ID: 47435 User updated by: valli at icsurselva dot ch Reported By: valli at icsurselva dot ch -Status: Closed +Status: Open Bug Type: Filter related Operating System: linux PHP Version: 5.*, 6CVS (2009-02-18) New Comment:
Sorry, I've checked the wrong file when I wrote the last comment. Now I've seen your fixes. But there are a lot more ranges to check (not only fc00::/7) At least the following IPv6 ranges should match when FILTER_FLAG_NO_RES_RANGE is set (rfc5156): ::/128 // unspecified address (rfc4291) fe80::/10 // link local unicast (rfc4291) 2001:db8::/32 // documentation addresses (rfc3849) 5f00::/8 // 6Bone 3ffe::/16 // 6Bone Previous Comments: ------------------------------------------------------------------------ [2009-02-24 07:55:51] valli at icsurselva dot ch Can't find any code in the snapshots regarding this issue. Will this be fixed in php-5.3? ------------------------------------------------------------------------ [2009-02-23 16:52:50] il...@php.net This bug has been fixed in CVS. Snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. Thank you for the report, and for helping us make PHP better. ------------------------------------------------------------------------ [2009-02-18 13:57:31] valli at icsurselva dot ch Description: ------------ The filter flags FILTER_FLAG_NO_PRIV_RANGE and FILTER_FLAG_NO_RES_RANGE have no effekt on private/reserved ipv6 addresses. (see also rfc5156; Special-Use IPv6 Addresses) Reproduce code: --------------- var_dump(filter_var('fc00::', FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE)); Expected result: ---------------- false Actual result: -------------- fc00:: ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=47435&edit=1