You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Jake Buchholz <ja...@execpc.com> on 1997/01/01 00:03:06 UTC
Re: Guess what? suEXEC problems in 1.2b4...
Jake Buchholz had previously stated:
> Tracked it down, here's the code snipped from suexec.c:
>
> doclen = strlen(dwd);
> /* above succeeded */
> if (strncmp(cwd, dwd, doclen) != 0) {
> free(dwd);
> /* never gets to this point... */
> log_err("command not in docroot (%s/%s)\n", cwd, cmd);
> exit(109);
> }
> else
> free(dwd);
> /* never gets to this point either... */
>
> taking a look at how dwd is defined in suexec.c...
>
> char dwd[MAXPATHLEN]; /* docroot working directory */
>
> Are you sure you want to free(dwd); anywhere in suexec.c?
BTW, getting rid of those free(dwd);'s did the trick...
--
Jake Buchholz http://www.execpc.com/~jake
Exec-PC Internet Systems Administrator jake@execpc.com