iliaa Fri Dec 1 00:27:33 2006 UTC
Modified files:
/php-src/ext/session session.c
Log:
MFB: Disallow \0 chars inside session.save_path
http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.455&r2=1.456&diff_format=u
Index: php-src/ext/session/session.c
diff -u php-src/ext/session/session.c:1.455 php-src/ext/session/session.c:1.456
--- php-src/ext/session/session.c:1.455 Sun Oct 8 13:34:23 2006
+++ php-src/ext/session/session.c Fri Dec 1 00:27:33 2006
@@ -17,7 +17,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: session.c,v 1.455 2006/10/08 13:34:23 bjori Exp $ */
+/* $Id: session.c,v 1.456 2006/12/01 00:27:33 iliaa Exp $ */
#ifdef HAVE_CONFIG_H
#include "config.h"
@@ -150,6 +150,10 @@
if (stage == PHP_INI_STAGE_RUNTIME) {
char *p;
+ if (memchr(new_value, '\0', new_value_length) != NULL) {
+ return FAILURE;
+ }
+
if ((p = zend_memrchr(new_value, ';', new_value_length))) {
p++;
} else {
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
