https://issues.apache.org/bugzilla/show_bug.cgi?id=50602
Summary: non thread safe functions used in apache httpd project
- ap_uname2id ap_gnamed2id
Product: Apache httpd-2
Version: 2.2.17
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: Core
AssignedTo: [email protected]
ReportedBy: [email protected]
Whilst looking at a thread safety issue in mod_fastcgi, i noticed
there's some suspicious looking code in apache httpd project.
server/mpm_common.c (2.2.17) has two functions ap_uname2id and
ap_gname2id which call getpwnam and getgrnam, two non-reentrant
functions.
Comparing with typical apr code that tends to have an #ifdef to
select function() vs function_r().
-----------------------------------------------------------------------
Perhaps ap_uname2id and ap_gname2id are not executed concurrently by
the current code base but if these are general purpose functions they
should be more cautious/safe?
Has the whole apache httpd 2.x project been scanned for use of
non-reentrant function calls?
-----------------------------------------------------------------------
Email thread in dev mailing list -
http://marc.info/?l=apache-httpd-dev&m=129482822402732&w=2
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
