You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2008/10/23 12:38:18 UTC

DO NOT REPLY [Bug 46076] New: Return code of apr_ldap_init not checked causing sigabort

https://issues.apache.org/bugzilla/show_bug.cgi?id=46076

           Summary: Return code of apr_ldap_init not checked causing
                    sigabort
           Product: Apache httpd-2
           Version: 2.2.10
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ldap
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: christian_boitel@yahoo.fr


This was discovered when investigating an issue in APR-UTIL 1.3x
(https://issues.apache.org/bugzilla/show_bug.cgi?id=46064)

in util_ldap.c, return code from apr_ldap_init isn't check which in certains
cases will cause httpd to assume the call succeeded. When later using the ldap
connection, openldap sdk will fail (assertation failed) and generate a SIGABORT
signal causing the httpd process to coredump.

Extract from error_log:
[Wed Oct 22 13:46:17 2008] [debug] mod_authnz_ldap.c(379): [client a.b.c.d]
[258172] auth_ldap authenticate: using URL
ldap://xxxx/o=xxx?cn?sub?(objectclass=inetOrgPerson)
Assertion failed: __EX, file  sasl.c, line 79
[Wed Oct 22 10:00:33 2008] [notice] child pid 250024 exit signal Abort (6)


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46076] Return code of apr_ldap_init not checked causing sigabort

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46076





--- Comment #1 from Brad Nicholes <bn...@apache.org>  2008-10-24 08:54:07 PST ---
The success or failure of apr_ldap_init() is being checked through the result
parameter rather than the actual return code of the function.  The status code
of the ldap call is checked in the if statement that follows the call to
apr_ldap_init().  Since there are several pieces of information that need to be
returned from an apr_ldap* call, error codes and messages are returned through
the result parameter.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46076] Return code of apr_ldap_init not checked causing sigabort

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46076

Stefan Fritsch <sf...@sfritsch.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |FixedInTrunk

--- Comment #2 from Stefan Fritsch <sf...@sfritsch.de> 2010-08-18 19:01:09 EDT ---
r986974

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46076] Return code of apr_ldap_init not checked causing sigabort

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46076

Stefan Fritsch <sf...@sfritsch.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #3 from Stefan Fritsch <sf...@sfritsch.de> 2012-02-26 16:49:39 UTC ---
fixed in 2.4.1

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org