* Fix PR37753. Off by one bug in get_path_param eats up too much of the string

  such that session identifier for sticky sessions is never found in URL.

Submitted by: Kazuhiro Osawa <ko yappo.ne.jp>
Reviewed by: Ruediger Pluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@352010 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 06c597bc2560f9df7a7bff599558195fe0adb555..3fec516c175c05bf92efc89da7a045f2ea896863 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,6 +2,9 @@
 Changes with Apache 2.3.0
   [Remove entries to the current 2.0 and 2.2 section below, when backported]
 
+  *) mod_proxy_balancer: Sticky session identifiers supplied in URL do not work.
+     PR37753. [Ruediger Pluem, Kazuhiro Osawa <ko yappo.ne.jp>]
+
   *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
 
   *) Fix typo in ProxyStatus syntax error message.

diff --git a/modules/proxy/mod_proxy_balancer.c b/modules/proxy/mod_proxy_balancer.c
index 988508adf342f34f6d65426354c1cc8149101ef1..def1919254def86a9f578025ec9fbff1fdfce9df 100644 (file)
--- a/modules/proxy/mod_proxy_balancer.c
+++ b/modules/proxy/mod_proxy_balancer.c
@@ -113,7 +113,7 @@ static char *get_path_param(apr_pool_t *pool, char *url,
     char *path = NULL;
 
     for (path = strstr(url, name); path; path = strstr(path + 1, name)) {
-        path += (strlen(name) + 1);
+        path += strlen(name);
         if (*path == '=') {
             /*
              * Session path was found, get it's value