https://issues.apache.org/bugzilla/show_bug.cgi?id=56176

            Bug ID: 56176
           Summary: mod_substitute truncates the response body if the
                    "Line is too long"
           Product: Apache httpd-2
           Version: 2.4.7
          Hardware: PC
                OS: Mac OS X 10.4
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_substitute
          Assignee: [email protected]
          Reporter: [email protected]

The following fix added in 2.3.15 

"mod_substitute: To prevent overboarding memory usage, limit line length to
1MB. [Stefan Fritsch]"

causes any line in the response body that is over 1MB to be omitted from the
response, delivering a partial response, and the following entry is logged
"[Fri Feb 21 16:23:46.440472 2014] [substitute:error] [pid 3912:tid 2600]
[client 192.168.0.5:62707] AH01328: Line too long, URI
/secure/foo/bar/Main.aspx, referer:
https://myhost/secure/foo/bar/Main.aspx?evt=2001&src=Main.aspx.2001";

Especially considering that Apache still responds with an HTTP 200 status code,
I would think the proper response would be for mod_substitute to just return
the line without parsing it, because returning a partial response just ends up
corrupting the response. 

I can see the argument that you may not want to return a line if substitutions
fail, but I don't think that should be the default behavior or you should at
least provide the ability to define the default behavior.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to