Bug 12569 – tablets-dev downloads for older device images broken in Google Chrome

Bug 12569 - tablets-dev downloads for older device images broken in Google Chrome


Summary:	tablets-dev downloads for older device images broken in Google Chrome

Status:	UNCONFIRMED

Product:	maemo.org Website
Component:	General
Version:	unspecified
Platform:	All All

Importance:	Unspecified critical (vote)
Target Milestone:	---
Assigned To:	Niels Breet
QA Contact:	general@maemo.org

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree

Reported:	2012-02-07 20:02 UTC by Timo Härkönen
Modified:	2012-08-23 13:21 UTC (History)
CC List:	3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note

You need to log in before you can comment on or make changes to this bug.

Description Timo Härkönen (reporter) 2012-02-07 20:02:14 UTC

Image downloads for 770, N800 and N810 are broken in tablets-dev.nokia.com

For example when trying to download any image for N810 Chrome tells the
following (tested also not to work with firefox):

Duplicate headers received from server
The response from the server contained duplicate headers. This problem is
generally the result of a misconfigured website or proxy. Only the website or
proxy administrator can fix this issue.
Error 349 (net::ERR_RESPONSE_HEADERS_MULTIPLE_CONTENT_DISPOSITION): Multiple
Content-Disposition headers received. This is disallowed to protect against
HTTP response splitting attacks.

Comment 1 Lucas Maneos 2012-04-03 17:40:09 UTC

Seems to apply to all tablets-dev.nokia.com downloads.  For example when
retrieving the file MD5SUMS from http://tablets-dev.nokia.com/d3.php (this is
the flasher page, no device MAC or other token needed to access) the response
sent back is:

     1 HTTP/1.0 200 OK\r\n
     2 Server: Apache/2.2.9 (Debian) DAV/2 PHP/5.2.6-1+lenny13 with
Suhosin-Patch mod_python/3.3.1 Python/2.5.2 mod_ssl/2.2.9 OpenSSL/0.9.8g
mod_perl/2.0.4 Perl/v5.10.0\r\n
     3 X-Powered-By: PHP/5.2.6-1+lenny13\r\n
     4 Content-Length: 484\r\n
     5 Content-Tranfer-Encoding: binary\r\n
     6 Content-Disposition: attachment;filename=MD5SUMS\r\n
     7 Last-Modified: Wed, 06 Jul 2011 13:49:06 GMT\r\n
     8 Content-Type: application/octet-stream\r\n
     9 Expires: Tue, 03 Apr 2012 13:37:27 GMT\r\n
    10 Cache-Control: max-age=0, no-cache\r\n
    11 Pragma: no-cache\r\n
    12 Date: Tue, 03 Apr 2012 13:37:27 GMT\r\n
    13 Connection: keep-alive\r\n
    14 MimeType: application/x-octet-stream\r\n
    15 Content-Disposition: attachment; filename="MD5SUMS"\r\n

Duplicating the Content-Disposition headers (lines 6 & 15) is invalid according
to RFC2616 4.2:

>   Multiple message-header fields with the same field-name MAY be
>   present in a message if and only if the entire field-value for that
>   header field is defined as a comma-separated list [i.e., #(values)].

and according to 19.5.1 so is the version in line 6:

>   filename-parm = "filename" "=" quoted-string

The MimeType: (line 14) header is also bogus, but harmless (better than a
second Content-Type: in any case).

This is probably the wrong component for it but the nokia.com option seems to
have gone away, please forward to the right people.

Comment 2 Timo Härkönen (reporter) 2012-04-03 18:05:08 UTC

Adding Quim to cc. Maybe you know what to do with this or who to poke?

Comment 3 aapo.rantalainen 2012-08-23 13:21:39 UTC

Firefox 11 can't download any files from http://tablets-dev.nokia.com

Error message is:

Corrupted Content Error
The page you are trying to view cannot be shown because an error in the data
transmission was detected.
The page you are trying to view cannot be shown because an error in the data
transmission was detected.
Please contact the website owners to inform them of this problem.