DO NOT REPLY [Bug 29148] New: - [OPERA] a bug detected in modules/dav/main/mod_dav.c

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=29148>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=29148

[OPERA] a bug detected in modules/dav/main/mod_dav.c

           Summary: [OPERA] a bug detected in modules/dav/main/mod_dav.c
           Product: Apache httpd-2.0
           Version: 2.0.49
          Platform: All
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_dav
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: zli4@cs.uiuc.edu


The potential bug is detected by a static analysis tool in
modules/dav/main/mod_dav.c:L1022

1016  if (err != NULL) {
1017      return dav_handle_err(r, err, NULL);
1018  }
1019 
1020  if (err2 != NULL) {
1021      /* just log a warning */
1022      err2 = dav_push_error(r->pool, err->status, 0,
1023                            "The PUT was successful, but there "
1024                            "was a problem automatically checking in "
1025                            "the resource or its parent collection.",
1026                            err2);
1027      dav_log_err(r, err2, APLOG_WARNING);
1028  }
1029 


If it runs through line 1022, "err" must be NULL, and it will cause a 
segmentation fault when it accesses "err->status" in line 1022.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org