95514 - POSTing files over TLS stalls browser

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect, P2)

Description

[Drew Ronneberg]

From Bugzilla Helper:
User-Agent: Mozilla/4.76 [en] (X11; U; Linux 2.4.2-2 i686)
BuildID:    2001081003

When I upload files to a CGI script with a POST command over an https://
connection, the browser stalls. The client is a a windows 2000 machine and the
server is apache (Redhat 7.1).  When the stop button is pressed, the connection
is broken and the file is processed.  This seems to imply that with certian
files, the only problem is that the browser does not terminate the connection
once the file is done transfering.

This works fine over a plain http:// connection

Reproducible: Always
Steps to Reproduce:
1.Put script in cgi-bin directory on a redhat 7.1 apache system
2.Connect from windows 2000 with mozilla
3. Upload attached file CMI-princeton.pdf

Mozilla will stall  untill the stop button is pressed.

Actual Results:  Mozilla doesn't terminate the POST connection when the file has
finished transfering (over https"// connection)

Expected Results:  File transfers sucessfully.

The expected results works with some files.  It never seems to work the the
CMI-princeton.pdf file.

I will upload a CGI script and the CMI-princeton.pdf file shortly.

Comment 1

[Drew Ronneberg]

Attachment: CGI script to demonstrate bug

Comment 2

[Drew Ronneberg]

Attachment: Upload this file over https:// connection to demonstrate bug

Comment 3

[Drew Ronneberg]

Forgot to mention that this bug is present in Netscape 6.1 but absent from IE 5.5.

Comment 4

[Matthias Versen [:Matti]]

-> PSM

Comment 5

[Matthias Versen [:Matti]]

.

Comment 6

[Stephane Saux]

rangan
reporter, why do you think it's TLS specific?

Comment 7

[Drew Ronneberg]

I cannot reproduce this bug with today's build.  Sept 4th 2001.  As this bug
kept me from recommending that people use mozilla instead of IE for a critical
application, I sure hope it is gone for good.

Comment 8

[Stephane Saux]

Change the target of bugs with state 'RESOLVED' and target 'Future' to target
'2.1' since they were fixed for the 2.1 release.

Comment 9

[John Unruh]

Verified per reporter's comment.