#1 2011-11-08 21:18:22

esmondb
Member
From: London
Registered: 2010-07-20
Posts: 299

possible AV with sessions

If a session has been closed it's possible to get an AV in TSQLRestServer.URI.

Session := SessionGet(SessionID); in line 14322 of SQLite3Commons can return nil. This causes an AV in the following line: if Session.IsValidURL...

Could a check be added.

Offline

#2 2011-11-09 06:28:40

ab
Administrator
From: France
Registered: 2010-06-21
Posts: 14,659
Website

Re: possible AV with sessions

The TAuthSession.IsValidURL method already check for self=nil in its implementation.

So IMHO no AV may occur here.

A lot of (non-virtual, of course) methods of the framework use such an internal (self=nil) test to avoid AV in the user code, even if the provided value is incorrect.

Offline

#3 2011-11-09 07:36:47

esmondb
Member
From: London
Registered: 2010-07-20
Posts: 299

Re: possible AV with sessions

Seems that I was looking at an old version of the code. It's working now, thanks.

Offline

Board footer

Powered by FluxBB