tony2001 Wed Apr 4 19:52:20 2007 UTC
Modified files: (Branch: PHP_5_2)
/php-src NEWS
/php-src/ext/session session.c
Log:
MFH: fix #40998 (long session array keys are truncated)
http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.623&r2=1.2027.2.547.2.624&diff_format=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.2027.2.547.2.623 php-src/NEWS:1.2027.2.547.2.624
--- php-src/NEWS:1.2027.2.547.2.623 Tue Apr 3 20:21:20 2007
+++ php-src/NEWS Wed Apr 4 19:52:19 2007
@@ -37,6 +37,7 @@
- Fixed zend_llist_remove_tail (Michael Wallner, Dmitry)
- Fixed a thread safety issue in gd gif read code (Nuno, Roman Nemecek)
- Fixed CVE-2007-1001, GD wbmp used with invalid image size (Pierre)
+- Fixed bug #40998 (long session array keys are truncated). (Tony)
- Fixed bug #40921 (php_default_post_reader crashes when post_max_size is
exceeded). (trickie at gmail dot com, Ilia)
- Fixed bug #40915 (addcslashes unexpected behavior with binary input). (Tony)
http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.32&r2=1.417.2.8.2.33&diff_format=u
Index: php-src/ext/session/session.c
diff -u php-src/ext/session/session.c:1.417.2.8.2.32
php-src/ext/session/session.c:1.417.2.8.2.33
--- php-src/ext/session/session.c:1.417.2.8.2.32 Wed Mar 14 19:37:07 2007
+++ php-src/ext/session/session.c Wed Apr 4 19:52:19 2007
@@ -17,7 +17,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: session.c,v 1.417.2.8.2.32 2007/03/14 19:37:07 iliaa Exp $ */
+/* $Id: session.c,v 1.417.2.8.2.33 2007/04/04 19:52:19 tony2001 Exp $ */
#ifdef HAVE_CONFIG_H
#include "config.h"
@@ -523,7 +523,7 @@
PHP_VAR_SERIALIZE_INIT(var_hash);
PS_ENCODE_LOOP(
- smart_str_appendl(&buf, key, (unsigned char)
key_length);
+ smart_str_appendl(&buf, key, key_length);
if (memchr(key, PS_DELIMITER, key_length)) {
PHP_VAR_SERIALIZE_DESTROY(var_hash);
smart_str_free(&buf);
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
