Package: libapr0
Version: 2.0.49-1
Severity: normal
Tags: patch

The function prototype for apr_table_overlap is as follows:

void apr_table_overlap (apr_table_t *dest, const apr_table_t *src,
unsigned flags);

According to to the documentation [1], apr_table_overlap is supposed to merge the key-value pairs from src and dest into dest.

However, if src and dest are not allocated from the same resource pool, a new buffer is allocated for dest, but this buffer is (erroneously) not populated with the data from dest. The result is that the newly-created table contains only the data from src, rather than the merged data from both src and dest.

I found the problem when trying to set per-directory PythonOption directives (both Directory config and .htaccess files) for mod_python.

The patch below fixes the problem. On Debian, it can be placed in the debian/patches directory of the apache2 source package until upstream fixes the problem (I've Cc'd [email protected]).

[1] Apache Portable Runtime documentation, "Table and Array Functions"
        http://apr.apache.org/docs/apr/group__apr__tables.html#a31


== BEGIN PATCH ======================================= --- ../apache2-2.0.49/build-tree/apache2/srclib/apr/tables/apr_tables.c 2004-02-13 03:33:52.000000000 -0600 +++ build-tree/apache2/srclib/apr/tables/apr_tables.c 2004-05-30 01:53:07.000000000 -0600 @@ -1197,7 +1197,12 @@

    /* copy (extend) a using b's pool */
    if (a->a.pool != p) {
-        make_array_core(&a->a, p, m+n, sizeof(apr_table_entry_t), 0);
+        apr_array_header_t *array_tmp = (apr_array_header_t *)
+            apr_palloc(p, sizeof(apr_array_header_t));
+        make_array_core(array_tmp, p, m + n, sizeof(apr_table_entry_t), 0);
+        apr_array_cat(array_tmp, &a->a);
+        apr_table_clear(a);
+        memcpy(&a->a, array_tmp, sizeof(apr_array_header_t));
    }

    apr_table_cat(a, b);
== END PATCH =========================================

-- System Information:
Debian Release: testing/unstable
 APT prefers unstable
 APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.26-1um
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8

Versions of packages libapr0 depends on:
ii  libc6                       2.3.2.ds1-10 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-11    Berkeley v4.2 Database Libraries [
ii  libexpat1                   1.95.6-8     XML parsing C library - runtime li
ii  libpcre3                    4.3-3        Philip Hazel's Perl 5 Compatible R

-- no debconf information

--
Dwayne C. Litzenberger <[EMAIL PROTECTED]>

This message contains an OpenPGP/MIME signature, which can be used to verify its authenticity. If the message itself appears as an attachment, you are probably using using a broken mail program, such as Microsoft Outlook Express.

Attachment: signature.asc
Description: Digital signature



Reply via email to