[Bug 62459] mod_jk: Forwarding URLs containing escaped slashes (e.g. for REST services) fail with syntactical-wrong double-escaping

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62459 --- Comment #4 from Guido Jäkel --- (In reply to Mark Thomas from comment #3) > Can you please provide an example of a URI presented by a client that > demonstrates this issue. Dear Mark, A real world example is http://nbn-resolving.org/urn

[Bug 62459] mod_jk: Forwarding URLs containing escaped slashes (e.g. for REST services) fail with syntactical-wrong double-escaping

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62459 --- Comment #3 from Mark Thomas --- Can you please provide an example of a URI presented by a client that demonstrates this issue. -- You are receiving this mail because: You are the assignee for the bug. -

[Bug 58287] Questionable use of "Global" objects on Windows

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=58287 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

svn commit: r1838573 - in /tomcat/jk/trunk: native/common/jk_shm.c native/iis/jk_isapi_plugin.c xdocs/miscellaneous/changelog.xml

2018-08-21 Thread markt
Author: markt Date: Tue Aug 21 17:39:32 2018 New Revision: 1838573 URL: http://svn.apache.org/viewvc?rev=1838573&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=58287 Common: Use Local, rather than Global, mutexs on Windows to better support multi-user environments. Modified:

[Bug 54027] isapi send request to outside address instead of internal address if server is in NAT

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=54027 Mark Thomas changed: What|Removed |Added Resolution|--- |WONTFIX Status|NEW

svn commit: r1838569 - /tomcat/jk/trunk/native/common/jk_connect.c

2018-08-21 Thread markt
Author: markt Date: Tue Aug 21 16:35:43 2018 New Revision: 1838569 URL: http://svn.apache.org/viewvc?rev=1838569&view=rev Log: Fix typo Modified: tomcat/jk/trunk/native/common/jk_connect.c Modified: tomcat/jk/trunk/native/common/jk_connect.c URL: http://svn.apache.org/viewvc/tomcat/jk/trunk

[Bug 54117] access violation exception in isapi_redirect.dll

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=54117 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: JK release

2018-08-21 Thread Igal Sapir
On 8/21/2018 8:54 AM, Igal Sapir wrote: On 8/21/2018 2:42 AM, Mark Thomas wrote: There are quite a few open issues and enhancements and I very much doubt I'll be able to get to all of them so if any C coders have some spare cycles to help out that would be great (no JK experience necessary - t

[Bug 62626] Tomcat 9.0.10 APR/Native crashes

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62626 --- Comment #16 from Christopher Schultz --- (In reply to jan.pfeifer from comment #13) > Two last Thread reports: > > --- T H R E A D --- > > Current thread (0x2f30d800): JavaThread > "https-openssl-apr-443

Re: JK release

2018-08-21 Thread Igal Sapir
On 8/21/2018 2:42 AM, Mark Thomas wrote: Hi all, It is getting on for 6 months since the last JK release so I am planning on making a sweep of the open bugs, fixing what I can, tagging and calling a release vote. I'm hoping to be able to tag by the end of the week but, as always, circumstances

[Bug 60745] False positive: Somebody try to hack into the site!!!

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=60745 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1838553 - in /tomcat/jk/trunk: native/iis/jk_isapi_plugin.c xdocs/miscellaneous/changelog.xml

2018-08-21 Thread markt
Author: markt Date: Tue Aug 21 14:39:03 2018 New Revision: 1838553 URL: http://svn.apache.org/viewvc?rev=1838553&view=rev Log: ISAPI: Remove the check that rejects requests that contain path segments that match WEB-INF or META-INF as it duplicates a check that Tomcat performs and, because ISAPI

[Bug 62626] Tomcat 9.0.10 APR/Native crashes

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62626 --- Comment #15 from Christopher Schultz --- (In reply to jan.pfeifer from comment #13) > (In reply to Christopher Schultz from comment #12) > > > Just to confirm: this is Java 8 with APR+OpenSSL, not NIO+OpenSSL, correct? > > Yes, actual con

svn commit: r1838548 - /tomcat/trunk/java/org/apache/tomcat/util/http/MimeHeaders.java

2018-08-21 Thread markt
Author: markt Date: Tue Aug 21 14:05:11 2018 New Revision: 1838548 URL: http://svn.apache.org/viewvc?rev=1838548&view=rev Log: Trivial format fixes Modified: tomcat/trunk/java/org/apache/tomcat/util/http/MimeHeaders.java Modified: tomcat/trunk/java/org/apache/tomcat/util/http/MimeHeaders.jav

Re: Removing check for WEB-INF and META-INF from JK ISAPI redirector

2018-08-21 Thread Rainer Jung
Am 21.08.2018 um 14:05 schrieb Mark Thomas: Hi, I've been looking into [1] which is - essentially - that a request for http:///examples/servlets/servlet/RequestInfoExample/WEB-INF will fail when it should be allowed. Currently the JK ISAPI redirector rejects any request with a path segment th

Removing check for WEB-INF and META-INF from JK ISAPI redirector

2018-08-21 Thread Mark Thomas
Hi, I've been looking into [1] which is - essentially - that a request for http:///examples/servlets/servlet/RequestInfoExample/WEB-INF will fail when it should be allowed. Currently the JK ISAPI redirector rejects any request with a path segment that is WEB-INF or META-INF irrespective of case

[Bug 60745] False positive: Somebody try to hack into the site!!!

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=60745 --- Comment #1 from Mark Thomas --- I can confirm that the false positive is still present however I can't recreate the issue of the user being blocked until the filter is reloaded. -- You are receiving this mail because: You are the assignee

Re: JK release

2018-08-21 Thread Martin Knoblauch
Hi Mark, at minimum I should be able review and test. Thanks Martin On Tue, Aug 21, 2018 at 11:42 AM Mark Thomas wrote: > Hi all, > > It is getting on for 6 months since the last JK release so I am planning > on making a sweep of the open bugs, fixing what I can, tagging and > calling a relea

JK release

2018-08-21 Thread Mark Thomas
Hi all, It is getting on for 6 months since the last JK release so I am planning on making a sweep of the open bugs, fixing what I can, tagging and calling a release vote. I'm hoping to be able to tag by the end of the week but, as always, circumstances may mean that that timescale slips. There

[Bug 62169] Not able to compile mod_jk on MacOS

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62169 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1838527 - in /tomcat/native/trunk: native/Makefile.in xdocs/miscellaneous/changelog.xml

2018-08-21 Thread michaelo
Author: michaelo Date: Tue Aug 21 08:16:42 2018 New Revision: 1838527 URL: http://svn.apache.org/viewvc?rev=1838527&view=rev Log: BZ-62641: libbtool invocations should use --tag=CC When using the provided libtool from APR on a different platform/compiler libtool does not properly link against lib

[Bug 62641] libtool invocations should use --tag=CC

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62641 Michael Osipov <1983-01...@gmx.net> changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 62641] libtool invocations should use --tag=CC

2018-08-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62641 Michael Osipov <1983-01...@gmx.net> changed: What|Removed |Added Depends on||62640 Referenced