Module Name:    src
Committed By:   tron
Date:           Wed May 28 10:14:13 UTC 2014

Modified Files:
        src/external/bsd/openldap/dist/libraries/librewrite: session.c

Log Message:
Apply patch to fix CVE-2013-4449. This shouldn't be necessary as we don't
build the server or its plug-ins. But it is better to be safe in case
this changes.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.4 -r1.2 \
    src/external/bsd/openldap/dist/libraries/librewrite/session.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/external/bsd/openldap/dist/libraries/librewrite/session.c
diff -u src/external/bsd/openldap/dist/libraries/librewrite/session.c:1.1.1.4 src/external/bsd/openldap/dist/libraries/librewrite/session.c:1.2
--- src/external/bsd/openldap/dist/libraries/librewrite/session.c:1.1.1.4	Wed May 28 09:58:45 2014
+++ src/external/bsd/openldap/dist/libraries/librewrite/session.c	Wed May 28 10:14:13 2014
@@ -1,4 +1,4 @@
-/*	$NetBSD: session.c,v 1.1.1.4 2014/05/28 09:58:45 tron Exp $	*/
+/*	$NetBSD: session.c,v 1.2 2014/05/28 10:14:13 tron Exp $	*/
 
 /* $OpenLDAP$ */
 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
@@ -163,6 +163,7 @@ rewrite_session_find(
 #ifdef USE_REWRITE_LDAP_PVT_THREADS
 	if ( session ) {
 		ldap_pvt_thread_mutex_lock( &session->ls_mutex );
+		session->ls_count++;
 	}
 	ldap_pvt_thread_rdwr_runlock( &info->li_cookies_mutex );
 #endif /* USE_REWRITE_LDAP_PVT_THREADS */
@@ -180,6 +181,7 @@ rewrite_session_return(
 )
 {
 	assert( session != NULL );
+	session->ls_count--;
 	ldap_pvt_thread_mutex_unlock( &session->ls_mutex );
 }
 

Reply via email to