Alexandra N. Kossovs


Found
r872434

r872434 | stsp | 2008-08-04 05:14:02 -0500 (Mon, 04 Aug 2008)

Fix a bug causing mod_dav_svn to eat all memory during a merge
operation when SVNPathAuthz is set to 'short_circuit'.
According to the reporter, this bug is only triggered when
using a 1.5 client.

* subversion/libsvn_repos/rev_hunt.c
  (svn_repos_node_location_segments): authz_read requires that
   its path argument starts with a leading slash, so make sure
   the path passed to authz_read starts with '/'.

Patch by: lgo
(log message assembled by me)
Review by: cmpilato
Found by: Alexandra N. Kossovs
(reported via security@)