You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@httpd.apache.org by Jeff Trawick <tr...@attglobal.net> on 2002/08/06 21:43:38 UTC

Re: cvs commit: httpd-2.0/server core.c

wrowe@apache.org writes:

> wrowe       2002/08/06 09:27:37
> 
>   Modified:    .        CHANGES
>                server   core.c
>   Log:
>     This was never a 'vulnerability'... the APR_FILEPATH_SECUREROOT flag
>     passed to apr_filepath_merge refused to merge any rooted 'addpath'.
>     However, that isn't the traditional 1.3 behavior, so fly past any
>     leading '/'s on the way to merging the uri to the DocumentRoot.
>   
>   PR: 10946

hmmm...  got some failures on Linux and FreeBSD all of a sudden...  (j'accuse :) )

Unexpected results from GET of /index.html.en:
Expected:
This page is here because the site administrator has changed
Actual:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL 0index.html.en was not found on this server.</p>
<hr />
<address>Apache/2.0.40-dev Server at 127.0.0.1 Port 8096</address>
</body></html>

New error_log entries:
[Tue Aug 06 15:18:36 2002] [notice] SIGUSR1 received.  Doing graceful restart
[Tue Aug 06 15:18:39 2002] [info] mod_unique_id: using ip addr 24.88.250.182
[Tue Aug 06 15:18:40 2002] [notice] Apache/2.0.40-dev (Unix) DAV/2 configured -- resuming normal operations
[Tue Aug 06 15:18:40 2002] [info] Server built: Aug  6 2002 15:07:15
[Tue Aug 06 15:18:40 2002] [debug] worker.c(1736): AcceptMutex: fcntl (default: sysvsem)
[Tue Aug 06 15:18:40 2002] [error] [client 127.0.0.1] File does not exist: /home/regress/regress/install/htdocs/0index.html.en

New access_log entries:
127.0.0.1 - - [06/Aug/2002:15:18:40 -0400] "GET /index.html.en" 404 285

-- 
Jeff Trawick | trawick@attglobal.net
Born in Roswell... married an alien...