#48719 [Asn]: parse_ini_file scanner more sanitation

2009-06-29 Thread dragoonis at gmail dot com
 ID:   48719
 User updated by:  dragoonis at gmail dot com
 Reported By:  dragoonis at gmail dot com
 Status:   Assigned
 Bug Type: *General Issues
 Operating System: *
 PHP Version:  5.3.0RC4
 Assigned To:  kalle
 New Comment:

After more learning of how things work i've made the ZendEngine2 .patch
file and uploaded it to the following location.
http://digiflexdev.com/php/48719.patch


Previous Comments:


[2009-06-29 13:44:40] dragoonis at gmail dot com

Firstly, the original reproduce code has a syntax error in it however
heres what happens if you pass a valid constant to the function which
isn't ZEND_INI_SCANNER_NORMAL and ZEND_INI_SCANNER_RAW

 2
)



[2009-06-29 13:15:59] dragoonis at gmail dot com

Changed OS to 'All'



[2009-06-29 13:13:02] dragoonis at gmail dot com

Description:

The sanitation on the new parse_ini_file parameter names scanner mode
doesn't check if a valid scanner mode has been passed.

The patch has been applied below the if() for if (filename_len == 0)
{.
The fix can be found here:
http://digiflexdev.com/php/parse_ini_file_fix.txt

The .phpt file for this is below
http://digiflexdev.com/php/parse_ini_file_test.txt
I realise the .phpt file is wrong somewhat this is my first bug report
and the .phpt file just shows.

The same issue applies to parse_ini_string, respectively.

Reproduce code:
---
http://bugs.php.net/?id=48719&edit=1



#48719 [Asn]: parse_ini_file scanner more sanitation

2009-06-29 Thread dragoonis at gmail dot com
 ID:   48719
 User updated by:  dragoonis at gmail dot com
 Reported By:  dragoonis at gmail dot com
 Status:   Assigned
 Bug Type: Unknown/Other Function
 Operating System: All
 PHP Version:  5.3.0RC4
 Assigned To:  kalle
 New Comment:

Firstly, the original reproduce code has a syntax error in it however
heres what happens if you pass a valid constant to the function which
isn't ZEND_INI_SCANNER_NORMAL and ZEND_INI_SCANNER_RAW

 2
)


Previous Comments:


[2009-06-29 13:15:59] dragoonis at gmail dot com

Changed OS to 'All'



[2009-06-29 13:13:02] dragoonis at gmail dot com

Description:

The sanitation on the new parse_ini_file parameter names scanner mode
doesn't check if a valid scanner mode has been passed.

The patch has been applied below the if() for if (filename_len == 0)
{.
The fix can be found here:
http://digiflexdev.com/php/parse_ini_file_fix.txt

The .phpt file for this is below
http://digiflexdev.com/php/parse_ini_file_test.txt
I realise the .phpt file is wrong somewhat this is my first bug report
and the .phpt file just shows.

The same issue applies to parse_ini_string, respectively.

Reproduce code:
---
http://bugs.php.net/?id=48719&edit=1