https://issues.apache.org/bugzilla/show_bug.cgi?id=49167

           Summary: HTTP_IN filter confusing error with timeout on
                    chunk-length
           Product: Apache httpd-2
           Version: 2.3-HEAD
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
        AssignedTo: [email protected]
        ReportedBy: [email protected]


When there's a timeout reading the very first chunk length, Apache returns a
413 error response. This might be better as a 400 or 408.

When there's a timeout reading any other chunk length, Apache returns a
concatenation of the 413 and 400 error response due to the HTTP_IN filter
adding a 413 error response then returning APR_TIMEUP from the filter.

I haven't looked at what this means to the proxies usage of HTTP_IN, but since
all the current ones are already a misleading 4xx maybe a change to 400 or 408
wouldn't do much harm.

I'm attaching a patch to illustrate where the issue manifests but it's just for
illustration purposes. My requests are e.g.:

printf "POST / HTTP/1.1\r\nHost: foo\r\nTransfer-Encoding: chunked\r\n\r\n" |
nc 0 80

printf "POST / HTTP/1.1\r\nHost: foo\r\nTransfer-Encoding:
chunked\r\n\r\n4\r\nabcd\r\n" | nc 0 80

(2.2.x returns a pair of 413s instead of a 413 and a 400 for the later chunks)

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to