75fd8aa481
- normalize patch-pcre.diff into makepatch format - All 4 CVE patches are included upstream and part of 2.0.64 - part of the local apxs.in changes are upstream now too - some patches were regenerated for offset updates ** There is NO security update here. ** Changes: http://www.apache.org/dist/httpd/CHANGES_2.0 With Hat: apache@ <ChangeLog> *) SECURITY: CVE-2010-1452 (cve.mitre.org) mod_dav: Fix Handling of requests without a path segment. PR: 49246 [Mark Drayton, Jeff Trawick] *) SECURITY: CVE-2009-1891 (cve.mitre.org) Fix a potential Denial-of-Service attack against mod_deflate or other modules, by forcing the server to consume CPU time in compressing a large file after a client disconnects. PR 39605. [Joe Orton, Ruediger Pluem] *) SECURITY: CVE-2009-3095 (cve.mitre.org) mod_proxy_ftp: sanity check authn credentials. [Stefan Fritsch <sf fritsch.de>, Joe Orton] *) SECURITY: CVE-2009-3094 (cve.mitre.org) mod_proxy_ftp: NULL pointer dereference on error paths. [Stefan Fritsch <sf fritsch.de>, Joe Orton] *) SECURITY: CVE-2009-3555 (cve.mitre.org) mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection attack when compiled against OpenSSL version 0.9.8m or later. Introduces the 'SSLInsecureRenegotiation' directive to reopen this vulnerability and offer unsafe legacy renegotiation with clients which do not yet support the new secure renegotiation protocol, RFC 5746. [Joe Orton, and with thanks to the OpenSSL Team] *) SECURITY: CVE-2009-3555 (cve.mitre.org) mod_ssl: A partial fix for the TLS renegotiation prefix injection attack for OpenSSL versions prior to 0.9.8l; reject any client-initiated renegotiations. Forcibly disable keepalive for the connection if there is any buffered data readable. Any configuration which requires renegotiation for per-directory/location access control is still vulnerable, unless using openssl 0.9.8l or later. [Joe Orton, Ruediger Pluem, Hartmut Keil <Hartmut.Keil adnovum.ch>, Rainer Jung] *) SECURITY: CVE-2010-0434 (cve.mitre.org) Ensure each subrequest has a shallow copy of headers_in so that the parent request headers are not corrupted. Elimiates a problematic optimization in the case of no request body. PR 48359 [Jake Scott, William Rowe, Ruediger Pluem] *) SECURITY: CVE-2008-2364 (cve.mitre.org) mod_proxy_http: Better handling of excessive interim responses from origin server to prevent potential denial of service and high memory usage. Reported by Ryujiro Shibuya. [Ruediger Pluem, Joe Orton, Jim Jagielski] *) SECURITY: CVE-2010-0425 (cve.mitre.org) mod_isapi: Do not unload an isapi .dll module until the request processing is completed, avoiding orphaned callback pointers. [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick] *) SECURITY: CVE-2008-2939 (cve.mitre.org) mod_proxy_ftp: Prevent XSS attacks when using wildcards in the path of the FTP URL. Discovered by Marc Bevand of Rapid7. [Ruediger Pluem] *) Fix recursive ErrorDocument handling. PR 36090 [Chris Darroch] *) mod_ssl: Do not do overlapping memcpy. PR 45444 [Joe Orton] *) Add Set-Cookie and Set-Cookie2 to the list of headers allowed to pass through on a 304 response. [Nick Kew] *) apxs: Fix -A and -a options to ignore whitespace in httpd.conf [Philip M. Gollucci] </ChangeLog>
148 lines
5.4 KiB
C
148 lines
5.4 KiB
C
--- ./include/ap_regex.h.orig 2010-10-21 05:40:53.671621395 +0000
|
|
+++ ./include/ap_regex.h 2010-10-21 05:40:53.672627949 +0000
|
|
@@ -0,0 +1,145 @@
|
|
+/* Copyright 1999-2005 The Apache Software Foundation or its licensors, as
|
|
+ * applicable.
|
|
+ *
|
|
+ * Licensed under the Apache License, Version 2.0 (the "License");
|
|
+ * you may not use this file except in compliance with the License.
|
|
+ * You may obtain a copy of the License at
|
|
+ *
|
|
+ * http://www.apache.org/licenses/LICENSE-2.0
|
|
+ *
|
|
+ * Unless required by applicable law or agreed to in writing, software
|
|
+ * distributed under the License is distributed on an "AS IS" BASIS,
|
|
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
+ * See the License for the specific language governing permissions and
|
|
+ * limitations under the License.
|
|
+ */
|
|
+
|
|
+/* This is the header for the POSIX wrapper interface to the PCRE Perl-
|
|
+Compatible Regular Expression library. It defines the things POSIX says should
|
|
+be there. I hope.
|
|
+
|
|
+ Copyright (c) 1997-2004 University of Cambridge
|
|
+
|
|
+-----------------------------------------------------------------------------
|
|
+Redistribution and use in source and binary forms, with or without
|
|
+modification, are permitted provided that the following conditions are met:
|
|
+
|
|
+ * Redistributions of source code must retain the above copyright notice,
|
|
+ this list of conditions and the following disclaimer.
