DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15242>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15242

mod_cgi prevents handling of OPTIONS request

           Summary: mod_cgi prevents handling of OPTIONS request
           Product: Apache httpd-1.3
           Version: HEAD
          Platform: All
               URL: http://www.imasy.or.jp/~tai/
        OS/Version: All
            Status: NEW
          Severity: Blocker
          Priority: Other
         Component: mod_cgi
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


This is a re-submission of old bug (mod_cgi/PR#4490, 1999) that was once 
confirmed but was lost for some unknown reason (probably during transition to 
new bug database?).

The problem resides in following code in mod_cgi.c:

    if (r->method_number == M_OPTIONS) {
        /* 99 out of 100 CGI scripts, this is all they support */
        r->allowed |= (1 << M_GET);
        r->allowed |= (1 << M_POST);
        return DECLINED;
    }

This code obviously prevents userland CGI to handle OPTIONS request.
Because of this code, I've been unable to release/distribute CGI-based
WebDAV provider script as WebDAV protocol requires service endpoint to
handle OPTIONS request properly.

This same report was once submitted to apache-bugdb list in 1999 and
seems to have been confirmed and almost got accepted. You can read
how last conversation went in the following URL:

  http://www.geocrawler.com/mail/thread.php3?subject=mod_cgi%2F4490%
3A+mod_cgi+prevents+handling+of+OPTIONS+requests&list=192

It seems the last piece needed to get the fix done is a submission of
a patch, and here I'm submitting it. You can download the patch from

  http://www.imasy.or.jp/~tai/temp/mod_cgi.c.patch

This patch will add "ScriptTrapOptions (on|off)" directive, which
allows user to control whether CGI script will handle OPTIONS request
or not.

Just FYI, during googling, I also found Zope people is also hit by
this bug. In fact, author of the patch below is the one who have
submitted last bug report on this issue.

  http://www.zope.org/Members/Brian/Misc/mod_cgi_webdav_patch.html

His patch simply removes above code block, whereas mine adds new
diretive to control the behavior.

If this patch gets accepted, I will also submit a report for apache-2.0,
as mod_cgi.c in 2.0 also has this code.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to