You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2016/11/23 15:09:02 UTC

[Bug 60408] New: ProxyPassReverse relative redirect handling breaks subsequent ProxyPassReverses

https://bz.apache.org/bugzilla/show_bug.cgi?id=60408

            Bug ID: 60408
           Summary: ProxyPassReverse relative redirect handling breaks
                    subsequent ProxyPassReverses
           Product: Apache httpd-2
           Version: 2.4.23
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_proxy_http
          Assignee: bugs@httpd.apache.org
          Reporter: pmh1wheel@gmail.com
  Target Milestone: ---

Created attachment 34469
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34469&action=edit
Patch to reset URL length each time around the loop

Although it's not HTTP compliant, there is code in apache to handle reverse
mapping of relative redirects, and it has a bug which affects any subsequent
ProxyPassRedirect statements, whether they are relative or absolute. The
adjustment to the URL being tested is reset each time around the loop, but the
adjustment of its length isn't, so the length check will potentially fail for
mappings configured after the relative mapping.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60408] ProxyPassReverse relative redirect handling breaks subsequent ProxyPassReverses

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60408

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #3 from Christophe JAILLET <ch...@wanadoo.fr> ---
Backported in r1846044.

Will be part of 2.4.38

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60408] ProxyPassReverse relative redirect handling breaks subsequent ProxyPassReverses

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60408

--- Comment #2 from Christophe JAILLET <ch...@wanadoo.fr> ---
Commited as r1837250 in trunk

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60408] ProxyPassReverse relative redirect handling breaks subsequent ProxyPassReverses

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60408

Michael Osipov <19...@gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |1983-01-06@gmx.net

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60408] ProxyPassReverse relative redirect handling breaks subsequent ProxyPassReverses

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60408

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |PatchAvailable

--- Comment #1 from Christophe JAILLET <ch...@wanadoo.fr> ---
This looks correct to me.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org