From: Greg Stein <gstein@apache.org>
Date: Fri, 12 Jan 2001 12:18:10 +0000 (+0000)
Subject: Fix a problem found by Ryan when deleting collections, which triggered an
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=9d0b07d498db0e48a0a53280b0a4b4b5287d7b8f;p=apache

Fix a problem found by Ryan when deleting collections, which triggered an
underlying (broad) bug. dav_add_response() was assuming the walk params were
a dav_walker_ctx. During the walker cleanup in Nov00, that assumption was
removed, so response errors that occurred in the cleaned sections (such as
dav_fs_delete_resource) could trigger a segfault.

Solution: add a pool to dav_walk_resource and alter dav_add_response to use
that, rather than assume the ctx is a dav_walker_ctx.

[ note there is also a pool in dav_walk_resource.resource, but that pool is
  associated with the *resource* rather than the process of walking, so we
  introduced another field. currently they are the same, however. ]

Found by: Ryan Bloom


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@87670 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/modules/dav/fs/repos.c b/modules/dav/fs/repos.c
index 5ec98bb0c7..8ee5e83984 100644
--- a/modules/dav/fs/repos.c
+++ b/modules/dav/fs/repos.c
@@ -1597,6 +1597,7 @@ static dav_error * dav_fs_internal_walk(const dav_walk_params *params,
 
     fsctx.params = params;
     fsctx.wres.walk_ctx = params->walk_ctx;
+    fsctx.wres.pool = params->pool;
 
     /* ### zero out versioned, working, baselined? */
 
diff --git a/modules/dav/main/mod_dav.c b/modules/dav/main/mod_dav.c
index d925d587e9..f273ff8129 100644
--- a/modules/dav/main/mod_dav.c
+++ b/modules/dav/main/mod_dav.c
@@ -1137,12 +1137,11 @@ static int dav_method_put(request_rec *r)
 DAV_DECLARE(void) dav_add_response(dav_walk_resource *wres,
                                    int status, dav_get_props_result *propstats)
 {
-    dav_walker_ctx *ctx = wres->walk_ctx;
     dav_response *resp;
 
     /* just drop some data into an dav_response */
-    resp = apr_pcalloc(ctx->w.pool, sizeof(*resp));
-    resp->href = apr_pstrdup(ctx->w.pool, wres->resource->uri);
+    resp = apr_pcalloc(wres->pool, sizeof(*resp));
+    resp->href = apr_pstrdup(wres->pool, wres->resource->uri);
     resp->status = status;
     if (propstats) {
 	resp->propresult = *propstats;
diff --git a/modules/dav/main/mod_dav.h b/modules/dav/main/mod_dav.h
index 63483ef201..d4561942b1 100644
--- a/modules/dav/main/mod_dav.h
+++ b/modules/dav/main/mod_dav.h
@@ -1436,6 +1436,9 @@ typedef struct
     /* the client-provided context */
     void *walk_ctx;
 
+    /* pool to use for allocations in the callback */
+    apr_pool_t *pool;
+
     /* the current resource */
     const dav_resource *resource;