https://bz.apache.org/bugzilla/show_bug.cgi?id=69404
--- Comment #1 from abernal <[email protected]> --- PR against trunk: https://github.com/apache/httpd/pull/912 Confirmed the root cause for all five crashes in the attachment: "-l" (list) leaves username NULL (it doesn't need one) and htdbm_del() dereferenced it unconditionally via strlen(), so "-l -x" crashed; and "-n" (print the hash, no database file) never opens htdbm->dbm, so combining it with "-v"/"-x"/"-l" crashed inside apr_dbm_exists()/apr_dbm_firstkey(). Reproduced with a plain build (stock SIGSEGV, no sanitizer needed). Fix adds the username==NULL guard htdbm_verify() already had to htdbm_del() too, plus a dbm==NULL guard in all three functions. Verified RED (crashes on current trunk) and GREEN (fixed) with the exact repro commands from your attachment, plus a normal create/verify/list/delete cycle still works unchanged. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
