You are viewing a plain text version of this content. The canonical link for it is here.
Posted to apache-bugdb@apache.org by "Edward S. Marshall" <em...@xnet.com> on 1997/09/11 20:40:04 UTC

suexec/1120: suexec does not parse arguments to #exec cmd

>Number:         1120
>Category:       suexec
>Synopsis:       suexec does not parse arguments to #exec cmd
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    apache (Apache HTTP Project)
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Thu Sep 11 11:40:03 1997
>Originator:     emarshal@xnet.com
>Organization:
apache
>Release:        1.2.4
>Environment:
SunOS hurricane 5.5.1 Generic_103640-03 sun4u sparc SUNW,Ultra-1, GCC 2.7.2
>Description:
A passing arguments to #exec cmd works fine when not using suEXEC,
but suEXEC dies on this when trying to execute the command.
>How-To-Repeat:
<!--#exec cmd="blah.pl blah=foo"--> used to pass "blah=foo" on the
command line. suEXEC dies on this since it cannot lstat the whole
string.
>Fix:
Change suEXEC to break "cmd" out into a command, and arguments to it.
Patches to fix the problem are available at http://www.xnet.com/~emarshal/suexec.diff 
>Audit-Trail:
>Unformatted: