#3799 Wrong handling of long remote args

1.520
closed-fixed
5
2010-11-15
2010-11-15
Anonymous
No

In bin/rpc.cgi, on the very beginning, the rawarg var is filled from Stdin with a loop which reads from STDIN.
For some reason, the miniserv.pl provides more data on Stdin than is written in the environment variable CONTENT_LENGTH. Therfore, the loop which fills the $rawarg sometimes gets too much data and the functions which are called later on most probably fail. I've seen this when i wanted to change a group through "Cluster webmin servers". where a lot of data is sent to the remote webmin.
I've fixed that by adding

$rawarg = substr($rawarg, 0, $ENV{'CONTENT_LENGTH'});

just after the loop. Maybe it would be better to fix miniserv.pl ....

Discussion

  • Jamie Cameron

    Jamie Cameron - 2010-11-15
    • status: open --> closed-fixed
     
  • Jamie Cameron

    Jamie Cameron - 2010-11-15

    Thanks for pointing this out - I see the real cause, and will fix it in Webmin 1.530.

     

Log in to post a comment.