pkgsrc/www/apache22/patches/patch-as
lkundrak 31db872355 Fixes for security issues, PKGREVISION bump.
CVE-2007-3304 Denial of Service.
CVE-2006-5752 XSS in mod_status with ExtendedStatus on.
CVE-2007-1863 remote crash when mod_cache enabled.
2007-06-28 01:20:52 +00:00

14 lines
500 B
Text

$NetBSD: patch-as,v 1.1 2007/06/28 01:20:53 lkundrak Exp $
Part of fix for CVE-2007-3304 Denial of Service.
--- server/mpm/prefork/mpm.h.orig 2007-06-28 02:53:26.000000000 +0200
+++ server/mpm/prefork/mpm.h
@@ -53,6 +53,7 @@
#define AP_MPM_USES_POD 1
#define MPM_CHILD_PID(i) (ap_scoreboard_image->parent[i].pid)
#define MPM_NOTE_CHILD_KILLED(i) (MPM_CHILD_PID(i) = 0)
+#define MPM_VALID_PID(p) (getpgid(p) == getpgrp())
#define MPM_ACCEPT_FUNC unixd_accept
extern int ap_threads_per_child;