From: Ryan Bloom <rbb@apache.org>
Date: Thu, 22 Feb 2001 20:50:03 +0000 (+0000)
Subject: Fix a seg fault in mod_userdir.c.  We used to use the pw structure
X-Git-Tag: 2.0.12~23
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8c6d4ea4f8b1babdfeaf25fc2909bf9e8f8de56b;p=thirdparty%2Fapache%2Fhttpd.git

Fix a seg fault in mod_userdir.c.  We used to use the pw structure
without ever filling it out.

PR:	7271
Submitted by:	Taketo Kabe <kabe@sra-tohoku.co.jp> and Cliff Woolley <cliffwoolley@yahoo.com>]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@88279 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 1f69989f8a7..23e34dc0a82 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,10 @@
 Changes with Apache 2.0.12-dev
 
+  *) Fix a seg fault in mod_userdir.c.  We used to use the pw structure
+     without ever filling it out.  This fixes PR 7271.
+     [Taketo Kabe <kabe@sra-tohoku.co.jp> and 
+      Cliff Woolley <cliffwoolley@yahoo.com>]
+
   *) Add a couple of GCC attribute tags to printf style functions.
      [Jon Travis <jtravis@covalent.net>]
 
diff --git a/modules/mappers/mod_userdir.c b/modules/mappers/mod_userdir.c
index 91e4b58c1b6..baf8a51b129 100644
--- a/modules/mappers/mod_userdir.c
+++ b/modules/mappers/mod_userdir.c
@@ -357,9 +357,9 @@ static int translate_userdir(request_rec *r)
 #ifdef HAVE_UNIX_SUEXEC
 static ap_unix_identity_t *get_suexec_id_doer(const request_rec *r)
 {
-    const char *username = apr_table_get(r->notes, "mod_userdir_user");
-    struct passwd *pw = NULL;
     ap_unix_identity_t *ugid = NULL;
+#if APR_HAS_USER
+    const char *username = apr_table_get(r->notes, "mod_userdir_user");
 
     if (username == NULL) {
         return NULL;
@@ -369,9 +369,11 @@ static ap_unix_identity_t *get_suexec_id_doer(const request_rec *r)
         return NULL;
     }
 
-    ugid->uid = pw->pw_uid;
-    ugid->gid = pw->pw_gid;
-    
+    if (apr_get_userid(&ugid->uid, &ugid->gid, username, r->pool) != APR_SUCCESS) {
+        return NULL;
+    }
+
+#endif 
     return ugid;
 }
 #endif /* HAVE_UNIX_SUEXEC */