https://bz.apache.org/bugzilla/show_bug.cgi?id=68527
--- Comment #3 from abernal <[email protected]> --- Reproduced with a real build and gdb. The crash is confirmed as reported: strcmp(r->handler, ...) in fixup_dir() dereferences a NULL r->handler. That happens once mod_rewrite's internal-redirect loop protection (LimitInternalRecursion, default 10) kicks in on a self-matching RewriteRule -- each internal redirect gets a fresh request_rec, and by the time the loop is cut off, r->handler is no longer the one set earlier in the chain by SetHandler. No working FastCGI backend is needed to reproduce: the crash happens during the fixups phase, before any handler runs. Fix and a regression test are available as a pull request: https://github.com/apache/httpd/pull/915 -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
