mod_proxy_ftp: Prevent XSS attacks when using wildcards in the path of
the FTP URL. Discovered by Marc Bevand of Rapid7. [Ruediger Pluem]
+ *) Allow for smax to be 0 for balancer members so that all idle
+ connections are able to be dropped should they exceed ttl.
+ PR 43371 [Phil Endecott <spam_from_apache_bugzilla chezphil.org>,
+ Jim Jagielski]
+
*) mod_proxy_http: Don't trigger a retry by the client if a failure to
read the response line was the result of a timeout.
[Adam Woodworth <mirkperl gmail.com>]
PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
[ start all new proposals below, under PATCHES PROPOSED. ]
- * mod_proxy: Allow for the smax param to be 0, so that all connections
- are available to be dropped, should they be idle long enough.
- PR 43371
- Trunk version of patch:
- http://svn.apache.org/viewvc?rev=697093&view=rev
- Backport version for 2.2.x of patch:
- Trunk version of patch works
- +1: jim, rpluem, gregames
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
[ New proposals should be added at the end of the list ]
}
else if (!strcasecmp(key, "ttl")) {
/* Time in seconds that will destroy all the connections
- * that exced the smax
+ * that exceed the smax
*/
ival = atoi(val);
if (ival < 1)
(*worker)->id = proxy_lb_workers;
(*worker)->flush_packets = flush_off;
(*worker)->flush_wait = PROXY_FLUSH_WAIT;
+ (*worker)->smax = -1;
/* Increase the total worker count */
proxy_lb_workers++;
init_conn_pool(p, *worker);
proxy_worker *worker;
worker = (proxy_worker *)apr_pcalloc(p, sizeof(proxy_worker));
worker->id = proxy_lb_workers;
+ worker->smax = -1;
/* Increase the total worker count */
proxy_lb_workers++;
init_conn_pool(p, worker);
if (worker->hmax == 0 || worker->hmax > mpm_threads) {
worker->hmax = mpm_threads;
}
- if (worker->smax == 0 || worker->smax > worker->hmax) {
+ if (worker->smax == -1 || worker->smax > worker->hmax) {
worker->smax = worker->hmax;
}
/* Set min to be lower then smax */