Package: libcgicc1 Version: 3.2.3-2.1 Severity: normal cgicc relies on std::endl for terminating lines, however on Linux that expands to '\n' rather than the required "\r\n" per CGI standard. Most web servers are lenient about this, but lighttpd is strict (and correctly) barfs on it:
$ grep endl *.cpp HTTPContentHeader.cpp: out << "Content-Type: " << getData() << std::endl; HTTPContentHeader.cpp: out << *iter << std::endl; HTTPContentHeader.cpp: out << std::endl; HTTPRedirectHeader.cpp: out << "Location: " << getData() << std::endl; HTTPRedirectHeader.cpp: out << *iter << std::endl; HTTPRedirectHeader.cpp: out << std::endl; HTTPResponseHeader.cpp: << std::endl; HTTPResponseHeader.cpp: out << *iter << std::endl; HTTPResponseHeader.cpp: out << *cookie_iter << std::endl; HTTPResponseHeader.cpp: out << std::endl; HTTPStatusHeader.cpp: out << "Status: " << getStatusCode() << ' ' << getData() << std::endl; HTTPStatusHeader.cpp: out << *iter << std::endl; HTTPStatusHeader.cpp: out << std::endl; -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.6.15.4 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages libcgicc1 depends on: ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii libgcc1 1:3.4.3-13 GCC support library -- no debconf information
signature.asc
Description: Digital signature
