Hi,

i found the problematic lines of code.
The lua filename is merged with the LuaRoot-path, which not allowed to be relative.
But the success of the merge is not checked.

mod_lua.c:194
    if (filename) {
        char *file;
        apr_filepath_merge(&file, server_cfg->root_path,
                           filename, APR_FILEPATH_NOTRELATIVE, r->pool);
        spec->file = file;
    }

Is there a special reason, for the APR_FILEPATH_NOTRELATIVE?


Regards,
Sascha

Reply via email to