https://bz.apache.org/bugzilla/show_bug.cgi?id=57996

            Bug ID: 57996
           Summary: Symlinks erroneously not followed when target inode
                    number >32 bits
           Product: Apache httpd-2
           Version: 2.4.10
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
          Assignee: [email protected]
          Reporter: [email protected]

Created attachment 32790
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=32790&action=edit
Fix resolve_symlink() target inode number overflow failure

When running httpd on 32-bit x86, some (but not all) symbolic links are neither
followed nor shown in the directory index. Attempts to follow them result in
error AH00037 being logged. The configuration permits following symlinks if the
owner matches.

On investigation, it appeared that the problematic symlinks are those where the
link has an inode number that fits within 32 bits but the target does not.

I have developed a patch and successfully tested it on top of httpd 2.4.10 as
packaged in Debian 8. Inspection of the head of the 2.4 branch in svn suggests
that the bug is still present there.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to