Mailing List Archive: Bug in version 0.8.14 (fwd)

I'll send a brief ack.

Forwarded message:
> From matt@caladan.sps.mot.com Wed Oct 4 12:42:34 1995
> Message-Id: <9510041942.AA24093@motsps>
> From: matthew noell <matt@caladan.sps.mot.com>
> Subject: Bug in version 0.8.14
> To: apache-bugs@mail.apache.org
> Date: Wed, 4 Oct 95 14:42:18 CDT
> X-Hpvue$Revision: 1.8 $
> Mime-Version: 1.0
> Content-Type: Message/rfc822
> X-Vue-Mime-Level: 4
> Organization: Motorola, Inc., Austin, Texas
> Reply-To: matt@caladan.sps.mot.com
> X-Phone: (512) 933-5013
> X-Fax: (512) 933-5262
> Mailer: Elm [revision: 70.85]
>
> content-type:text/plain;charset=us-ascii
> mime-version:1.0
>
> There appears to be a bug in the module dir_module in mod_dir.c. The trouble
> appears only when accessing the directory index without explicitly naming
> the directory index file. In my case, I am trying to access the default
> directory index file 'index.html' through the
> URL:
> http://caladan.sps.mot.com/Apache-test/83%25/
>
> the "%25" in the URL is the escaped percent character "%". Thus, the real
> filename is,
>
> /web/hypertext/Apache-test/83%/index.html
>
> where /web/hypertext is the document root directory.
>
> My guess at the source of the problem is that the above is transformed to the
> URL:
> http://caladan.sps.mot.com/Apache-test/83%/index.html
>
> This URL has the unescaped percent character "%", but the URL is treated as
> being escaped and the "unescape" routine is run on this URL.
>
> In any case, is there a fix?
>
> Regards,
> Matt
> --
> _ Matthew Noell Motorola, Inc.
> _| ~-. APRDL Technology Simulation 3501 Ed Bluestein Blvd., MD-K10
> \, *_} matt@caladan.sps.mot.com Austin, Texas 78721
> \( (MIME spoken here) Voice: (512) 933-5013 Fax: (512) 933-5262
>

> There appears to be a bug in the module dir_module in mod_dir.c. The trouble
> appears only when accessing the directory index without explicitly naming
> the directory index file. In my case, I am trying to access the default
> directory index file 'index.html' through the
> URL:
> http://caladan.sps.mot.com/Apache-test/83%25/
>...
> My guess at the source of the problem is that the above is transformed to the
> URL:
> http://caladan.sps.mot.com/Apache-test/83%/index.html
>
> This URL has the unescaped percent character "%", but the URL is treated as
> being escaped and the "unescape" routine is run on this URL.

His diagnosis is correct. internal_redirect() takes an _escaped_ URL.
I've uploaded 19_redir.0.8.14.patch which fixes this bug and an identical
one in mod_negotiation.c.

David.

(I'll contact the user.)