpm/winnt service permissions

This patch sets the calls to OpenSCManager and OpenService to use the minimum required privileges. Index: service.c === RCS file: /home/cvspublic/httpd-2.0/server/mpm/winnt/service.c,v retrieving revision 1.56 diff -u -3 -r1.56

Re: [PATCH] mpm/winnt service permissions

At 01:40 PM 7/9/2002, you wrote: This patch sets the calls to OpenSCManager and OpenService to use the minimum required privileges. Cool. Could you cvs up to grab the latest version with Mladen's patch, compare your suggested changes to his latest changes for requested privileges, and provide

is this a bug??

while looking at another bug I stumbled onto us not setting the query string here.. (where we set the unescaped one) I was wondering if this was by design.. Index: mod_include.c === RCS file:

Re: cvs commit: apache-1.3/src/main http_protocol.c

While we are debating the best way to accomplish this Content-Length fix for the next release, I kind of need to have it working for me right now in the current released version. Therefore I've implemented this partial fix against 1.3.26 on my system: root@nueva[391] pwd

Re: cvs commit: apache-1.3/src/main http_protocol.c

Roy T. Fielding wrote: WTF? -1 Jim, that code is doing an error check prior to the strtol. It is not looking for the start of the number, but ensuring that the number is non-negative and all digits prior to calling the library routine. A simple check of *lenp would have been

Re: cvs commit: apache-1.3/src/main http_protocol.c

David Burry wrote: While we are debating the best way to accomplish this Content-Length fix for the next release, I kind of need to have it working for me right now in the current released version. Therefore I've implemented this partial fix against 1.3.26 on my system: The current CVS

[Fwd: Re: time for a 2.0.40 me thinks]

Bill Stoddard wrote: William A. Rowe, Jr. wrote: At 12:18 PM 7/9/2002, Bill Stoddard wrote: I'm going to do a start the TR process on thursday for a 2.0.40 release so if you've got things which you want in there and are stable (apr_poll) comes to mind

Re: [PATCH] mpm/winnt service permissions

Correct me if I'm wrong, but it sounds like you think this is for ApacheMonitor. This is for the winnt mpm itself. I thought your patch this morning was for the mpm just as I believe you think this is for the monitor. Shane William A. Rowe, Jr. wrote: At 01:40 PM 7/9/2002, you wrote:

recent chunked encoding fix -vs- mod_proxy...

I have a situation where I have an external-facing apache server proxying to another apache server inside a firewall. I've updated the proxying one to Apache 1.3.26 so that it won't get hacked due to the chunked encoding bug, but I'm not able to upgrade the other one behind the firewall for

Re: [PATCH] mpm/winnt service permissions

At 07:27 PM 7/9/2002, you wrote: Correct me if I'm wrong, but it sounds like you think this is for ApacheMonitor. This is for the winnt mpm itself. I thought your patch this morning was for the mpm just as I believe you think this is for the monitor. Yup... That would be it. Thanks for the