Article delegate-en/1607 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[Reference:<_A1606@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: HTTP CGI Problem.
16 Apr 2002 07:47:34 GMT feedback@delegate.org (Yutaka Sato)


Hi,

In message <_A1606@delegate-en.ML_> on 04/16/02(16:10:48)
you Corley Kinnane <piqdabdyi-p5lznxiuvbxr.ml@ml.delegate.org> wrote:
 |>Maybe it is an unknown bug of current DeleGate or known and fixed
 |>bug in old version of DeleGate.
 |>Could you show me the version of DeleGate you are using, the mail
 |>notification from the DeleZate to you (ADMIN), or the stack trace
 |>of the dumped core if you have ? 
...
 |This is the best I can do at the moment Yutaka, it doesn't send me email 
 |(I notice it's trying to send email from me to me - it might need my 
 |SMTP password)
 |Is this a bug or a security feature that this script (a simple http 
 |upload file script) does not finish and fails to upload a file to a path 
 |that is writeable by anyone at this stage.

Maybe the cause is a simple buffer overflow in DeleGate which parses
the output from CGI program.

 |04/16 18:05:24.26 [2854] 0+0: --INITIALIZATION START: 7.7.1 on Linux/2.2.19--

Since no significant fix around CGI is not done after 7.7.1, the bug
seems to remain in the current version.

 |04/16 18:05:42.30 [2861] 2+1: REQUEST - POST /upload.cgi HTTP/1.1^M
 |04/16 18:05:42.30 [2861] 2+1: *** /upload.cgi => file://localhost/home/delegate/http/upload.cgi ***

The problem might be caused by the output (which contains something
unexpected by DeleGate) from the CGI program (upload.cgi).

 |04/16 18:05:42.31 [2861] 2+1: chdir(/home/delegate/http)
 |04/16 18:05:42.31 [2863] 2+1: -- Fork(CGI): 2861 -> 2863
 |04/16 18:05:42.67 [2861] 2+1: ####! EMERGENCY STOP !####
...
 |04/16 18:05:42.73 [2866] 2+1: E-A: core will be at /home/delegate/work/7778

Could you show me the stack trace of the core file at the directory?
It will be got like follows:
 % gdb /path/of/your/delegated /home/delegate/work/7778/*core 
 (gdb) where
 (gdb) quit

Cheers,
Yutaka
--
  @ @ Yutaka Sato <y.sato@delegate.org> http://www.delegate.org/y.sato/
 ( - ) National Institute of Advanced Industrial Science and Technology (AIST)
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V