comparison src/http/modules/ngx_http_dav_module.c @ 316:24def6198d7f NGINX_0_5_28

nginx 0.5.28 *) Security: the "msie_refresh" directive allowed XSS. Thanks to Maxim Boguk. *) Bugfix: a segmentation fault might occur in worker process if the "auth_http_header" directive was used. Thanks to Maxim Dounin. *) Bugfix: a segmentation fault occurred in worker process if the CRAM-MD5 authentication method was used, but it was not enabled. *) Bugfix: a segmentation fault might occur in worker process if the eventport method was used.
author Igor Sysoev <http://sysoev.ru>
date Tue, 17 Jul 2007 00:00:00 +0400
parents 2ceaee987f37
children 56675f002600
comparison
equal deleted inserted replaced
315:32a7c84208fa 316:24def6198d7f
237 237
238 dlcf = ngx_http_get_module_loc_conf(r, ngx_http_dav_module); 238 dlcf = ngx_http_get_module_loc_conf(r, ngx_http_dav_module);
239 239
240 #if !(NGX_WIN32) 240 #if !(NGX_WIN32)
241 241
242 if (ngx_change_file_access(temp->data, dlcf->access) 242 if (ngx_change_file_access(temp->data, dlcf->access) == NGX_FILE_ERROR) {
243 == NGX_FILE_ERROR)
244 {
245 err = ngx_errno; 243 err = ngx_errno;
246 not_found = NGX_HTTP_INTERNAL_SERVER_ERROR; 244 not_found = NGX_HTTP_INTERNAL_SERVER_ERROR;
247 failed = ngx_change_file_access_n; 245 failed = ngx_change_file_access_n;
248 name = temp->data; 246 name = temp->data;
249 247