Commit 64f9779b authored by William A. Rowe Jr's avatar William A. Rowe Jr
Browse files

SECURITY: CVE-2010-0425 (cve.mitre.org) 

mod_isapi: Do not unload an isapi .dll module until the request
processing is completed, avoiding orphaned callback pointers.

Submitted by: Brett Gervasoni <brettg senseofsecurity.com>, trawick
Reviewed by: trawick, wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@920961 13f79535-47bb-0310-9956-ffa450edef68
parent 02b63833

modules/arch/win32/mod_isapi.c

+0 −2
Changes for modules/arch/win32/mod_isapi.c: 0 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -1537,7 +1537,6 @@ apr_status_t isapi_handler (request_rec *r) 
    /* Set up client input */

    res = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR);

    if (res) {

        isapi_unload(isa, 0);

        return res;

    }
@@ -1568,7 +1567,6 @@ apr_status_t isapi_handler (request_rec *r) 
        }



        if (res < 0) {

            isapi_unload(isa, 0);

            return HTTP_INTERNAL_SERVER_ERROR;

        }