|
|
+
|
|
+ * Redistributions in binary form must reproduce the above copyright
|
|
+ notice, this list of conditions and the following disclaimer in the
|
|
+ documentation and/or other materials provided with the distribution.
|
|
+
|
|
+ * Neither the name of the University of Cambridge nor the names of its
|
|
+ contributors may be used to endorse or promote products derived from
|
|
+ this software without specific prior written permission.
|
|
+
|
|
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
|
|
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
+POSSIBILITY OF SUCH DAMAGE.
|
|
+-----------------------------------------------------------------------------
|
|
+*/
|
|
+
|
|
+#ifndef AP_REGEX_H
|
|
+#define AP_REGEX_H
|
|
+
|
|
+/* Have to include stdlib.h in order to ensure that size_t is defined. */
|
|
+
|
|
+#include <stdlib.h>
|
|
+
|
|
+/* Allow for C++ users */
|
|
+
|
|
+#ifdef __cplusplus
|
|
+extern "C" {
|
|
+#endif
|
|
+
|
|
+/* Options for ap_regexec: */
|
|
+
|
|
+#define AP_REG_ICASE 0x01 /** use a case-insensitive match */
|
|
+#define AP_REG_NEWLINE 0x02 /** don't match newlines against '.' etc */
|
|
+#define AP_REG_NOTBOL 0x04 /** ^ will not match against start-of-string */
|
|
+#define AP_REG_NOTEOL 0x08 /** $ will not match against end-of-string */
|
|
+
|
|
+#define AP_REG_EXTENDED (0) /** unused */
|
|
+#define AP_REG_NOSUB (0) /** unused */
|
|
+
|
|
+/* Error values: */
|
|
+enum {
|
|
+ AP_REG_ASSERT = 1, /** internal error ? */
|
|
+ AP_REG_ESPACE, /** failed to get memory */
|
|
+ AP_REG_INVARG, /** invalid argument */
|
|
+ AP_REG_NOMATCH /** match failed */
|
|
+};
|
|
+
|
|
+/* The structure representing a compiled regular expression. */
|
|
+typedef struct {
|
|
+ void *re_pcre;
|
|
+ size_t re_nsub;
|
|
+ size_t re_erroffset;
|
|
+} ap_regex_t;
|
|
+
|
|
+typedef int regoff_t;
|
|
+
|
|
+/* The structure in which a captured offset is returned. */
|
|
+typedef struct {
|
|
+ regoff_t rm_so;
|
|
+ regoff_t rm_eo;
|
|
+} ap_regmatch_t;
|
|
+
|
|
+#ifndef AP_DECLARE
|
|
+#define AP_DECLARE(x) x
|
|
+#endif /* AP_DECLARE */
|
|
+
|
|
+/* The functions */
|
|
+
|
|
+/**
|
|
+ * Compile a regeular expression.
|
|
+ * @param preg Returned compiled regex
|
|
+ * @param regex The regular expression string
|
|
+ * @param cflags Must be zero (currently).
|
|
+ * @return Zero on success or non-zero on error
|
|
+ */
|
|
+AP_DECLARE(int) ap_regcomp(ap_regex_t *preg, const char *regex, int cflags);
|
|
+
|
|
+/**
|
|
+ * Match a null-terminated string against a pre-compiled regex.
|
|
+ * @param preg The pre-compiled regex
|
|
+ * @param string The string to match
|
|
+ * @param nmatch Provide information regarding the location of any matches
|
|
+ * @param pmatch Provide information regarding the location of any matches
|
|
+ * @param eflags Bitwise OR of any of AP_REG_* flags
|
|
+ * @return 0 for successful match, #REG_NOMATCH otherwise
|
|
+ */
|
|
+AP_DECLARE(int) ap_regexec(const ap_regex_t *preg, const char *string,
|
|
+ size_t nmatch, ap_regmatch_t *pmatch, int eflags);
|
|
+
|
|
+/**
|
|
+ * Return the error code returned by regcomp or regexec into error messages
|
|
+ * @param errcode the error code returned by regexec or regcomp
|
|
+ * @param preg The precompiled regex
|
|
+ * @param errbuf A buffer to store the error in
|
|
+ * @param errbuf_size The size of the buffer
|
|
+ */
|
|
+AP_DECLARE(size_t) ap_regerror(int errcode, const ap_regex_t *preg,
|
|
+ char *errbuf, size_t errbuf_size);
|
|
+
|
|
+/** Destroy a pre-compiled regex.
|
|
+ * @param preg The pre-compiled regex to free.
|
|
+ */
|
|
+AP_DECLARE(void) ap_regfree(ap_regex_t *preg);
|
|
+
|
|
+#ifdef __cplusplus
|
|
+} /* extern "C" */
|
|
+#endif
|
|
+
|
|
+#endif /* AP_REGEX_T */
|
|
+
|