| Summary: | Inappropiate ProxyPassReverse match when interpolated URL is empty string | ||
|---|---|---|---|
| Product: | Apache httpd-2 | Reporter: | ajprout |
| Component: | mod_proxy | Assignee: | Apache HTTPD Bugs Mailing List <bugs> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | Keywords: | FixedInTrunk, PatchAvailable |
| Priority: | P2 | ||
| Version: | 2.4.9 | ||
| Target Milestone: | --- | ||
| Hardware: | PC | ||
| OS: | Linux | ||
| Attachments: | Patch to fix this bug | ||
Thanks for the report and patch, committed in trunk r1648433 and will propose for backport |
Created attachment 31695 [details] Patch to fix this bug When there is a ProxyPassReverse configured to use an interpolated environment variable for the URL, and that environment variable isn't set for the current request, ap_proxy_location_reverse_map() will do strncasecmp(, , 0) and match anything to the empty ProxyPassReverse. The attached patch modifies ap_proxy_location_reverse_map() to fix this by skipping entries where the URL to match is a zero length string.