Re: httpd test framework svn repo borked?

2022-01-14 Thread William A Rowe Jr
On Fri, Jan 14, 2022 at 4:08 AM Stefan Sperling wrote: > > On Thu, Jan 13, 2022 at 07:17:27PM -0600, William A Rowe Jr wrote: > > Thanks Stefan, it's attempting [locally] to replace a file, which was > > just created during the > > checkout (which might even be open). > > Hmm. I assume SVN would

Re: Possible apr 1.7.1 showstopper from httpd test framework

2022-01-14 Thread William A Rowe Jr
On Fri, Jan 14, 2022 at 5:44 AM Joe Orton wrote: > > On Fri, Jan 14, 2022 at 11:37:35AM +0100, Ruediger Pluem wrote: > > > > On 1/14/22 6:47 AM, William A Rowe Jr wrote: > > > In addition to a broken release of brotli (where enc/dec don't specify > > > -lbrotlicommon, > > > even on trunk, for

Re: [Regression in httpd 2.4.52] mod_dav: Potentially unbounded memory usage in PROPFIND with dav_get_props() and dav_propfind_walker()

2022-01-14 Thread Ruediger Pluem
On 1/14/22 1:57 PM, Evgeny Kotkov wrote: > Hi, > > I might have stumbled across a regression in httpd 2.4.52 where mod_dav was > changed in a way where dav_get_props() now allocates data in resource->pool. > > I think that r1879889 [1] is the change that is causing the new behavior. > This

[Regression in httpd 2.4.52] mod_dav: Potentially unbounded memory usage in PROPFIND with dav_get_props() and dav_propfind_walker()

2022-01-14 Thread Evgeny Kotkov
Hi, I might have stumbled across a regression in httpd 2.4.52 where mod_dav was changed in a way where dav_get_props() now allocates data in resource->pool. I think that r1879889 [1] is the change that is causing the new behavior. This change has been backported to 2.4.x in r1895893 [2].

Re: Possible apr 1.7.1 showstopper from httpd test framework

2022-01-14 Thread Joe Orton
On Fri, Jan 14, 2022 at 11:37:35AM +0100, Ruediger Pluem wrote: > > > On 1/14/22 6:47 AM, William A Rowe Jr wrote: > > In addition to a broken release of brotli (where enc/dec don't specify > > -lbrotlicommon, > > even on trunk, for openssl and other consumers to ferret out that binding), > >

Re: Possible apr 1.7.1 showstopper from httpd test framework

2022-01-14 Thread Ruediger Pluem
On 1/14/22 6:47 AM, William A Rowe Jr wrote: > In addition to a broken release of brotli (where enc/dec don't specify > -lbrotlicommon, > even on trunk, for openssl and other consumers to ferret out that binding), > and > lots of fun changes to build flags in curl 7.81 minor release (who does

Re: httpd test framework svn repo borked?

2022-01-14 Thread Stefan Sperling
On Thu, Jan 13, 2022 at 07:17:27PM -0600, William A Rowe Jr wrote: > Thanks Stefan, it's attempting [locally] to replace a file, which was > just created during the > checkout (which might even be open). Hmm. I assume SVN would close such files based on APR pool lifetime. Handling of the