Bugs item #2042430, was opened at 2008-08-07 19:07
Message generated for change (Comment added) made by csapuntz
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2042430&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: http
Group: bad behaviour
Status: Open
Resolution: Accepted
Priority: 5
Private: No
Submitted By: Constantine Sapuntzakis (csapuntz)
Assigned to: Daniel Stenberg (bagder)
Summary: NTLM Windows SSPI code is not thread safe

Initial Comment:
The NTLM Windows SSPI code uses static globals to keep track of a DLL and interface (see http_ntlm.c).

The attached patch moves the globals into the connectdata structure. The lifetime of the loaded
DLL and interface will be the the same as the previous implementation (the connection), but the race condition is removed.

----------------------------------------------------------------------

>Comment By: Constantine Sapuntzakis (csapuntz)
Date: 2008-08-09 17:16

Message:
Logged In: YES
user_id=669005
Originator: YES

What do you think of loading the DLL once at curl_global_init() time and
unloading it
at curl_global_cleanup()?

Patch attached.
File Added: curl-ntlm-thread-safe-sspi-v2.diff

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2008-08-08 14:50

Message:
Logged In: YES
user_id=1110
Originator: NO

This seems to load the DLLs a little bit more often than necessary. Won't
it make more sense to add the new struct members to (somewhere in) the
SessionHandle struct?

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2042430&group_id=976
Received on 2008-08-10