You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2022/02/17 07:36:56 UTC

[Bug 65894] New: server/config.c: Add check for apr_hash_get

https://bz.apache.org/bugzilla/show_bug.cgi?id=65894

            Bug ID: 65894
           Summary: server/config.c: Add check for apr_hash_get
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
          Assignee: bugs@httpd.apache.org
          Reporter: jiasheng@iscas.ac.cn
  Target Milestone: ---

As the potential failure of the apr_hash_get(), the 'mln->next' could be NULL
pointer.
Therefore, it should be better to check it, like the other callers in the same
file.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 65894] server/config.c: Add check for apr_hash_get

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65894

Jiasheng Jiang <ji...@iscas.ac.cn> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jiasheng@iscas.ac.cn

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 65894] server/config.c: Add check for apr_hash_get

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65894

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |INVALID
             Status|NEW                         |RESOLVED

--- Comment #2 from Christophe JAILLET <ch...@wanadoo.fr> ---
Hi,

The patch is not correct.
The 2 lines are not related. (one is about mln->next and the other one mln)

In fact, the ->next field is expected to be NULL most of the time. IIUC, it is
there to link directives with the same name, should there be any.


If I miss something, feel free to re-open and give additional explanation.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 65894] server/config.c: Add check for apr_hash_get

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65894

--- Comment #1 from Jiasheng Jiang <ji...@iscas.ac.cn> ---
Created attachment 38199
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=38199&action=edit
0001-server-config-Add-check-for-apr_hash_get.patch

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org