httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From r..@ai.mit.edu (Robert S. Thau)
Subject Re: YMB (yet more bugs)
Date Tue, 04 Apr 1995 14:40:38 GMT
   Date: Tue, 4 Apr 1995 10:08:05 -0800 (PST)
   From: Brian Behlendorf <brian@wired.com>
   Precedence: bulk
   Reply-To: new-httpd@hyperreal.com


   BUG 1:

   This is a weird one, one I had known existed in NCSA but I thought we had 
   cleared up before but for some reason persists.

   If you have a CGI script in a regular directory (because you enabled the 
   .cgi type) and you give it a PATH_INFO of just "/", instead of executing 
   the script it returns the text of the script.  This can be seen at

   http://www.hotwired.com/Changepass/renew.cgi/

Try this:

*** http_script.c	Tue Apr  4 14:35:10 1995
--- ../http_script.c	Tue Apr  4 14:34:45 1995
***************
*** 57,63 ****
      *need_multi = 0;
      path_args[0] = '\0';
  
!     for (cp = end; cp > path;) {
        
  	/* See if the pathname ending here exists... */
        
--- 57,68 ----
      *need_multi = 0;
      path_args[0] = '\0';
  
!     /* Advance over trailing slashes ... NOT part of filename */
! 
!     for (cp = end; cp > path && cp[-1] == '/'; --cp)
! 	continue;
!     
!     while (cp > path) {
        
  	/* See if the pathname ending here exists... */
        


   BUG 3:  Maybe not really a bug, but if I have MultiViews turned on and I 
   hit a directory without specifying a file (i.e. 
   http://hyperreal.com/incoming/) the error_log records something like

   [Tue Apr  4 11:03:59 1995] httpd: access to /export/pub/incoming/index 
   failed for totally.wired.com, reason: File not found; no multi in this directory

Hmmm... I can certainly see this occuring with MultiViews turned off
(which is what the "no multi in this directory" part means).  However,
it's pretty clearly a bug.  Fix forthcoming...

rst



Mime
View raw message