IIRF Source Control Rss Feed

Source code checked in, #99885

Project Collection Service Accounts — Mon, 01 Oct 2012 21:24:31 GMT

Upgrade: New Version of LabDefaultTemplate.xaml. To upgrade your build definitions, please visit the following link: http://go.microsoft.com/fwlink/?LinkId=254563

Source code checked in, #99884

Project Collection Service Accounts — Mon, 01 Oct 2012 21:16:08 GMT

Checked in by server upgrade

Patch Uploaded: #11944

bigeyedfish — Tue, 10 Apr 2012 23:11:45 GMT

BigEyedFish has uploaded a patch.

Description:
Here is a patch to fix the denial of service vulnerability, related to the Keep-Alive HTTP connections. The memory allocated by the AllocMem function of HTTP_FILTER_CONTEXT is only released when the connection closes. Therefore if the connection is kept alive, which is common practice for browsers and load balancers, the memory continues to leak until the connection is dropped. This scenario is easily reproducable by writing a test harness which hits the site using the same connection and the HTTP header "Connection: keep-alive".

The patch addresses this memory issue by creating a custom memory allocator on the IirfRequestContext, which uses malloc. In the places where the context was being NULL'd out, we are now freeing the context's memory and all allocated objects. We also free the memory

Source code checked in, #96710

Cheeso — Mon, 12 Mar 2012 19:24:07 GMT

workitem 32399 - version update to 2.1.2.4

Source code checked in, #96709

Cheeso — Mon, 12 Mar 2012 19:18:31 GMT

workitem 32399. adjust allocation arithmetic for Iirf_AllocAndSprintf.

Source code checked in, #96708

Cheeso — Mon, 12 Mar 2012 19:15:55 GMT

workitem 32399 - small cleanup fix

Source code checked in, #96707

Cheeso — Mon, 12 Mar 2012 19:09:35 GMT

workitem 32399: Fix bug in FormatUserAndGroups.

Source code checked in, #94150

Cheeso — Fri, 11 Nov 2011 12:37:48 GMT

workitem 31670 - update to ApplyCaseConversionInPlace() in Rewriter.c

Source code checked in, #93831

Cheeso — Thu, 27 Oct 2011 01:12:30 GMT

minor doc tweaks

Source code checked in, #93830

Cheeso — Thu, 27 Oct 2011 01:04:58 GMT

changes for build env for v2.1.2.2

Source code checked in, #93829

Cheeso — Thu, 27 Oct 2011 00:37:37 GMT

workitem 31642, from http://iirf.codeplex.com/discussions/277171. Did not default MaxFieldLength properly.

Source code checked in, #93571

Cheeso — Thu, 13 Oct 2011 22:03:54 GMT

Modify Setup project so as to not require UrlDecoder.exe

Source code checked in, #93570

Cheeso — Thu, 13 Oct 2011 21:54:35 GMT

elimination of the /nologo- warnings in compile and link for the various projects. Also fixup of build.

Source code checked in, #93511

Cheeso — Tue, 11 Oct 2011 17:26:11 GMT

extend the output of /iirfstatus to show the authenticated user and group list for the IIS w3wp.exe. This can help in diagnosing access denied problems with log files, etc. Also, fix a few benign warnings in the build.

Source code checked in, #93303

Cheeso — Thu, 06 Oct 2011 21:10:21 GMT

minor updates to IirfConfig.c , special attention to the case where no iirf.ini file exists.

Source code checked in, #93301

Cheeso — Thu, 06 Oct 2011 19:55:20 GMT

workitem 31539. Update doc on blocking requests by user agent.

Source code checked in, #93300

Cheeso — Thu, 06 Oct 2011 19:46:16 GMT

workitem 30847 - handle octothorpe properly in rewritten URLs.

Source code checked in, #93298

Cheeso — Thu, 06 Oct 2011 19:40:07 GMT

small doc updates in RewriteHeader and RewriteRule.

Source code checked in, #93297

Cheeso — Thu, 06 Oct 2011 19:39:43 GMT

workitem 31541: Introduce the new MaxFieldLength directive. Also, the default max length of a server variable or header is increased from 4k to 16k.

Source code checked in, #92528

Cheeso — Sun, 11 Sep 2011 22:21:31 GMT

workitem 31423. proper linked list management when the final element is removed, for both gVdirConfigList and gLogFileList .