httpd-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From dgau...@hyperreal.org
Subject cvs commit: apache-1.3 STATUS
Date Sat, 14 Feb 1998 13:17:54 GMT
dgaudet     98/02/14 05:17:53

  Modified:    .        STATUS
  Log:
  yeah this too
  
  Revision  Changes    Path
  1.153     +11 -4     apache-1.3/STATUS
  
  Index: STATUS
  ===================================================================
  RCS file: /export/home/cvs/apache-1.3/STATUS,v
  retrieving revision 1.152
  retrieving revision 1.153
  diff -u -r1.152 -r1.153
  --- STATUS	1998/02/14 13:15:02	1.152
  +++ STATUS	1998/02/14 13:17:53	1.153
  @@ -4,6 +4,7 @@
   
       2.0  : In pre-alpha development
   	    see: <http://www.arctic.org/~dgaudet/apache/2.0/process-model>
  +    1.3b6: in development
       1.3b5: Tagged APACHE_1_3b5
       1.3b4: Internal version... not tagged or released.
       1.3b3: Released and announced
  @@ -198,9 +199,6 @@
   
    Help:
   
  -    * numerous uses of strcpy and strcat have potential for buffer
  -      overflow, someone should rewrite or verify they're safe
  -
       * process/thread model
   	- need dynamic thread creation/destruction, similar to 
   	  Unix process model
  @@ -289,5 +287,14 @@
   	- mod_mime_magic.c (needs access to mod_mime API stage...)
   
       * do something to disable bogus warnings
  -    
  +
  +WIN32 1.3 FINAL RELEASE SHOWSTOPPERS:
  +
       * SECURITY: PR#1203 still needs to be dealt with for WIN32
  +
  +    * SECURITY: check if the magic con/aux/nul/etc names do anything
  +	really bad
  +
  +    * SECURITY: numerous uses of strcpy and strcat have potential
  +	for buffer overflow, someone should rewrite or verify
  +	they're safe
  
  
  

Mime
View raw message