|
Found the root of
the problem - there's a bug in the form processing code (at least when I build
it on Win32 and use it with IE6)
Although the correct
data is being posted (including the correct 'Content-Length' header) it seems to
be possible to read beyond the end of the content
ns_conn content 0
100 will give you 100 bytes of content back even though in my example there
should only be 8.
What is returned is
padded out with CR LF pairs. It seems as if something is not being NULL
terminated, or the EOF/EOL code is failing.
The form processing
code as it stands doesn't take the content length header into account and as the
content isn't corrently NULL terminated (or has this extraneous data), the last
variable in the form is given the extra data (or at least the first CR CR LF of
it).
I've created
a simple patch for nsd/form.c to work around this - dunno who should
review this patch to see if we can get it into CVS
Any
ideas?
Index: form.c
===================================================================
RCS file: /cvsroot/aolserver/aolserver/nsd/form.c,v
retrieving revision 1.11
diff -r1.11 form.c
82c82,84
< if (!GetBoundary(&bound, conn)) {
---
> formend = form + connPtr->reqPtr->length;
> if (!GetBoundary(&bound, conn)) {
> *formend = '\0';
85d86
< formend = form +
connPtr->reqPtr->length;
Now I've found that
ns_httptime crashes the server with a C000005 exception if given a time
value of '-1' (which nstelemetry.adp does)
:(
regards, Tim Moss Email:
[EMAIL PROTECTED] WebSite:
http://www.site-speed.com This email contains information from SiteSpeed Ltd, which may be privileged or confidential. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic message in error, please notify us immediately.
|
- [AOLSERVER] Odd problem with nsadmin Tim Moss
- Re: [AOLSERVER] Odd problem with nsadmin Daniel P. Stasinski
- Re: [AOLSERVER] Odd problem with nsadmin Dossy
- Re: [AOLSERVER] Odd problem with nsadmin Daniel P. Stasinski
