Fw: flush or pass filter brigade to avoid memory exhaustion

2011-11-15 Thread Nick Kew
Ray, looks like this got lost in the ether. I only realised it when I got your contact from my online Form! I presume you're reading where you posted! Begin forwarded message: On Mon, 14 Nov 2011 13:00:07 -0600 Ray Morris supp...@bettercgi.com wrote: I would appreciate some help with

A bug, apr_os_thread_current() not equal r-connection-current_thread

2011-11-15 Thread zhiguo zhao
Hi, I failed with this on windows with branch 2.4.x, in a handle hook, apr_os_thread_t t = apr_os_thread_current(); apr_os_thread_t *t1; apr_os_thread_get(t1, r-connection-current_thread); printf(EQUALS %d\n,apr_os_thread_equal(t,t1)); I think t and t1 must be equal, But it Not. I think

RE: Changes in mod_ssl

2011-11-15 Thread Moran Jacuel
Hello Rainer, I found out that the patch that I used in order to connect apache server with SSL using our HSM to hold the Private RSA and Certificate already exists in bugzilla at: https://issues.apache.org/bugzilla/show_bug.cgi?id=42687 We found out that this patch works well. We would like

Re: 2.3.15 RewriteRule P

2011-11-15 Thread Stefan Fritsch
Hi Steffen, On Mon, 14 Nov 2011, Steffen wrote: The issue below seems not to be related to SSL. Tested in different non-SSL configs with eg. RewriteRule /sysadmin(.*) http://%{HTTP_HOST}:81/sysadmin$1 [P,L] And different servers as the back, Sambar, Surge, DManager and Apache. Sometimes it

CVE-2011-3607, int overflow ap_pregsub()

2011-11-15 Thread Roman Drahtmueller
Hi there, Revision 1198940 attempts to fix an integer overflow in ap_pregsub() in server/util.c:394. The patch is: --- httpd/httpd/trunk/server/util.c 2011/11/07 21:09:41 1198939 +++ httpd/httpd/trunk/server/util.c 2011/11/07 21:13:40 1198940 @@ -411,6 +411,8 @@

RE: CVE-2011-3607, int overflow ap_pregsub()

2011-11-15 Thread Plüm, Rüdiger, VF-Group
The patch is fine on trunk because the affected code is not within AP_DECLARE(char *) ap_pregsub(...) but within static apr_status_t regsub_core(apr_pool_t *p, char **result, struct ap_varbuf *vb, const char *input, const char

Re: Changes in mod_ssl

2011-11-15 Thread Rainer Jung
Hello Moran, On 15.11.2011 14:54, Moran Jacuel wrote: Hello Rainer, I found out that the patch that I used in order to connect apache server with SSL using our HSM to hold the Private RSA and Certificate already exists in bugzilla at: https://issues.apache.org/bugzilla/show_bug.cgi?id=42687

setting TZ env var

2011-11-15 Thread Paul Querna
So, I was looking at all the system calls we make in a single request, and comparing it to nginx. We were actually pretty close, baring supporting our features like htaccess, there was only one thing that stood out. Glibc is opening, calling fstat twice, and then reading /etc/localtime for every

Re: svn commit: r1200040 - in /httpd/httpd/trunk: CHANGES modules/ssl/mod_ssl.c modules/ssl/ssl_engine_config.c modules/ssl/ssl_engine_init.c modules/ssl/ssl_engine_kernel.c modules/ssl/ssl_private.h

2011-11-15 Thread Paul Querna
On Sun, Nov 13, 2011 at 2:34 AM, Kaspar Brand httpd-dev.2...@velox.ch wrote: On 10.11.2011 00:37, pque...@apache.org wrote: Author: pquerna Date: Wed Nov  9 23:37:37 2011 New Revision: 1200040 URL: http://svn.apache.org/viewvc?rev=1200040view=rev Log: Add support for RFC 5077 TLS Session

Re: [VOTE] Release 2.3.15-beta as beta

2011-11-15 Thread Jim Jagielski
Which post?? The only thing on this thread is something about mod_rewrite and SSL. On Nov 14, 2011, at 4:33 PM, William A. Rowe Jr. wrote: On 11/9/2011 8:24 AM, Jim Jagielski wrote: The 2.3.15-beta (prerelease) tarballs are available for download at test:

Re: svn commit: r1202255 - /httpd/httpd/trunk/modules/filters/mod_reqtimeout.c

2011-11-15 Thread Stefan Fritsch
On Tue, 15 Nov 2011, pque...@apache.org wrote: Author: pquerna Date: Tue Nov 15 15:49:19 2011 New Revision: 1202255 URL: http://svn.apache.org/viewvc?rev=1202255view=rev Log: disable mod_reqtimeout if not configured Why that? We have just changed the default to be enabled in r1199447 and

Re: 2.3.15 RewriteRule P

2011-11-15 Thread Jim Jagielski
Am I correct in assuming this is just under Windows...?? On Nov 14, 2011, at 1:31 PM, Steffen wrote: The issue below seems not to be related to SSL. Tested in different non-SSL configs with eg. RewriteRule /sysadmin(.*) http://%{HTTP_HOST}:81/sysadmin$1 [P,L] And different servers as the

Re: [VOTE] Release 2.3.15-beta as beta

2011-11-15 Thread Jim Jagielski
I found the post... IMO, this should not hold off the release at this point... On Nov 15, 2011, at 11:57 AM, Jim Jagielski wrote: Which post?? The only thing on this thread is something about mod_rewrite and SSL.

