Return-Path: X-Original-To: apmail-httpd-cvs-archive@www.apache.org Delivered-To: apmail-httpd-cvs-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 616EB9E46 for ; Tue, 10 Jul 2012 14:14:33 +0000 (UTC) Received: (qmail 43728 invoked by uid 500); 10 Jul 2012 14:14:33 -0000 Delivered-To: apmail-httpd-cvs-archive@httpd.apache.org Received: (qmail 43665 invoked by uid 500); 10 Jul 2012 14:14:33 -0000 Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list cvs@httpd.apache.org Received: (qmail 43658 invoked by uid 99); 10 Jul 2012 14:14:33 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 10 Jul 2012 14:14:33 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.4] (HELO eris.apache.org) (140.211.11.4) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 10 Jul 2012 14:14:32 +0000 Received: from eris.apache.org (localhost [127.0.0.1]) by eris.apache.org (Postfix) with ESMTP id 6F4F623888E4; Tue, 10 Jul 2012 14:14:12 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r1359691 - in /httpd/httpd/branches/2.4.x: CHANGES STATUS modules/aaa/mod_authz_core.c Date: Tue, 10 Jul 2012 14:14:12 -0000 To: cvs@httpd.apache.org From: jim@apache.org X-Mailer: svnmailer-1.0.8-patched Message-Id: <20120710141412.6F4F623888E4@eris.apache.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: jim Date: Tue Jul 10 14:14:11 2012 New Revision: 1359691 URL: http://svn.apache.org/viewvc?rev=1359691&view=rev Log: Merge r1311183 from trunk: Fix parsing of Require arguments in . Add some logging and an assert for a case that should not happen. PR: 53048 Submitted by: sf Reviewed/backported by: jim Modified: httpd/httpd/branches/2.4.x/CHANGES httpd/httpd/branches/2.4.x/STATUS httpd/httpd/branches/2.4.x/modules/aaa/mod_authz_core.c Modified: httpd/httpd/branches/2.4.x/CHANGES URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?rev=1359691&r1=1359690&r2=1359691&view=diff ============================================================================== --- httpd/httpd/branches/2.4.x/CHANGES [utf-8] (original) +++ httpd/httpd/branches/2.4.x/CHANGES [utf-8] Tue Jul 10 14:14:11 2012 @@ -8,6 +8,9 @@ Changes with Apache 2.4.3 possible XSS for a site where untrusted users can upload files to a location with MultiViews enabled. [Niels Heinen ] + *) mod_authz_core: Fix parsing of Require arguments in . + PR 53048. [Stefan Fritsch] + *) mod_log_config: Fix %{abc}C truncating cookie values at first "=". PR 53104. [Greg Ames] Modified: httpd/httpd/branches/2.4.x/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/STATUS?rev=1359691&r1=1359690&r2=1359691&view=diff ============================================================================== --- httpd/httpd/branches/2.4.x/STATUS (original) +++ httpd/httpd/branches/2.4.x/STATUS Tue Jul 10 14:14:11 2012 @@ -88,12 +88,6 @@ RELEASE SHOWSTOPPERS: PATCHES ACCEPTED TO BACKPORT FROM TRUNK: [ start all new proposals below, under PATCHES PROPOSED. ] - * mod_authz_core: Fix parsing of Require arguments in . - Add some logging and an assert for a case that should not happen. - PR: 53048 - Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1311183 - 2.4 patch: Trunk patch works - +1: sf, covener, jim PATCHES PROPOSED TO BACKPORT FROM TRUNK: Modified: httpd/httpd/branches/2.4.x/modules/aaa/mod_authz_core.c URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/modules/aaa/mod_authz_core.c?rev=1359691&r1=1359690&r2=1359691&view=diff ============================================================================== --- httpd/httpd/branches/2.4.x/modules/aaa/mod_authz_core.c (original) +++ httpd/httpd/branches/2.4.x/modules/aaa/mod_authz_core.c Tue Jul 10 14:14:11 2012 @@ -221,6 +221,14 @@ static authz_status authz_alias_check_au r->per_dir_config = orig_dir_config; } + else { + ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02305) + "no alias provider found for '%s' (BUG?)", + provider_name); + } + } + else { + ap_assert(provider_name != NULL); } return ret; @@ -305,6 +313,14 @@ static const char *authz_require_alias_s "Unknown Authz provider: %s", provider_name); } + if (prvdraliasrec->provider->parse_require_line) { + const char *err = prvdraliasrec->provider->parse_require_line(cmd, + provider_args, &prvdraliasrec->provider_parsed_args); + if (err) + return apr_psprintf(cmd->pool, + "Can't parse 'Require %s %s': %s", + provider_name, provider_args, err); + } authcfg = ap_get_module_config(cmd->server->module_config, &authz_core_module);