apr-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Gang Shu <gangsh...@gmail.com>
Subject Re: Bugs discovered by a research group at CWRU (2)
Date Thu, 20 Aug 2009 23:50:45 GMT
Dear Apache Portable Runtime (APR) developers:


Sorry for bothering again. I made a typing mistake in the former emails.



For 3:

The original bug-fix should exist in "Filename: network_io/unix/sockets.c,
Function: apr_socket_accept()",rather than "Filename: file_io/unix/mktemp.c,
Function: apr_file_mktemp()".



Best,

Gang


On Thu, Aug 20, 2009 at 6:30 PM, Bojan Smojver <bojan@rexursive.com> wrote:

> On Thu, 2009-08-20 at 17:49 -0400, Gang wrote:
> > Besides the possible bug 3.1 we mentioned in the last email, we have
> > found a similar problem 3.2 as well.
> >
> > According to the bug-fix pattern in the function “apr_file_mktemp()”,
> > we think that APR may also set “flags |= FD_CLOEXEC” (line 279 to 290)
> > under the condition of “#ifndef HAVE_ACCEPT4” in the functions
> > “apr_os_sock_make()” and “apr_os_sock_make()”.
>
> OK, I'll have a look at that in more detail.
>
> --
> Bojan
>
>

Mime
View raw message