DO NOT REPLY [Bug 32022] New: - Support for Apache 2.1-dev API changes?

2004-11-02 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=32022. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

Re: cvs commit: httpd-2.0/modules/mappers mod_rewrite.c

2004-11-02 Thread Geoffrey Young
(though with proxy issues on HEAD mod_rewrite [P] stuff is still completely broken). yeah. if I have the time I'll try to track down exactly the revision that caused this failure so it can also be added to showstoppers, if merely so somebody takes the time to explicitly address it. not sure

Re: Event MPM

2004-11-02 Thread Greg Ames
William A. Rowe, Jr. wrote: Someone cried wolf, b.t.w., about connection and request pool allocation being too tightly coupled to threads. They can be decoupled pretty painlessly, by tying an allocator to a single connection object. We can presume that request pools will be a subpool of each

Re: [PATCH] pipelining bug in Event MPM

2004-11-02 Thread Greg Ames
Justin Erenkrantz wrote: On Mon, Nov 01, 2004 at 08:39:47PM -0500, Greg Ames wrote: This makes it behave properly on my laptop with speculative reads. I have no idea if it works with mod_ssl or what speculative buys us. mod_ssl will most likely work correctly without changes. -- justin Let's

Re: [PATCH] CAN-2004-0942 fix

2004-11-02 Thread =?ISO-8859-15?Q?Andr=E9?= Malo
* Joe Orton [EMAIL PROTECTED] wrote: http://lists.netsys.com/pipermail/full-disclosure/2004-November/028248.html describes a memory consumption DoS against 2.0, which has been assigned CVE CAN-2004-0942; in the case given, ap_rgetline_core will allocate approx N * 3 bytes to hold the line,

Re: [PATCH]: LDAP Authz (was: Ldap Authorization)

2004-11-02 Thread Brad Nicholes
I took a quick look at this patch and it seems to work well as long as all of the listed attributes are OR'ed together. I don't have a good suggestion yet, but is there a way to implement the logic so that attributes could be also AND'ed together? Or even a NOT-EQUAL operation? Brad [EMAIL

Re: [PATCH]: LDAP Authz (was: Ldap Authorization)

2004-11-02 Thread Ryan Morgan
Thats a tricky one.. We could introduce a new directive AuthLDAPRequireAll on|off that would control this behavior. I'm open to other ideas too.. -Ryan On Nov 2, 2004, at 5:19 PM, Brad Nicholes wrote: I took a quick look at this patch and it seems to work well as long as all of the listed