Fwd: svn commit: r1202257 - in /httpd/httpd/trunk/server/mpm/event: config3.m4 equeue.c equeue.h event.c

2011-11-15 Thread Rüdiger Plüm
Original-Nachricht Betreff:svn commit: r1202257 - in /httpd/httpd/trunk/server/mpm/event: config3.m4 equeue.c equeue.h event.c Datum: Tue, 15 Nov 2011 15:51:04 GMT Von:pque...@apache.org Author: pquerna Date: Tue Nov 15 15:51:03 2011 New Revision: 1202257

Re: svn commit: r1202256 - /httpd/httpd/trunk/server/mpm/event/event.c

2011-11-15 Thread Stefan Fritsch
On Tue, 15 Nov 2011, pque...@apache.org wrote: Author: pquerna Date: Tue Nov 15 15:50:09 2011 New Revision: 1202256 URL: http://svn.apache.org/viewvc?rev=1202256view=rev Log: Instead of disabling the listening sockets from the pollset when under load, just stop calling the accept call, but

[ANNOUNCE] Apache HTTP Server 2.3.15-beta Released

2011-11-15 Thread Jim Jagielski
Apache HTTP Server 2.3.15-beta Released The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.3.15-beta of the Apache HTTP Server (Apache). This version of Apache is our forth (and likely final) beta release to test new

Re: [VOTE] Release 2.3.15-beta as beta

2011-11-15 Thread William A. Rowe Jr.
On 11/15/2011 11:22 AM, Jim Jagielski wrote: I found the post... IMO, this should not hold off the release at this point... It's beta, they get to keep all the pieces :) But it suggests the ap_pregsub fix is not ready for 2.2-stable, not until this is rooted out.

Re: [ANNOUNCE] Apache HTTP Server 2.3.15-beta Released

2011-11-15 Thread William A. Rowe Jr.
On 11/15/2011 11:31 AM, Jim Jagielski wrote: Apache HTTP Server 2.3.15-beta Released The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.3.15-beta of the Apache HTTP Server (Apache). This version of Apache is our forth

Re: svn commit: r1202257 - in /httpd/httpd/trunk/server/mpm/event: config3.m4 equeue.c equeue.h event.c

2011-11-15 Thread Paul Querna
On Tue, Nov 15, 2011 at 9:25 AM, Rüdiger Plüm ruediger.pl...@vodafone.com wrote: Original-Nachricht Betreff: svn commit: r1202257 - in /httpd/httpd/trunk/server/mpm/event: config3.m4 equeue.c equeue.h event.c Datum: Tue, 15 Nov 2011 15:51:04 GMT Von: pque...@apache.org

Re: svn commit: r1202255 - /httpd/httpd/trunk/modules/filters/mod_reqtimeout.c

2011-11-15 Thread Paul Querna
On Tue, Nov 15, 2011 at 9:17 AM, Stefan Fritsch s...@sfritsch.de wrote: On Tue, 15 Nov 2011, pque...@apache.org wrote: Author: pquerna Date: Tue Nov 15 15:49:19 2011 New Revision: 1202255 URL: http://svn.apache.org/viewvc?rev=1202255view=rev Log: disable mod_reqtimeout if not configured

Re: svn commit: r1202255 - /httpd/httpd/trunk/modules/filters/mod_reqtimeout.c

2011-11-15 Thread Stefan Fritsch
On Tuesday 15 November 2011, Paul Querna wrote: On Tue, Nov 15, 2011 at 9:17 AM, Stefan Fritsch s...@sfritsch.de wrote: On Tue, 15 Nov 2011, pque...@apache.org wrote: Author: pquerna Date: Tue Nov 15 15:49:19 2011 New Revision: 1202255 URL:

Re: setting TZ env var

2011-11-15 Thread Issac Goldstand
On 15/11/2011 18:06, Paul Querna wrote: but is there any objections to the concept of setting the timezone on process startup? This single change gives about a 2% performance boost in my testing. To merge to trunk I'd like to have it detect your active timezone, instead of forcing UTC+0,

Re: svn commit: r1202255 - /httpd/httpd/trunk/modules/filters/mod_reqtimeout.c

2011-11-15 Thread William A. Rowe Jr.
On 11/15/2011 12:33 PM, Stefan Fritsch wrote: On Tuesday 15 November 2011, Paul Querna wrote: On Tue, Nov 15, 2011 at 9:17 AM, Stefan Fritschs...@sfritsch.de wrote: On Tue, 15 Nov 2011, pque...@apache.org wrote: Author: pquerna Date: Tue Nov 15 15:49:19 2011 New Revision: 1202255 URL:

