You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by tr...@apache.org on 2013/06/22 17:31:13 UTC

svn commit: r1495744 - /httpd/httpd/branches/2.2.x/STATUS

Author: trawick
Date: Sat Jun 22 15:31:13 2013
New Revision: 1495744

URL: http://svn.apache.org/r1495744
Log:
core: Limit ap_pregsub() to 64MB, add ap_pregsub_ex() for longer strings.

Modified:
    httpd/httpd/branches/2.2.x/STATUS

Modified: httpd/httpd/branches/2.2.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/STATUS?rev=1495744&r1=1495743&r2=1495744&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/STATUS (original)
+++ httpd/httpd/branches/2.2.x/STATUS Sat Jun 22 15:31:13 2013
@@ -238,6 +238,23 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
     2.2.x patch: http://people.apache.org/~minfrin/httpd-mod_cache-tmppath.patch
     +1: minfrin
 
+  * core: Limit ap_pregsub() to 64MB, add ap_pregsub_ex() for longer strings.
+    The default limit can be adjusted at compile time using AP_PREGSUB_MAXLEN.
+    mod_setenvif: Log error on substitution overflow.
+
+    IMPORTANT: This could break existing configurations which rely on 
+               substitutions > 64MB.  Those sites need to rebuild with an
+               override of AP_PREGSUB_MAXLEN.
+               2.4.x has a much smaller limit on ap_pregsub() because that change
+               was introduced with the new release.
+
+    trunk patch:
+       util.c: too many to list, as it is tied up in other added features and follow-
+               up fixes; I started with 2.4.x HEAD and backed out some semantic changes
+               in the code of interest
+       mod_setenvif.c: http://svn.apache.org/viewvc?view=revision&revision=1198966
+    2.2.x patch: http://people.apache.org/~trawick/ap_pregsub_ex_22x-2.txt
+    +1: trawick
 
 PATCHES/ISSUES THAT ARE STALLED