Received: (qmail 61352 invoked by uid 501); 7 Jul 2000 11:30:36 -0000 Message-Id: <20000707113036.61351.qmail@locus.apache.org> Date: 7 Jul 2000 11:30:36 -0000 From: Petr Olivka Reply-To: petr.olivka@vsb.cz To: submit@bugz.apache.org Subject: Path to user home page is badly created in mod_userdir.c X-Send-Pr-Version: 3.110 >Number: 6283 >Category: mod_userdir >Synopsis: Path to user home page is badly created in mod_userdir.c >Confidential: no >Severity: serious >Priority: medium >Responsible: apache >State: closed >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Fri Jul 07 04:40:00 PDT 2000 >Closed-Date: Mon Jan 29 21:23:07 PST 2001 >Last-Modified: Mon Jan 29 21:23:07 PST 2001 >Originator: petr.olivka@vsb.cz >Release: 1.3.12 >Organization: >Environment: Novell Netware 5.0, binary dist. from apache.org. >Description: on line 263 in mod_userdir.c is this condition: if (userdir[0] == '\0' || ap_os_is_path_absolute(userdir)) but at this moment string in userdir can't contain absolute path in Netware ! I have test user POLI with home dir sys:/home/poli[/public.www] and my url is http://nwserver/~poli and now I prepare in the httpd.conf the next configurations of UserDir: 1. UserDir sys:/home/*/public.www answer: Not Found The requested URL /~poli was not found on this server. 2. UserDir sys:/home/* answer: Not Found The requested URL /sys:/home/poli was not found on this server. 3. UserDir /home/* answer: Not Found The requested URL /~poli was not found on this server. 4. UserDir sys:/home/*/public.www/:/ answer: Not Found The requested URL /sys:/home/poli/public.www/:/ was not found on this server. 5. UserDir sys:/home/*/:/ answer: Request-URI Too Large The requested URL's length exceeds the capacity limit for this server. request failed: URI too long 6. UserDir public.www Alias ~poli sys:/home/poli/public.www answer: OK .... work fine You can see, that in case 2 and 4 is condition on line 263 true, but created path is not found on server. In case 4 is UserDir in bad format, but contains string :/, because absolute path in netware is tested as strstr( path, ":/" ). It is only for testing purpose. Case 5 is condition probably true too, but create infinite loop. UserDir is bad here, is created only for testing. It is not real path in netware. Unknown problem is in case 2., where create path /sys:/home/poli can't be found. alias ~poli sys:/home/poli/public.www work fine. Maybe the slash on the begin. >How-To-Repeat: Try examples above. >Fix: Here is three source line from mod_userdir.c if (strchr(userdir, '*')) x = ap_getword(r->pool, &userdir, '*'); if (userdir[0] == '\0' || ap_os_is_path_absolute(userdir)) { On netware can't be absolute path tested, because on line above can be userdir modified. and created path can't contains / on the begin. I have't compiler for netware to test it. Please send me contact, who ported apache for netware to help solve this problem. thanks poli >Release-Note: >Audit-Trail: From: Petr Olivka To: gnats-admin@bugz.apache.org, apache-bugdb@apache.org Cc: apbugs@apache.org Subject: Re: mod_userdir/6283: new version of mod_userdir.c for Netware and ApacheC.NLM. Date: Fri, 8 Sep 2000 15:14:23 +0200 (CEST) Hi ! on http://poli.cs.vsb.cz/novell/apache is new version of ApacheC.NLM and modified source code to use Apache on Netware. Petr Olivka Comment-Added-By: wrowe Comment-Added-When: Thu Jan 25 20:20:47 PST 2001 Comment-Added: This problem (a duplicate of PR 5826) has been corrected in Apache 1.3.17. Thank you for your interest in the Apache httpd project! State-Changed-From-To: open-closed State-Changed-By: wrowe State-Changed-When: Mon Jan 29 21:23:06 PST 2001 State-Changed-Why: This should already be closed. Fix is in 1.3.17. Class-Changed-From-To: mistaken-sw-bug Class-Changed-By: wrowe Class-Changed-When: Mon Jan 29 21:23:06 PST 2001 >Unformatted: [In order for any reply to be added to the PR database, you need] [to include in the Cc line and make sure the] [subject line starts with the report component and number, with ] [or without any 'Re:' prefixes (such as "general/1098:" or ] ["Re: general/1098:"). If the subject doesn't match this ] [pattern, your message will be misfiled and ignored. The ] ["apbugs" address is not added to the Cc line of messages from ] [the database automatically because of the potential for mail ] [loops. If you do not include this Cc, your reply may be ig- ] [nored unless you are responding to an explicit request from a ] [developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]