]> git.ipfire.org Git - thirdparty/apache/httpd.git/commitdiff
core: Limit ap_pregsub() to 64MB, add ap_pregsub_ex() for longer strings.
authorJeff Trawick <trawick@apache.org>
Sat, 22 Jun 2013 15:31:13 +0000 (15:31 +0000)
committerJeff Trawick <trawick@apache.org>
Sat, 22 Jun 2013 15:31:13 +0000 (15:31 +0000)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1495744 13f79535-47bb-0310-9956-ffa450edef68

STATUS

diff --git a/STATUS b/STATUS
index 9a37246e4314ca0d1e3d89414636749d57fd299c..76e3a81f4693340b1a6b819a2978cbc8233327c7 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -238,6 +238,23 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
     2.2.x patch: http://people.apache.org/~minfrin/httpd-mod_cache-tmppath.patch
     +1: minfrin
 
+  * core: Limit ap_pregsub() to 64MB, add ap_pregsub_ex() for longer strings.
+    The default limit can be adjusted at compile time using AP_PREGSUB_MAXLEN.
+    mod_setenvif: Log error on substitution overflow.
+
+    IMPORTANT: This could break existing configurations which rely on 
+               substitutions > 64MB.  Those sites need to rebuild with an
+               override of AP_PREGSUB_MAXLEN.
+               2.4.x has a much smaller limit on ap_pregsub() because that change
+               was introduced with the new release.
+
+    trunk patch:
+       util.c: too many to list, as it is tied up in other added features and follow-
+               up fixes; I started with 2.4.x HEAD and backed out some semantic changes
+               in the code of interest
+       mod_setenvif.c: http://svn.apache.org/viewvc?view=revision&revision=1198966
+    2.2.x patch: http://people.apache.org/~trawick/ap_pregsub_ex_22x-2.txt
+    +1: trawick
 
 PATCHES/ISSUES THAT ARE STALLED