You are viewing a plain text version of this content. The canonical link for it is here.

Posted to cvs@httpd.apache.org by wr...@apache.org on 2016/08/22 20:45:05 UTC

svn commit: r1757269 - /httpd/httpd/branches/2.2.x/STATUS

Author: wrowe
Date: Mon Aug 22 20:45:05 2016
New Revision: 1757269

URL: http://svn.apache.org/viewvc?rev=1757269&view=rev
Log:
The first of several 2.2 backports I'll offer to get protocol logic on 2.2
in sync with 2.4, allowing us to consider much more similar backport proposals
to both.


Modified:
    httpd/httpd/branches/2.2.x/STATUS

Modified: httpd/httpd/branches/2.2.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/STATUS?rev=1757269&r1=1757268&r2=1757269&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/STATUS (original)
+++ httpd/httpd/branches/2.2.x/STATUS Mon Aug 22 20:45:05 2016
@@ -157,6 +157,16 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
 	 http://home.apache.org/~ylavic/patches/httpd-2.2.x-r1753592.patch
       +1: ylavic
 
+  *) core: Reject requests containing (invalid) NULL characters in request line
+     or request headers. (Including embedded %00 in URL).
+     (Use APR_STATUS_IS_... in some more cases.)
+     Trunk version of patch
+         http://svn.apache.org/r892678
+         http://svn.apache.org/r1100511
+         http://svn.apache.org/r1102124
+     Submitted by niq, status legibility fixes by covener, sf
+     PR: 43039
+     +1 wrowe
 
 PATCHES/ISSUES THAT ARE STALLED