From: Andre Malo <nd@apache.org>
Date: Tue, 11 Feb 2003 02:08:01 +0000 (+0000)
Subject: Do not use local paths for the domain parameter on non-unix systems.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b02d0fd46bf072d2f4730925b8cf2d79432d0ac7;p=thirdparty%2Fapache%2Fhttpd.git

Do not use local paths for the domain parameter on non-unix systems.

PR: 16937


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98610 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 199031e6b1f..56e6751c8b6 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2,6 +2,9 @@ Changes with Apache 2.1.0-dev
 
   [Remove entries to the current 2.0 section below, when backported]
 
+  *) Fix mod_auth_digest not to use local paths for the domain parameter
+     on non-unix systems. PR 16937.  [André Malo]
+
   *) Let suexec send a message to stderr, if it failed or its policy
      was violated. This message appears in the error log and allows
      for easier debugging. PR 5381, 7638, 8255, 10773.  [André Malo]
diff --git a/modules/aaa/mod_auth_digest.c b/modules/aaa/mod_auth_digest.c
index 50d0ac182d6..9ca16f82448 100644
--- a/modules/aaa/mod_auth_digest.c
+++ b/modules/aaa/mod_auth_digest.c
@@ -1274,7 +1274,7 @@ static const char *guess_domain(apr_pool_t *p, const char *uri,
      * dummy uri - this is the only way to specify that the protection
      * space only covers a single uri.
      */
-    if (dir[0] != '/') {
+    if (!ap_os_is_path_absolute(p, dir)) {
         /* This doesn't work for Amaya (ok, it's of arguable validity in
          * the first place), so just return the file name instead
         return "http://0.0.0.0/";