Re: [Issue 4060] authz access denied when svnserve root is a repository

On Tuesday, November 15, 2011 2:33 AM, philip_at_tigris.org wrote:
> http://subversion.tigris.org/issues/show_bug.cgi?id=4060
>
>
>
>
>
>
> ------- Additional comments from philip_at_tigris.org Tue Nov 15 02:33:17 -0800 2011 -------
> The doc string for svn_repos_authz_check_access doesn't tell us about
> repos_name=NULL but clearly 1.6 handled it. Given that mod_dav_svn passes "" I
> suppose svn_repos_authz_check_access could convert NULL to "", either here:
>
...
>
> Both changes fix the bug.
>
> Or perhaps we should be changing is_applicable_section?

I thought we have to change is_applicable_section() anyway for memory
correctness issues: the return() statement may read one byte before PATH_SPEC
(and potentially also a byte after SECTION_NAME's end).
Received on 2011-11-15 13:24:17 CET