Bug#639825: Apache2 seek broken

[Stefan Fritsch <sf@sfritsch.de>]

On Tuesday 30 August 2011, Takis Issaris wrote:
> Package: apache2.2-common
> Version: 2.2.9-10+lenny10
> 
> Yesterday evenings update broke our Apache server setup, which is
> serving video files. Our application uses partial GET's (Range:
> byte=...) to implement seeking in the video. Seeking stopped
> working this morning, I haven't figured out yet what exactly is
> going wrong, but reverting to 2.2.9-10+lenny9 fixed the issue for
> me.
> 
> The patch fixing CVE-2011-3192 involves ranges, which gave me the
> impression that this might have caused our seeking issues:

Yes, that seems very likely.

What would be most interesting to me is the complete Range header your 
application sends to the server when seeking. Also, the HTTP status 
code returned for the requests both with 2.2.9-10+lenny9 and 
2.2.9-10+lenny10 (probably either 200 or 206). Are the video files 
static files or are they generated by some application?

Thanks for your help.

Cheers,
Stefan