Mirror of Apache HTTP Server
C M4 Shell CMake C++ Awk Other
Latest commit 5da25a4 Dec 6, 2016 @jchampio jchampio mod_auth_digest: fix segfaults during shared memory exhaustion
The apr_rmm_addr_get/apr_rmm_malloc() combination did not correctly
check for a malloc failure, leading to crashes when we ran out of the
limited space provided by AuthDigestShmemSize. This patch replaces all
these calls with a helper function that performs this check.

Additionally, fix a NULL-check bug during entry garbage collection.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1772919 13f79535-47bb-0310-9956-ffa450edef68
Failed to load latest commit information.
build add mod_proxy_hcheck to legacy build Nov 29, 2016
docs capitalize Dec 5, 2016
include ap_reclaim_child_processes(): Implement terminate immediately Nov 21, 2016
modules mod_auth_digest: fix segfaults during shared memory exhaustion Dec 6, 2016
os add mod_proxy_hcheck to legacy build Nov 29, 2016
server Optimize away one more strchr Nov 22, 2016
srclib remove leftovers from initial libapreq import Nov 13, 2011
support Fix spelling in comments and text files. Aug 11, 2016
test Fix spelling in comments and text files. Aug 11, 2016
.gdbinit .gdbinit: Add dump_skiplist. Mar 13, 2015
ABOUT_APACHE Resolves bz55123 - spaces around emdashes. Apr 15, 2015
Apache-apr2.dsw add mod_proxy_hcheck to legacy build Nov 29, 2016
Apache.dsw add mod_proxy_hcheck to legacy build Nov 29, 2016
BuildAll.dsp Add modules/examples/, and a new BuildAll dummy stub. Aug 24, 2007
BuildBin.dsp Windows traditional build files for mod_h2 Aug 26, 2015
CHANGES mod_auth_digest: fix segfaults during shared memory exhaustion Dec 6, 2016
CMakeLists.txt mod_brotli: Update makefiles to use the library layout of the official Nov 29, 2016
INSTALL avoid a copy/paste trap. Similar style used elsewhere in INSTALL. May 17, 2016
InstallBin.dsp Mirror r483555, for GUI environment. Reason for the duplication is to… Dec 7, 2006
LAYOUT Fix obvious errors. Probably the rest of the Jul 23, 2014
LICENSE skiplist is now in apr 1.5 and above Oct 2, 2013
Makefile.in Use different variables to track normal Feb 12, 2016
Makefile.win add mod_proxy_hcheck to legacy build Nov 29, 2016
NOTICE Happy New Year 2016 Jan 1, 2016
NWGNUmakefile Commit change forgotten in r1730075 (include Feb 14, 2016
README remove some broken links, point to better resources Jan 23, 2014
README.cmake Support mod_http2 in cmake-based build for Windows Oct 3, 2015
README.platforms Make up-to-date Aug 27, 2014
ROADMAP Fix a number of typos and misspellings. Reported by Ville Skytta. Oct 30, 2010
STATUS Remove obsolete TODOs for mod_ssl: Nov 30, 2013
VERSIONING fix a minor typo Feb 28, 2007
acinclude.m4 configure: remove orphaned APACHE_OUTPUT macro Jul 18, 2016
ap.d Import the core parts of the DTrace patch. This is a modified and upd… Dec 5, 2008
apache_probes.d catch up on recently-added hooks Dec 18, 2009
buildconf Just in case the Makefile is incompatible, remove the Dec 23, 2013
config.layout Introduce Slackware layout. Apr 13, 2012
configure.in configure: remove orphaned APACHE_OUTPUT macro Jul 18, 2016
emacs-style Don't use tabs. Dec 29, 2003
httpd.dsp Windows manifests are ;1 for .exe, ;2 for .dll and .so - ref: http://… Jun 11, 2008
libhttpd.dsp Add util_fcgi.h and associated definitions and support Aug 13, 2013


                          Apache HTTP Server

  What is it?

  The Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant
  web server.  Originally designed as a replacement for the NCSA HTTP
  Server, it has grown to be the most popular web server on the
  Internet.  As a project of the Apache Software Foundation, the
  developers aim to collaboratively develop and maintain a robust,
  commercial-grade, standards-based server with freely available
  source code.

  The Latest Version

  Details of the latest version can be found on the Apache HTTP
  server project page under http://httpd.apache.org/.


  The documentation available as of the date of this release is
  included in HTML format in the docs/manual/ directory.  The most
  up-to-date documentation can be found at


  Please see the file called INSTALL.  Platform specific notes can be
  found in README.platforms.


  Please see the file called LICENSE.

  Cryptographic Software Notice

  This distribution may include software that has been designed for use
  with cryptographic software.  The country in which you currently reside
  may have restrictions on the import, possession, use, and/or re-export
  to another country, of encryption software.  BEFORE using any encryption
  software, please check your country's laws, regulations and policies
  concerning the import, possession, or use, and re-export of encryption
  software, to see if this is permitted.  See <http://www.wassenaar.org/>
  for more information.

  The U.S. Government Department of Commerce, Bureau of Industry and
  Security (BIS), has classified this software as Export Commodity 
  Control Number (ECCN) 5D002.C.1, which includes information security
  software using or performing cryptographic functions with asymmetric
  algorithms.  The form and manner of this Apache Software Foundation
  distribution makes it eligible for export under the License Exception
  ENC Technology Software Unrestricted (TSU) exception (see the BIS 
  Export Administration Regulations, Section 740.13) for both object 
  code and source code.

  The following provides more details on the included files that
  may be subject to export controls on cryptographic software:

    Apache httpd 2.0 and later versions include the mod_ssl module under
    for configuring and listening to connections over SSL encrypted
    network sockets by performing calls to a general-purpose encryption
    library, such as OpenSSL or the operating system's platform-specific
    SSL facilities.

    In addition, some versions of apr-util provide an abstract interface
    for symmetrical cryptographic functions that make use of a
    general-purpose encryption library, such as OpenSSL, NSS, or the
    operating system's platform-specific facilities. This interface is
    known as the apr_crypto interface, with implementation beneath the
    /crypto directory. The apr_crypto interface is used by the
    mod_session_crypto module available under
    for optional encryption of session information.

    Some object code distributions of Apache httpd, indicated with the
    word "crypto" in the package name, may include object code for the
    OpenSSL encryption library as distributed in open source form from

  The above files are optional and may be removed if the cryptographic
  functionality is not desired or needs to be excluded from redistribution.
  Distribution packages of Apache httpd that include the word "nossl"
  in the package name have been created without the above files and are
  therefore not subject to this notice.


     o If you want to be informed about new code releases, bug fixes,
       security fixes, general news and information about the Apache server
       subscribe to the apache-announce mailing list as described under

     o If you want freely available support for running Apache please see the
       resources at <http://httpd.apache.org/support.html>

     o If you have a concrete bug report for Apache please see the instructions
       for bug reporting at <http://httpd.apache.org/bug_report.html>

     o If you want to participate in actively developing Apache please
       subscribe to the `dev@httpd.apache.org' mailing list as described at