https://bz.apache.org/bugzilla/show_bug.cgi?id=70051
abernal <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #3 from abernal <[email protected]> --- Committed to trunk as r1939426: one-line NULL guard on the close_lockdb() call in check_locked_by_other()'s out: label, mirroring the existing guard in mswdv_combined_lock(). Also added a regression test (test_dav_mswdv_null_deref in test/pytest_suite/tests/t/modules/test_dav.py) that reproduces the trigger from the PoC (PUT past a file with an extra path component) and confirms the server returns a clean DAV error and stays up. Since ms_wdv.c has never shipped in a 2.4.x release, there is nothing to backport. Thanks for the detailed report and the ready-to-apply patch. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
