|Summary:||UserDir is not accepting more than one directory location|
|Component:||mod_userdir||Assignee:||Apache HTTPD Bugs Mailing List <bugs>|
Description mhruscak 2016-05-26 18:37:35 UTC
Comment 1 Christophe JAILLET 2018-05-26 12:25:46 UTC
Confirmed. Fixed in r1832306. Previously we were checking only in the first *existing* directory, which is clearly not what is said in the doc. > UserDir "public_html" "/usr/web" "http://www.example.com/" > > With a request for http://www.example.com/~bob/one/two.html, will try to find > the page at ~bob/public_html/one/two.html first, then /usr/web/bob/one/two.html, > and finally it will send a redirect to http://www.example.com/bob/one/two.html.
Comment 2 Luca Toscano 2018-07-08 16:12:52 UTC
Christophe, should we propose this for a 2.4.x backport?
Comment 3 Christophe JAILLET 2018-07-09 20:16:00 UTC
r1832306 does not seem to be complete enough. If we go through the 'apr_uid_homepath_get' branch, and if it does NOT return SUCCESS, then filename would still be NULL, and we would certainly segfault in the apr_strcat call. This should be reworded a bit before a backport proposal.