/[Apache-SVN]
ViewVC logotype

Revision 1557320


Jump to revision: Previous Next
Author: breser
Date: Sat Jan 11 07:19:54 2014 UTC (11 years, 3 months ago)
Changed paths: 1
Log Message:
Disallow methods other than GET/HEAD for the parentpath list.

Fixes the segfault for `svn ls http://svn.example.com` when SVN is handling
the server root and SVNListParentPath is on.

CVE-2014-0032

* subversion/mod_dav_svn/repos.c
  (get_resource): Return an error when we try to get a parentpath list
    resource and the method isn't GET.

Found by: lgo


Changed paths

Path Details
Directorysubversion/trunk/subversion/mod_dav_svn/repos.c modified , text changed

infrastructure at apache.org
ViewVC Help
Powered by ViewVC 1.1.26