CVSROOT: /cvs
Module name: src
Changes by: r...@cvs.openbsd.org 2015/09/07 08:46:24
Modified files:
usr.sbin/httpd : httpd.h server.c server_http.c
Log message:
Fix a regression that was introduced with server.c r1.64: Do NOT free
srv_conf->auth in serverconfig_free() because it was not allocated in
config_getserver() but assigned as a reference by id from a global
list that is maintained independently. This fixes a potential
double-free. This fix also makes srv_conf->auth "const" to emphasize
that the read-only auth pointer was not allocated here.
OK jsing@
