Re: svn_repos_trace_node_locations()

"Peter N. Lundblad" <peter@famlundblad.se> writes:
> Where is that guarantee documented in the API? We have an official invalid
> revnum, but SVN_IS_VALID_REVNUM works for the whole range of long int.
> Also, many places just use SVN_STR_TO_REV, which in turn use plain atol.
> Examples of this is in mod_dav_svn, so if we assume that revnums >= -1,
> then this could be a security problem.

We once considered another special revision number that would be -2.
I can't remember what it signified, but FWIW, we weren't treating this
>= -1 thing as an API guarantee then, at least.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Fri Jun 11 22:22:05 2004