| author | Mike Sullivan <Mike.Sullivan@Oracle.COM> |
| Mon, 03 Mar 2014 16:21:45 -0800 | |
| changeset 1740 | d5b2d81eeedc |
| parent 1675 | 0eb3c8a5ca75 |
| permissions | -rw-r--r-- |
|
1675
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
1 |
# CVE-2013-1849 |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
2 |
# http://subversion.apache.org/security/CVE-2013-1849-advisory.txt |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
3 |
|
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
4 |
--- subversion/mod_dav_svn/liveprops.c 2012-02-03 12:04:00.000000000 -0800 |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
5 |
+++ subversion/mod_dav_svn/liveprops.c 2014-01-22 09:29:53.399158026 -0800 |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
6 |
@@ -429,7 +429,8 @@ |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
7 |
svn_filesize_t len = 0; |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
8 |
|
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
9 |
/* our property, but not defined on collection resources */ |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
10 |
- if (resource->collection || resource->baselined) |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
11 |
+ if (resource->type == DAV_RESOURCE_TYPE_ACTIVITY || |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
12 |
+ resource->collection || resource->baselined) |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
13 |
return DAV_PROP_INSERT_NOTSUPP; |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
14 |
|
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
15 |
serr = svn_fs_file_length(&len, resource->info->root.root, |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
16 |
@@ -453,7 +454,9 @@ |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
17 |
svn_string_t *pval; |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
18 |
const char *mime_type = NULL; |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
19 |
|
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
20 |
- if (resource->baselined && resource->type == DAV_RESOURCE_TYPE_VERSION) |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
21 |
+ if ((resource->type == DAV_RESOURCE_TYPE_ACTIVITY) || |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
22 |
+ (resource->baselined && |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
23 |
+ resource->type == DAV_RESOURCE_TYPE_VERSION)) |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
24 |
return DAV_PROP_INSERT_NOTSUPP; |
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
25 |
|
|
0eb3c8a5ca75
18117608 problem in UTILITY/SVN
Stefan Teleman <stefan.teleman@oracle.com>
parents:
diff
changeset
|
26 |
if (resource->type == DAV_RESOURCE_TYPE_PRIVATE |