[syslinux] lpxelinux.0 does not set the port number in the http Host: header

Geert Stappers stappers at stappers.nl
Fri Oct 9 05:59:49 PDT 2015


On Fri, Oct 09, 2015 at 06:33:36AM -0400, Gene Cumm via Syslinux wrote:
> On Thu, Oct 8, 2015 at 10:47 PM, Michael DeCandia via Syslinux wrote:
      [ ... cool stuff with dynamic content from flask ... ]
> > A packet trace shows the following headers when fetching
> > http://foo.example.com:5550/autoprov/tftpboot/pxelinux.cfg/01-00-0f-53-27-22-e0.
> >
> > GET //autoprov/tftpboot/pxelinux.cfg/01-00-0f-53-27-22-e0 HTTP/1.0
> > Host: foo.example.com
> > User-Agent: Syslinux/6.03
> > Connection: close
> > Cookie: _Syslinux_ip=10.219.25.26%3A10.219.26.71%3A10.219.25.1%3A255.255.255.192;_Syslinux_BOOTIF=01-00-0f-53-27-22-e0;_Syslinux_SYSUUID=44454c4c-3200-105a-8043-c6c04f523232;_Syslinux_CPU=6PVTXL;_Syslinux_SYSVENDOR=Dell+Inc.;_Syslinux_SYSPRODUCT=PowerEdge+R630;_Syslinux_SYSSERIAL=F2ZCR22;_Syslinux_SYSSKU=SKU%3DNotProvided%3BModelName%3DPowerEdge+R630;_Syslinux_SYSFAMILY=PowerEdge;_Syslinux_MBVENDOR=Dell+Inc.;_Syslinux_MBPRODUCT=0CNCJW;_Syslinux_MBVERSION=A03;_Syslinux_MBSERIAL=.F2ZCR22.CN747514AN0076.;_Syslinux_BIOSVENDOR=Dell+Inc.;_Syslinux_BIOSVERSION=1.1.4;_Syslinux_SYSFF=23;
> >
> > The web server trusts the Host: header more than I expected.  While I
> > feel like that's a Flask/uwsgi bug (feature?) I need to deal with,
> > lpxelinux.0 should still send the header as "Host:
> > foo.example.com:5550".  I realize that the host header is only
> > required as part of HTTP/1.1, and this is a HTTP/1.0 request, but it
> > would make sense to implement it as defined in the HTTP/1.1 spec or to
> > just remove it.
> > 
> > This was found on syslinux-6.0.3 using the official binaries.  I found
> > a couple of other bugs/bad behaviors too, but it's probably best if I
> > post those separately.
> 
> I'd suggest trying the latest test code first.
> 
> git://github.com/geneC/syslinux.git
> 

When compare that with git://repo.or.cz/syslinux.git

I don't see new files from
 http://savannah.nongnu.org/projects/lwip/


And I can't see if LWIP supports HTTP/1.1


As I understand it, is the lpxelinux.0 will get HTTP/1.1 support
when:
  * the LWIP project has it
  * we, the Syslinux project, update our LWIP code


Groeten
Geert Stappers
-- 
Leven en laten leven


More information about the Syslinux mailing list