From: [EMAIL PROTECTED]
Operating system: debian linux
PHP version: 4.0CVS-2001-11-13
PHP Bug Type: cURL related
Bug description: segfaults due to curlopt not checking file handles are valid
curlopt does not check that file handles are valid - so if you send it a
string for CURL_INFILE it will segfault.
patch below
Index: curl.c
===================================================================
RCS file: /repository/php4/ext/curl/curl.c,v
retrieving revision 1.97
diff -u -r1.97 curl.c
--- curl.c 13 Nov 2001 11:47:52 -0000 1.97
+++ curl.c 14 Nov 2001 02:16:47 -0000
@@ -706,8 +706,13 @@
case CURLOPT_INFILE:
case CURLOPT_WRITEHEADER:
case CURLOPT_STDERR: {
- FILE *fp;
+ FILE *fp=NULL;
ZEND_FETCH_RESOURCE(fp, FILE *, zvalue, -1, "File-Handle",
php_file_le_fopen());
+ if (!fp) {
+ php_error(E_WARNING, "You must pass a file
handle with the CURLOPT_FILE,"
+ "CURLOPT_INFILE,
CURLOPT_WRITEHEADER and CURLOPT_STDERR arguments");
+ RETURN_FALSE;
+ }
error = CURLE_OK;
switch (option) {
--
Edit bug report at: http://bugs.php.net/?id=14046&edit=1
--
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
