https://bz.apache.org/bugzilla/show_bug.cgi?id=68527

abernal <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #4 from abernal <[email protected]> ---
Correction to my previous comment: I misidentified the NULL pointer.
fixup_dir() unconditionally does "if (!r->handler) r->handler =
DIR_MAGIC_TYPE;" at the top of the function, so r->handler can never be NULL at
either strcmp() site -- the crash I reproduced was actually hitting the
r->content_type dereference, i.e. the same bug already described in this report
and fixed by Eric Covener's commit (r1936401 "PR68527: fixup_dir segfault with
no content-type"), already on trunk and backported to 2.4.x (r1937718). There
is no remaining defect here. Closed https://github.com/apache/httpd/pull/915,
which incorrectly guarded r->handler instead. Marking RESOLVED/FIXED since both
trunk and 2.4.x already have the real fix.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to