/[Apache-SVN]
ViewVC logotype

Revision 1818584


Jump to revision: Previous Next
Author: stefan2
Date: Mon Dec 18 15:31:59 2017 UTC (6 years, 4 months ago)
Changed paths: 1
Log Message:
Fix a refcounting / cleanup race in svn_object_pool causing crashes when
exiting svnserve while using the --config-file option.

This patch has been outstandig for a while:
    URL: https://lists.apache.org/thread.html/41ca5579bf7add3cb751234ea039fda531c1d22ffbed8cb2ec699e42@%3Cdev.subversion.apache.org%3E
    From: stefan2
    To: dev@
    Subject: Re: heap-use-after-free in object_ref_cleanup
    Date: 2017-05-28 16:46

* subversion/libsvn_subr/object_pool.c
  (add_object_ref):  If items of the container are being hold by parent pools
                     of the container pool, ref counting updates would come
                     too late if run during pool cleanup.  Instead, run them
                     in pre-cleanup.


Changed paths

Path Details
Directorysubversion/trunk/subversion/libsvn_subr/object_pool.c modified , text changed

infrastructure at apache.org
ViewVC Help
Powered by ViewVC 1.1.26