]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
SECURITY (CVE-2012-0031): Fix possible crash on shutdown if a child
authorJoe Orton <jorton@apache.org>
Wed, 11 Jan 2012 14:33:47 +0000 (14:33 +0000)
committerJoe Orton <jorton@apache.org>
Wed, 11 Jan 2012 14:33:47 +0000 (14:33 +0000)
commitb0835c731a7d7f65b5d409f42b886fc8e3111bfc
treebad87b2cd517e2fc9c703275139d382ce9257e1a
parentdf72b6a9dffdae658f6c2c44352dce58141b5fab
SECURITY (CVE-2012-0031): Fix possible crash on shutdown if a child
changes the sb_type field in the scoreboard.  Since unprivileged
children should not be able to affect the parent in this way, this is
treated as a Low severity security issue.

Thanks to "halfdog" <me halfdog.net> for reporting this issue.

* include/scoreboard.h (global_score): Remove sb_type field.

* include/ap_mmn.h: Bump MMN for above.

* server/scoreboard.c (ap_cleanup_scoreboard, ap_create_scoreboard):
  Use a static global to store store the scoreboard type.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1230065 13f79535-47bb-0310-9956-ffa450edef68
include/ap_mmn.h
include/scoreboard.h
server/scoreboard.c