Bug 497632 - Issues with CGI handling
Summary: Issues with CGI handling
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: cups
Version: 5.3
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Tim Waugh
QA Contact: BaseOS QE
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-04-25 11:25 UTC by Opher Shachar
Modified: 2010-03-30 08:15 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-03-30 08:15:19 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
fix cups cgi issues (903 bytes, patch)
2009-04-25 11:25 UTC, Opher Shachar
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
CUPS Bugs and Features 2781 0 None None None Never
CUPS Bugs and Features 2816 0 None None None Never
Red Hat Product Errata RHBA-2010:0210 0 normal SHIPPED_LIVE cups bug fix update 2010-03-29 12:29:38 UTC

Description Opher Shachar 2009-04-25 11:25:13 UTC
Created attachment 341312 [details]
fix cups cgi issues

Description of problem:
Hello,
There issues with CGI handling:
  1.  QUERY_STRING does not always get set. For example with:
  
      [1]   http://localhost:631/test.cgi?file1+file2&file3
      [2]   http://localhost:631/test.cgi?/path/to/file1+/path/to/file2
  
      QUERY_STRING is unset where it must be set to the whole substring following the "?".
  
      RFC#3875 (CGI/1.1 specification) section 4.1.7 states:
         [...]
         The QUERY_STRING value provides the query-string part of the
         Script-URI.  (See section 3.3).
  
         The server MUST set this variable; if the Script-URI does not include
         a query component, the QUERY_STRING MUST be defined as an empty
         string ("").
  
  2.  Positional parameters are not always set. For example with:
  
      [2]   http://localhost:631/test.cgi?/path/to/file1+/path/to/file2
  
      positional parameters are not set where they should be:
         $1=/path/to/file1, $2=/path/to/file2.
  
Attached is a unified patch (also includes the fix in STR #2816).

Regards,
Opher Shachar.

Version-Release number of selected component (if applicable):
cups-1.3.7-8

How reproducible:
Always

Comment 6 errata-xmlrpc 2010-03-30 08:15:19 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2010-0210.html


Note You need to log in before you can comment on or make changes to this bug.