At 05:58 PM 4/25/2005, Paul Querna wrote: >Look at: >http://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl/ssl_expr.c > >It has two globals: >ssl_expr_info_type ssl_expr_info; >char *ssl_expr_error; > >Wouldn't this mean in a threaded MPM, that two threads could easily be >parsing .htaccess files at the same time, and both enter ssl_expr_comp, >which uses those globals... kaboom?
AFAICT, most certainly, although I hadn't seen SSLRequire used in the .htaccess context before. Certainly deserves a thorough drubbing into local rather than global variables.