httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 50602] New: non thread safe functions used in apache httpd project - ap_uname2id ap_gnamed2id
Date Mon, 17 Jan 2011 14:19:52 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=50602

           Summary: non thread safe functions used in apache httpd project
                    - ap_uname2id ap_gnamed2id
           Product: Apache httpd-2
           Version: 2.2.17
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: kjw@ms.com


Whilst looking at a thread safety issue in mod_fastcgi, i noticed
there's some suspicious looking code in apache httpd project.

server/mpm_common.c (2.2.17) has two functions ap_uname2id and
ap_gname2id which call getpwnam and getgrnam, two non-reentrant
functions.

Comparing with typical apr code that tends to have an #ifdef to
select function() vs function_r().

-----------------------------------------------------------------------

Perhaps ap_uname2id and ap_gname2id are not executed concurrently by
the current code base but if these are general purpose functions they
should be more cautious/safe?

Has the whole apache httpd 2.x project been scanned for use of
non-reentrant function calls?

-----------------------------------------------------------------------

Email thread in dev mailing list -
http://marc.info/?l=apache-httpd-dev&m=129482822402732&w=2

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message