[cups.bugs] [MOD] STR #2781: Some more problems with CGI handling

Opher Shachar ophers at ladpc.co.il
Thu Apr 3 00:39:33 PDT 2008


DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

Hello,
There are two more issues with CGI handling:
  1.  QUERY_STRING does not always get set. For example with:
  
      [1]   http://localhost:631/test.cgi?file1+file2&file3
      [2]   http://localhost:631/test.cgi?/path/to/file1+/path/to/file2
  
      QUERY_STRING is unset where it must be set to the whole substring
following the "?".
  
      RFC#3875 (CGI/1.1 specification) section 4.1.7 states:
         [...]
         The QUERY_STRING value provides the query-string part of the
         Script-URI.  (See section 3.3).
  
         The server MUST set this variable; if the Script-URI does not
include
         a query component, the QUERY_STRING MUST be defined as an empty
         string ("").
  
  2.  Positional parameters are not always set. For example with:
  
      [2]   http://localhost:631/test.cgi?/path/to/file1+/path/to/file2
  
      positional parameters are not set where they should be:
         $1=/path/to/file1, $2=/path/to/file2.
  
Attached are two patches, cups-str2173-1.patch and cups-str2342-1.patch,
that resolve these issues respectively.
With regard to CUPS 1.3.x cups-str2173-1.patch is *dependent* on
str2173.patch (http://www.cups.org/str.php?L2173).

Regards,
Opher Shachar.

Link: http://www.cups.org/str.php?L2781
Version: 1.4-current
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: cups-str2173-1.patch
URL: <http://lists.cups.org/pipermail/cups-devel/attachments/20080403/a93c145d/attachment.ksh>


More information about the cups-devel mailing list