[pkg-lighttpd] Bug#386568: Real cause of bug(?)

[Nils Rennebarth]

I got hit be the bug too, and it turned out that the original debian
/etc/lighttpd/conf-available/10-cgi.conf

had those two sections

alias.url += ( "/cgi-bin/" => "/usr/lib/cgi-bin/" )

and

$HTTP["remoteip"] == "127.0.0.1" {
         alias.url += ( "/cgi-bin/" => "/usr/lib/cgi-bin/" )
         $HTTP["url"] =~ "^/cgi-bin" {
                 cgi.assign = ( "" => "" )
         }
}


So for "remoteip" == "127.0.0.1" the same alias will be entered
twice, which results in working CGI, except on localhost.

So my conclusions are:
- The upstream bug is that entering the same alias twice is accepted
   but results in a non working setup. It should probably be rejected.

- Working around the upstream bug is easy, just remove the alias
   declaration in the $HTTP["remoteip"] == "127.0.0.1" section


-- 

Mit freundlichen Grüßen / with kind regards

Nils Rennebarth, Software Developer

--
Funkwerk IP-Appliances GmbH
Mönchhaldenstraße 28
D-70191 Stuttgart

Tel: +49 711 900300 - 0
Fax: +49 711 900300 - 90

E-Mail: Nils.Rennebarth at funkwerk-ec.com

Location: GmbH Neu-Ulm, Local Court Memmingen, HRB 13043
Managing Directors: Michael Marsanu, Steffen Herrmann

--------------------------------
The information contained in this e-mail has been carefully researched,
but the possibility of it being inapplicable in individual cases cannot
be ruled out. We therefore regret that we cannot accept responsibility
or liability of any kind whatsoever for the correctness of the
information given. Please notify us if you discover that information is
inapplicable.