DO NOT REPLY [Bug 35122] New: - Apache does not accept IPv6 addresses with a scope id in the Host: header

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=35122>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=35122

           Summary: Apache does not accept IPv6 addresses with a scope id in
                    the Host: header
           Product: Apache httpd-2.0
           Version: 2.0.54
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: henryk@ploetzli.ch


When entering a scoped IPv6 address (e.g.
http://[fe80::23a:45ff:fe42:4aac%wlan0]/) in my browser (Galeon, Firefox, etc.)
that same address is put in the HTTP Host: header (which is correct in my
opinion). Apache then responds with a 400 Bad Request and logs "Client sent
malformed Host header" in the error log. 

The problem is in fix_hostname() in server/vhost.c:715. Before that line
apr_parse_addr_port() is called and parses the address correctly, but
    if (rv != APR_SUCCESS || scope_id) {
        goto bad;
    }
rejects it.

Reproduceable: Always
Steps to reproduce: (replace fe80::23a:45ff:fe42:4aac%wlan0 with an actual
link-local IPv6 address and the corresponding interface)
1. telnet -6 fe80::23a:45ff:fe42:4aac%wlan0 80
2. Enter 
GET / HTTP/1.1
Host: [fe80::23a:45ff:fe42:4aac%wlan0]
Connection: close

Actual result: 400 Bad Request error
Expected result: No error

Suggested fix: Remove the || scope_id on the beforementioned line.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org