sniper          Mon Sep  5 12:22:19 2005 EDT

  Modified files:              (Branch: PHP_5_1)
    /php-src    NEWS 
    /php-src/ext/standard       var_unserializer.re 
  Log:
  MFH: - Fixed bug #34311 (unserialize() crashes with characters above 191 dec)
  
http://cvs.php.net/diff.php/php-src/NEWS?r1=1.2027.2.51&r2=1.2027.2.52&ty=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.2027.2.51 php-src/NEWS:1.2027.2.52
--- php-src/NEWS:1.2027.2.51    Mon Sep  5 09:05:24 2005
+++ php-src/NEWS        Mon Sep  5 12:22:18 2005
@@ -23,6 +23,7 @@
 - Fixed failing queries (FALSE returned) with mysqli_query() on 64 bit systems.
   (Andrey)
 - Fixed bug #34331 (php crashes when variables_order is empty). (Ilia)
+- Fixed bug #34311 (unserialize() crashes with chars above 191 dec). (Nuno)
 - Fixed bug #34310 (foreach($arr as $c->d => $x) crashes). (Dmitry)
 - Fixed bug #34307 (on_modify handler not called to set the default value if
   setting from php.ini was invalid). (Andrei)     
http://cvs.php.net/diff.php/php-src/ext/standard/var_unserializer.re?r1=1.52&r2=1.52.2.1&ty=u
Index: php-src/ext/standard/var_unserializer.re
diff -u php-src/ext/standard/var_unserializer.re:1.52 
php-src/ext/standard/var_unserializer.re:1.52.2.1
--- php-src/ext/standard/var_unserializer.re:1.52       Wed Aug  3 10:08:16 2005
+++ php-src/ext/standard/var_unserializer.re    Mon Sep  5 12:22:19 2005
@@ -16,7 +16,7 @@
   +----------------------------------------------------------------------+
 */
 
-/* $Id: var_unserializer.re,v 1.52 2005/08/03 14:08:16 sniper Exp $ */
+/* $Id: var_unserializer.re,v 1.52.2.1 2005/09/05 16:22:19 sniper Exp $ */
 
 #include "php.h"
 #include "ext/standard/php_var.h"
@@ -150,7 +150,7 @@
 iv = [+-]? [0-9]+;
 nv = [+-]? ([0-9]* "." [0-9]+|[0-9]+ "." [0-9]*);
 nvexp = (iv | nv) [eE] [+-]? iv;
-any = [\000-\277];
+any = [\000-\377];
 object = [OC];
 */
 

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to