iliaa Fri Aug 4 20:34:37 2006 UTC Modified files: /php-src/ext/imap php_imap.c Log: MFB: Fixed bug #37265 (Added missing safe_mode & open_basedir checks to imap_body()). http://cvs.php.net/viewvc.cgi/php-src/ext/imap/php_imap.c?r1=1.217&r2=1.218&diff_format=u Index: php-src/ext/imap/php_imap.c diff -u php-src/ext/imap/php_imap.c:1.217 php-src/ext/imap/php_imap.c:1.218 --- php-src/ext/imap/php_imap.c:1.217 Tue Jun 13 13:12:18 2006 +++ php-src/ext/imap/php_imap.c Fri Aug 4 20:34:37 2006 @@ -26,7 +26,7 @@ | PHP 4.0 updates: Zeev Suraski <[EMAIL PROTECTED]> | +----------------------------------------------------------------------+ */ -/* $Id: php_imap.c,v 1.217 2006/06/13 13:12:18 dmitry Exp $ */ +/* $Id: php_imap.c,v 1.218 2006/08/04 20:34:37 iliaa Exp $ */ #define IMAP41 @@ -763,6 +763,11 @@ efree(IMAPG(imap_password)); } + /* local filename, need to perform open_basedir checks */ + if (Z_STRVAL_PP(mailbox)[0] != '{' && php_check_open_basedir(Z_STRVAL_PP(mailbox) TSRMLS_CC)) { + RETURN_FALSE; + } + IMAPG(imap_user) = estrndup(Z_STRVAL_PP(user), Z_STRLEN_PP(user)); IMAPG(imap_password) = estrndup(Z_STRVAL_PP(passwd), Z_STRLEN_PP(passwd));
-- PHP CVS Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php