stas Sat Feb 24 01:18:14 2007 UTC
Modified files: (Branch: PHP_5_2)
/php-src/ext/session session.c
Log:
disallow negative length
http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.26&r2=1.417.2.8.2.27&diff_format=u
Index: php-src/ext/session/session.c
diff -u php-src/ext/session/session.c:1.417.2.8.2.26
php-src/ext/session/session.c:1.417.2.8.2.27
--- php-src/ext/session/session.c:1.417.2.8.2.26 Wed Jan 10 07:04:49 2007
+++ php-src/ext/session/session.c Sat Feb 24 01:18:14 2007
@@ -17,7 +17,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: session.c,v 1.417.2.8.2.26 2007/01/10 07:04:49 dmitry Exp $ */
+/* $Id: session.c,v 1.417.2.8.2.27 2007/02/24 01:18:14 stas Exp $ */
#ifdef HAVE_CONFIG_H
#include "config.h"
@@ -478,7 +478,7 @@
zval **tmp;
namelen = *p & (~PS_BIN_UNDEF);
- if (namelen > PS_BIN_MAX || (p + namelen) >= endptr) {
+ if (namelen < 0 || namelen > PS_BIN_MAX || (p + namelen) >=
endptr) {
return FAILURE;
}
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
