Bug 1372692

Summary: Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody
Product: Red Hat Enterprise Linux 7 Reporter: Masafumi Miura <mmiura>
Component: httpdAssignee: Luboš Uhliarik <luhliari>
Status: CLOSED ERRATA QA Contact: Jan Houska <jhouska>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.4CC: isenfeld, jhouska, jorton, luhliari, mfrodl
Target Milestone: rcKeywords: Patch
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: httpd-2.4.6-54.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-08-01 21:36:44 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1298243    

Description Masafumi Miura 2016-09-02 12:06:38 UTC
### Description of problem:

Apache httpd does not log status code "413" in access_log when hitting LimitRequestBody. It logs status code "200" instead. 


### Version-Release number of selected component (if applicable):

httpd-2.4.6-40.el7_2.4.x86_64


### How reproducible:

Anytime


### Steps to Reproduce:

1. Configure LimitRequestBody and mod_ext_filter:

    LimitRequestBody 100

2. Prepare a test file which is larger than LimitRequestBody

    dd if=/dev/zero of=/tmp/testfile bs=1 count=101

3. Sent a POST request with the file 

    curl -X POST -vs -T /tmp/testfile http://127.0.0.1/index.html

   or

    curl -X POST -vs -H "Transfer-Encoding: chunked" -F "test=@/tmp/testfile" http://127.0.0.1/index.html


### Actual results:

"413 Request Entity Too Large" was returned to the client (curl) and the following log messages were output in error_log:

~~~
[Fri Sep 02 21:05:03.488793 2016] [http:info] [pid 4790] [client 127.0.0.1:59214] AH01588: Requested content-length of 101 is larger than the configured limit of 100
[Fri Sep 02 21:05:20.864884 2016] [http:info] [pid 4791] [client 127.0.0.1:59216] AH01591: Read content length of 152 is larger than the configured limit of 100
~~~

But status code 413 was not logged but status code 200 was logged instead in access_log:

~~~
127.0.0.1 - - [02/Sep/2016:21:05:03 +0900] "POST /index.html HTTP/1.1" 200 339 "-" "curl/7.29.0" "Cookie: -" "Set-Cookie: -" 0 711
127.0.0.1 - - [02/Sep/2016:21:05:20 +0900] "POST /index.html HTTP/1.1" 200 339 "-" "curl/7.29.0" "Cookie: -" "Set-Cookie: -" 0 719
~~~


### Expected results:

status code 413 should be output in access_log.

Comment 8 errata-xmlrpc 2017-08-01 21:36:44 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:2175