DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=30137>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=30137

apr_proc_create() incorrectly requires R_OK for chdir(2)

           Summary: apr_proc_create() incorrectly requires R_OK for chdir(2)
           Product: APR
           Version: 0.9.3
          Platform: PC
        OS/Version: FreeBSD
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: APR
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


I submitted this issue to Jeff Trawick via personal Email initially.  Jeff 
recommended I open up a bug report for investigation.  Your wish is my command.

In regards to the following commit (which applies to 0.9.4 and HEAD as well):

http://cvs.apache.org/viewcvs.cgi/apr/threadproc/unix/proc.c?
r1=1.64&r2=1.65&diff_format=h

The first call to access(2) (line ~322) for attr->currdir requires R_OK and 
X_OK.  This looks to be incorrect; R_OK is superfluous, as chdir(2) only needs 
the directory executable bit to succeed (at least on *IX systems).

In English: chdir(2) will fail when trying to go into a directory that lacks 
the read bit.  This was discussed (mainly by myself) in full over at the suPHP 
forum, since all versions of suPHP (with Apache 2) are affected by this issue:  
http://lists.marsching.biz/pipermail/suphp/2004-July/000756.html

If someone could take a peek at this, I'd appreciate it.  Thanks!

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to