Re: setting TZ env var

2011-11-15 Thread William A. Rowe Jr.
On 11/15/2011 10:06 AM, Paul Querna wrote: To merge to trunk I'd like to have it detect your active timezone, instead of forcing UTC+0, but if you changed timezones on your machine, you will need to restart httpd. Thoughts? If it did so (extract the correct offset) then I'd be +1. I'm not

Re: svn commit: r1202395 - /httpd/httpd/trunk/server/mpm/event/event.c

2011-11-15 Thread Jeff Trawick
On Tue, Nov 15, 2011 at 2:38 PM, traw...@apache.org wrote: Author: trawick Date: Tue Nov 15 19:38:31 2011 New Revision: 1202395 URL: http://svn.apache.org/viewvc?rev=1202395view=rev Log: spellcheck r1202258 actually, it needs a little more than that, but I couldn't move forward past the

Re: svn commit: r1202255 - /httpd/httpd/trunk/modules/filters/mod_reqtimeout.c

2011-11-15 Thread Jeff Trawick
On Tue, Nov 15, 2011 at 2:32 PM, William A. Rowe Jr. wr...@rowe-clan.net wrote: On 11/15/2011 12:33 PM, Stefan Fritsch wrote: On Tuesday 15 November 2011, Paul Querna wrote: On Tue, Nov 15, 2011 at 9:17 AM, Stefan Fritschs...@sfritsch.de wrote: On Tue, 15 Nov 2011, pque...@apache.org

Re: setting TZ env var

2011-11-15 Thread William A. Rowe Jr.
On 11/15/2011 10:06 AM, Paul Querna wrote: One way to fix this, is to set the TZ environment variable. For example: https://github.com/pquerna/httpd/commit/37e5815a70e88a733cd088398d016803146b545f Without modifying TZ, what happens to the profiling if a call to tzset() is added at

Re: A bug, apr_os_thread_current() not equal r-connection-current_thread

2011-11-15 Thread William A. Rowe Jr.
On 11/15/2011 7:43 AM, zhiguo zhao wrote: Hi, I failed with this on windows with branch 2.4.x, in a handle hook, apr_os_thread_t t = apr_os_thread_current(); apr_os_thread_t *t1; apr_os_thread_get(t1, r-connection-current_thread); printf(EQUALS %d\n,apr_os_thread_equal(t,t1)); I think t

Re: setting TZ env var

2011-11-15 Thread Issac Goldstand
On 15/11/2011 21:35, William A. Rowe Jr. wrote: On 11/15/2011 10:06 AM, Paul Querna wrote: To merge to trunk I'd like to have it detect your active timezone, instead of forcing UTC+0, but if you changed timezones on your machine, you will need to restart httpd. Thoughts? If it did so

Re: setting TZ env var

2011-11-15 Thread William A. Rowe Jr.
On 11/15/2011 4:28 PM, Issac Goldstand wrote: I'd likely -1 anything that assumed without allowing the user to specify an override. what on earth is wrong with --- ../httpd-2.x/support/apachectl.in (revision 1198625) +++ ../httpd-2.x/support/apachectl.in (working copy) @@ -44,6 +44,9 @@

Re: 2.3.15 RewriteRule P

2011-11-15 Thread Stefan Fritsch
On Monday 14 November 2011, William A. Rowe Jr. wrote: On 11/14/2011 12:31 PM, Steffen wrote: The issue below seems not to be related to SSL. Tested in different non-SSL configs with eg. RewriteRule /sysadmin(.*) http://%{HTTP_HOST}:81/sysadmin$1 [P,L] And different servers as the

Re: A bug, apr_os_thread_current() not equal r-connection-current_thread

2011-11-15 Thread zhiguo zhao
Why not. In mpm\winnt\child.c /* * worker_main() * Main entry point for the worker threads. Worker threads block in * win*_get_connection() awaiting a connection to service. */ static DWORD __stdcall worker_main(void *thread_num_val) { apr_thread_t *thd = NULL; apr_os_thread_t osthd;

Re: A bug, apr_os_thread_current() not equal r-connection-current_thread

2011-11-15 Thread zhiguo zhao
Sorry, I make a mistack. apr_os_thread_t t = apr_os_thread_current(); apr_os_thread_t *t1; apr_os_thread_get(t1, r-connection-current_thread); printf(EQUALS %d\n,apr_os_thread_equal(t, *t1)); Tow different type data to comp, so it's will fail.

Re: setting TZ env var

2011-11-15 Thread Issac Goldstand
On 16/11/2011 01:06, William A. Rowe Jr. wrote: On 11/15/2011 4:28 PM, Issac Goldstand wrote: I'd likely -1 anything that assumed without allowing the user to specify an override. what on earth is wrong with --- ../httpd-2.x/support/apachectl.in (revision 1198625) +++