httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ryan Morgan <rmor...@covalent.net>
Subject [PATCH] Bug in <LimitExcept>
Date Mon, 19 Mar 2001 23:01:49 GMT

There is a problem with LimitExcept that causes Apache to enter an infinite 
loop when a user tries to remove an extended method.  I am not sure about
the status of the extended methods code in Apache, but this problem is easily
reproduce-able with the following configuration:

<Location />
   <Limit FOO BAR>
      order deny,allow
      deny from all
   </Limit>
</Location>
  
<Location /allowfooandbar>
   <LimitExcept FOO BAR>
      order deny,allow
      allow from all
   <LimitExcept>
</Location>

This causes Apache to enter a for loop where the exit condition will never
be met.  A patch is attached.

A quick side question... Has anybody thought about reworking mod_access, etc,
to allow for extended methods?  It looks to me like only methods that are
recognized by the server will work since bitmasks of r->method_num are used
everywhere.

Thanks,

-Ryan

Mime
View raw message