Kristyna Streitova
1177533e53
*) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr'
always evaluates to true in 2.4.64 (cve.mitre.org)
A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond
expr ..." tests evaluating as "true".
Users are recommended to upgrade to version 2.4.65, which fixes
the issue.
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=721
49 lines
1.6 KiB
C
49 lines
1.6 KiB
C
/* Include the required headers from httpd */
|
|
#include "httpd.h"
|
|
#include "http_core.h"
|
|
#include "http_protocol.h"
|
|
#include "http_request.h"
|
|
|
|
/* Define prototypes of our functions in this module */
|
|
static void register_hooks(apr_pool_t *pool);
|
|
static int example_handler(request_rec *r);
|
|
|
|
/* Define our module as an entity and assign a function for registering hooks */
|
|
|
|
module AP_MODULE_DECLARE_DATA example_module =
|
|
{
|
|
STANDARD20_MODULE_STUFF,
|
|
NULL, // Per-directory configuration handler
|
|
NULL, // Merge handler for per-directory configurations
|
|
NULL, // Per-server configuration handler
|
|
NULL, // Merge handler for per-server configurations
|
|
NULL, // Any directives we may have for httpd
|
|
register_hooks // Our hook registering function
|
|
};
|
|
|
|
|
|
/* register_hooks: Adds a hook to the httpd process */
|
|
static void register_hooks(apr_pool_t *pool)
|
|
{
|
|
|
|
/* Hook the request handler */
|
|
ap_hook_handler(example_handler, NULL, NULL, APR_HOOK_LAST);
|
|
}
|
|
|
|
/* The handler function for our module.
|
|
* This is where all the fun happens!
|
|
*/
|
|
|
|
static int example_handler(request_rec *r)
|
|
{
|
|
/* First off, we need to check if this is a call for the "example" handler.
|
|
* If it is, we accept it and do our things, it not, we simply return DECLINED,
|
|
* and Apache will try somewhere else.
|
|
*/
|
|
if (!r->handler || strcmp(r->handler, "example-handler")) return (DECLINED);
|
|
|
|
// The first thing we will do is write a simple "Hello, world!" back to the client.
|
|
ap_rputs("Hello, world!<br/>\n", r);
|
|
return OK;
|
|
}
|