[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

issue #1796

From: Neels Janosch Hofmeyr <neels_at_elego.de>
Date: Fri, 23 May 2008 01:39:08 +0200

Hi dev,

I am busy on a fix for issue
#1796: defective or malicious client can corrupt repository log messages
and would like to validate that property values are good UTF8.

There is a private function in subversion/libsvn_subr/utf.c:

check_utf8(const char *data, apr_size_t len, apr_pool_t *pool)

All of the *public* methods in subversion/include/svn_utf.h produce new
data. I just need a validation.

Is it ok to publish check_utf8 in subversion/include/svn_utf.h? Is that
"just another fix" or does it have release implications? And how would I
go about it; it would probably have to be called svn_utf_check_utf8... ?

Thanks
Neels

-- 
Neels Hofmeyr -- elego Software Solutions GmbH
Gustav-Meyer-Allee 25 / Gebäude 12, 13355 Berlin, Germany
phone: +49 30 23458696  mobile: +49 177 2345869  fax: +49 30 23458695
http://www.elegosoft.com | Geschäftsführer: Olaf Wagner | Sitz: Berlin
Handelsreg: Amtsgericht Charlottenburg HRB 77719 | USt-IdNr: DE163214194
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: dev-help_at_subversion.tigris.org
Received on 2008-05-23 01:39:38 CEST

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.