Philippe M. Chiasson wrote:
> Steve Hay wrote:
>> Philippe M. Chiasson wrote:
>>> Steve Hay wrote:
>>>> Philippe M. Chiasson wrote:
>>>>> The mod_perl 1.31 release candidate "Works with Perl 5.10" is
>>>>> ready. It can be downloaded here:
>> [...]
>> 
>>>> 2. modules/regex.t still fails test 4 for me, as first described
>>>> in my reply to the email above: 
>>>> 
>>>> http://marc.info/?l=apache-modperl-dev&m=117552448731570&w=2
>>> Can't reproduce this on *nix, so I'll assume it's a Win32 specific
>>> problem. 
>>> 
>>> Any additionnal information on that failure? error_log ?
>> 
>> I only get one line in the error log:
>> 
>> [Thu Jan 10 10:43:06 2008] [error] [client 127.0.0.1] File does not
>> exist: c:/temp/mod_perl-1.31-rc1/t/net/perl/cgi.pl/(yikes
> 
> That's very strange, notice the '(' ?
> 
> This entire test is testing for the CVE-2007-1349 problem, and it
> seems Apache::RegistryNG gets tripped over the funny URL:
> 
> /cgi.pl/(yikes?PARAM=4
> 
> Funny that it passes on *nix'es, so it's got something to do with a
> particularity of Win32 and RegistryNG.pm.
> 
> If you care to try to debug this, I'd like at lib/Apache/RegistryNG.pm
> for a point where it returns a status code (404, presumably) early in
> that case.
> 
> $> wc -l lib/Apache/RegistryNG.pm
>     64 lib/Apache/RegistryNG.pm
> 
> Shouldn't be too long, it's a small module.

I had a look and found that the module didn't appear to be getting used,
suggesting that the 404 arose because the location asked for by the test
script really didn't exist.

It turns out to be a typo in the (Win32-specific!) httpd.conf file used
by the test scripts! Now fixed in r611135.

I really should have pulled my finger out and fixed that sooner, so
sorry for the hassle.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to