Uploaded image for project: 'Subversion'
  1. Subversion
  2. SVN-4204

Access control via authz cannot handle square brackets in paths

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 1.7.x
    • Fix Version/s: unscheduled
    • Component/s: libsvn_subr
    • Labels:
      None

      Description

      If an SVN repository uses an authz file for access control, paths that contain the 
      "]" character cannot have access control applied to them.
      
      The problem is in "parse_section_name" in config_file.c - the function will 
      interpret the first "]" character as closing the section name (line 332). This 
      results in the access control being applied to a truncated path. I will attach a 
      script that demonstrates the problem. I've tried the script on Ubuntu 11.10 using 
      Subversion 1.7.4[1]. This has been discussed in more detail on the mailing 
      list[2].
      
      The parsing code could be fixed, or it could be documented that "]" is not legal 
      for repositories using an authz file (personally I think fixing the code would be 
      better!).
      
      [1] From this PPA: https://launchpad.net/~dominik-stadler/+archive/subversion-1.7
      [2] http://thread.gmane.org/gmane.comp.version-control.subversion.user/110747
      

      Original issue reported by detly

        Attachments

        1. 1_svntest.txt
          3 kB
          Subversion Importer

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                subversion-importer Subversion Importer
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated: