You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2011/03/30 01:20:37 UTC

DO NOT REPLY [Bug 50994] New: NULL pointer dereference with "RewriteMap foo int:undefined"

https://issues.apache.org/bugzilla/show_bug.cgi?id=50994

           Summary: NULL pointer dereference with "RewriteMap foo
                    int:undefined"
           Product: Apache httpd-2
           Version: 2.3-HEAD
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_rewrite
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: info@bnoordhuis.nl


Quoting the commit log:

"Fix NULL pointer dereference in mod_rewrite.

Example config that triggers this behaviour.

  # RewriteEngine is off here
  RewriteMap crash int:crash
  <Location /crashme>
    RewriteEngine on
    RewriteRule (.+) ${crash:$1}
  </Location>

The RewriteMap directive must check the validity of its arguments
regardless of the value of RewriteEngine at the time of processing."

This bug exists in HEAD and (at least) Apache 2.2.14.

Color diff and patch:

https://github.com/bnoordhuis/httpd/compare/mod_rewrite-rewritemap-segfault
https://github.com/bnoordhuis/httpd/compare/mod_rewrite-rewritemap-segfault.patch

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 50994] NULL pointer dereference with "RewriteMap foo int:undefined"

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50994

Stefan Fritsch <sf...@sfritsch.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #3 from Stefan Fritsch <sf...@sfritsch.de> 2011-09-17 15:27:19 UTC ---
fixed in r1164941 in 2.2.21

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 50994] NULL pointer dereference with "RewriteMap foo int:undefined"

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50994

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |FixedInTrunk

--- Comment #2 from Eric Covener <co...@gmail.com> 2011-08-08 02:31:08 UTC ---
Thanks Ben -- commited to trunk in r1154808 and will propose for backport.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 50994] NULL pointer dereference with "RewriteMap foo int:undefined"

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=50994

--- Comment #1 from Ben Noordhuis <in...@bnoordhuis.nl> 2011-03-29 20:47:13 EDT ---
Something this patch exposes is that registering mod_rewrite extension
functions from the optional_fn_retrieve hook doesn't work because that runs
after the config phase. Doing it from the pre-config hook works but is perhaps
not the proper approach.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org