Received: (qmail 23134 invoked by uid 2012); 25 Dec 1999 10:37:47 -0000
Message-Id: <19991225103747.23133.qmail@hyperreal.org>
Date: 25 Dec 1999 10:37:47 -0000
From: Sze Sam <sequence@netvigator.com>
Reply-To: sequence@netvigator.com
To: apbugs@hyperreal.org
Subject: Incorrect environment variable name pass from CGI, that makes executing test-cgi and printenv not properly.
X-Send-Pr-Version: 3.2

>Number:         5507
>Category:       test
>Synopsis:       Incorrect environment variable name pass from CGI, that makes executing test-cgi and printenv not properly.
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Sat Dec 25 02:40:00 PST 1999
>Last-Modified:
>Originator:     sequence@netvigator.com
>Organization:
apache
>Release:        1.3.9
>Environment:
Linux Mandrake 6.0 
Kernel 2.2.9-19
>Description:
In executing /cgi/bin/test-cgi, i get the following result:
CGI/1.0 test script report:

argc is 0. argv is .

SERVER_SOFTWARE =
SERVER_NAME =
GATEWAY_INTERFACE =
SERVER_PROTOCOL =
SERVER_PORT =
REQUEST_METHOD =
HTTP_ACCEPT = 
PATH_INFO = 
PATH_TRANSLATED = 
SCRIPT_NAME = 
QUERY_STRING = 
REMOTE_HOST =
REMOTE_ADDR =
REMOTE_USER =
AUTH_TYPE =
CONTENT_TYPE =
CONTENT_LENGTH =

In executing /cgi/bin/test-cgi, i get the following result:
________________ = 
Apache/1.3.9 Server at localhost.localdomain Port 80

_______________ = HTTP/1.0
______________ = GET
_____________ = /usr/local/apache/htdocs
____________ = 
___________ = /cgi-bin/printenv
_________ = OGSf038AAAEAAAJUFmA
____________________ = en
____ = /sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin:/usr/local/apache/bin
___________________ = iso-8859-1,*,utf-8
_________________ = CGI/1.1

It seems the environment variable name is incorrect. From the above observation,
REQUEST_METHOD is replaced as ______________, and I can only get the value in 
Perl by $ENV{______________} instead of $ENV(REQUEST METHOD).
>How-To-Repeat:
Sorry, I just run the apache locally.
>Fix:
No idea.
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, you need]
[to include <apbugs@Apache.Org> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or      ]
["Re: general/1098:").  If the subject doesn't match this       ]
[pattern, your message will be misfiled and ignored.  The       ]
["apbugs" address is not added to the Cc line of messages from  ]
[the database automatically because of the potential for mail   ]
[loops.  If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request from a  ]
[developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]