Re: [users@httpd] possible bug? apache truncates part of the content-type http header if the header is folded

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ian Huynh wrote:
> Env: Win2K Server, Apache 2.0.52 up to 2.0.54
> 
> We are running apache + mod_proxy + mod_rewrite as a reverse proxy for a backend J2EE server.  We've observed that if the J2EE server returns a Content-Type with the following value:
> 
> Content-Type: multipart/signed;
> [\t]micalg=sha1; 
> [\t]protocol="application/pkcs7-signature"; 
> [\t]boundary="Part_10_15429741.1116261846632"
> 
> Apache will drop the parameter protocol and micalg and return this Content-Type to the client
> 
> Content-Type: multipart/signed; 
> [\r\n\t]boundary="Part_10_15429741.1116261846632"  
> 
> However, if the content-type header is not folded the content-type is returned unchanged
> 
> It looks like when a content-type (only content-type header, other headers are not affected) is folded,
> only the last parameter is picked up and returned to the client.

I haven't tested that, but it smells of a genuine bug (your description
is far more coherent than we expect from the people who submit bug
reports because they haven't read TFM).  If you don't get a better
reply here, it might be worth an entry in bugzilla.

-- 
Nick Kew

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux