You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by tr...@apache.org on 2013/06/22 17:31:13 UTC
svn commit: r1495744 - /httpd/httpd/branches/2.2.x/STATUS
Author: trawick
Date: Sat Jun 22 15:31:13 2013
New Revision: 1495744
URL: http://svn.apache.org/r1495744
Log:
core: Limit ap_pregsub() to 64MB, add ap_pregsub_ex() for longer strings.
Modified:
httpd/httpd/branches/2.2.x/STATUS
Modified: httpd/httpd/branches/2.2.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/STATUS?rev=1495744&r1=1495743&r2=1495744&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/STATUS (original)
+++ httpd/httpd/branches/2.2.x/STATUS Sat Jun 22 15:31:13 2013
@@ -238,6 +238,23 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
2.2.x patch: http://people.apache.org/~minfrin/httpd-mod_cache-tmppath.patch
+1: minfrin
+ * core: Limit ap_pregsub() to 64MB, add ap_pregsub_ex() for longer strings.
+ The default limit can be adjusted at compile time using AP_PREGSUB_MAXLEN.
+ mod_setenvif: Log error on substitution overflow.
+
+ IMPORTANT: This could break existing configurations which rely on
+ substitutions > 64MB. Those sites need to rebuild with an
+ override of AP_PREGSUB_MAXLEN.
+ 2.4.x has a much smaller limit on ap_pregsub() because that change
+ was introduced with the new release.
+
+ trunk patch:
+ util.c: too many to list, as it is tied up in other added features and follow-
+ up fixes; I started with 2.4.x HEAD and backed out some semantic changes
+ in the code of interest
+ mod_setenvif.c: http://svn.apache.org/viewvc?view=revision&revision=1198966
+ 2.2.x patch: http://people.apache.org/~trawick/ap_pregsub_ex_22x-2.txt
+ +1: trawick
PATCHES/ISSUES THAT ARE STALLED