[pkg-lighttpd] Bug#499334: lighttpd fails to execute CGI scripts in /usr/lib/cgi-bin

[Holger Eitzenberger]

Package: lighttpd
Version: 1.4.19-4
Severity: important

lighttpd fails to execute CGI scripts in /usr/lib/cgi-bin due to a
double alias.url for "/cgi-bin/" => "...".  Snippet from
conf-enabled/10-cgi.conf:

 #1
 alias.url += ( "/cgi-bin/" => "/usr/lib/cgi-bin/" )
 
 $HTTP["remoteip"] =~ "127.0.0.1" {
 	#2
    alias.url += ( "/cgi-bin" => "/usr/lib/cgi-bin/" )
    $HTTP["url"] =~ "^/cgi-bin/" {
      cgi.assign = ( "" => "" )
    }
 }

Removing #1 from the config and restarting lighttpd solves the problem.
See also:

 $ strace -p $(pidof lighttpd)
 ...
 stat64("/usr/lib/cgi-bin/, /usr/lib/cgi-bin/gitweb.cgi", 0xbf9131c8) =
 	-1 ENOENT
 ...

lighttpd concatenates both entries by a comma.  Of course that path
does not exist on my system.

Whether this is an application bug or not I don't know, but it's easily
avoidable by removing #1 from the config.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.26.5 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages lighttpd depends on:
ii  libattr1          1:2.4.43-1             Extended attribute shared library
ii  libbz2-1.0        1.0.5-1.oct1           high-quality block-sorting file co
ii  libc6             2.7-13.oct1            GNU C Library: Shared libraries
ii  libfam0           2.7.0-13.3.oct1        Client library to control the FAM 
ii  libldap-2.4-2     2.4.10-2+lenny1        OpenLDAP libraries
ii  libpcre3          7.6-2.1.oct1           Perl 5 Compatible Regular Expressi
ii  libssl0.9.8       0.9.8g-10.1.oct1       SSL shared libraries
ii  libterm-readline- 1.0302-1               Perl implementation of Readline li
ii  lsb-base          3.2-12                 Linux Standard Base 3.2 init scrip
ii  mime-support      3.44-1                 MIME files 'mime.types' & 'mailcap
ii  zlib1g            1:1.2.3.3.dfsg-12.oct1 compression library - runtime

lighttpd recommends no packages.

Versions of packages lighttpd suggests:
pn  apache2-utils           <none>           (no description available)
ii  openssl                 0.9.8g-10.1.oct1 Secure Socket Layer (SSL) binary a
pn  rrdtool                 <none>           (no description available)

-- no debconf information