[SVN-4365] svnserve crash due access to freed memory

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.8.x
• Fix Version/s: 1.8.0
• Component/s: svnserve

Environment

Windows 7

• Assignee: Unassigned
• Reporter: Ivan Zhakov
• Created: 07/May/13 23:38
• Updated: 27/Oct/18 16:27
• Resolved: 15/May/13 22:38

Description

svnserve process crash due access to freed memory when using threads. Stack trace:
[[[
#1  0x6eed6b78 in apr_thread_create(new=(apr_thread_t **) 0x0031fe98,
    attr=(apr_threadattr_t *) 0x00511fd8, func=0x012c73c0,
    data=0x00511fe8, pool=(apr_pool_t *) 0x00000638) at
d:\builder\server-2.6.x\externals\svn-httpd\win32\httpd\srclib\apr\threadproc\win32\thread.c:123
        new = (apr_thread_t **) 0x0031fe98
        attr = (apr_threadattr_t *) 0x00511fd8
        func = 0x012c73c0
        data = 0x00511fe8
        pool = (apr_pool_t *) 0x00000638
        temp = 0x00000638
#2  0x012c7e33 in main(argc=19722010, argv=0x00000004) at
d:\builder\server-2.6.x\externals\svn-httpd\win32\subversion\subversion\svnserve\svnserve.c:1118
        argc = 19722010
        argv = 0x00000004
        tattr = (apr_threadattr_t *) 0x00000072
        handling_opt_count = 19735212
        os = (apr_getopt_t *) 0x00000000
        mode_opt_count = 2
        sockaddr_info_flags = 5258816
        proc = (apr_proc_t) 0x0031fe98
#3  0x012cef1a in __tmainCRTStartup() at
f:\dd\vctools\crt_bld\self_x86\crt\src\crtexe.c:586
]]]

Compiler: VS2008 SP1
Target platform: Win32
Host OS: Windows 7 x64 Ultimate SP1 running on Hyper-V

http://svn.haxx.se/dev/archive-2013-05/0049.shtml