[PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c

2005-06-02 Thread Derick Rethans
derick Thu Jun 2 04:31:39 2005 EDT Modified files: (Branch: PHP_4_3) /php-src/ext/standard string.c /php-srcNEWS Log: - MFH: Fixed memory corruption in stristr(). http://cvs.php.net/diff.php/php-src/ext/standard/string.c?r1=1.333.2.50&r2=1.333.2.

[PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /ext/standard/tests/strings chunk_split.phpt

2005-04-03 Thread Ilia Alshanetsky
iliaa Sun Apr 3 14:09:57 2005 EDT Modified files: (Branch: PHP_4_3) /php-src/ext/standard string.c /php-src/ext/standard/tests/strings chunk_split.phpt /php-srcNEWS Log: MFH: Fixed bug #32530 (chunk_split() does not append endstr if chunklen i

Re: [PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /main rfc1867.c

2005-01-22 Thread Moriyoshi Koizumi
On 2005/01/22, at 4:50, Ilia Alshanetsky wrote: Moriyoshi Koizumi wrote: Right, but the browsers send filenames in its particular form, whose path delimiter could be '\\'. Isn't this causing another problem on a *NIX system where '\\' isn't regarded as a delimiter by php_basename()? No, browsers s

Re: [PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /main rfc1867.c

2005-01-21 Thread Ilia Alshanetsky
Moriyoshi Koizumi wrote: > Right, but the browsers send filenames in its particular form, whose > path delimiter could be '\\'. Isn't this causing another problem on > a *NIX system where '\\' isn't regarded as a delimiter by php_basename()? No, browsers send filenames however they like, we cannot

Re: [PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /main rfc1867.c

2005-01-21 Thread Moriyoshi Koizumi
On 2005/01/22, at 1:12, Ilia Alshanetsky wrote: Moriyoshi Koizumi wrote: What is really confusing around this stuff, is that php_basename() is all but designed to work on the filesystem where the script is running, while the filename coming from the outside isn't necessarily given in the same sche

Re: [PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /main rfc1867.c

2005-01-21 Thread Ilia Alshanetsky
Moriyoshi Koizumi wrote: > What is really confusing around this stuff, is that php_basename() is > all but designed to work on the filesystem where the script is running, > while the filename coming from the outside isn't necessarily given in > the same scheme. For example, php_basename() is unlike

Re: [PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /main rfc1867.c

2005-01-21 Thread Moriyoshi Koizumi
On 2005/01/22, at 0:02, Ilia Alshanetsky wrote: Uhm yes. The purpose of the code is to trim characters from the filename that could be interpreted as a path consequently leading to all sorts of interesting vulnerabilities. Given that we have a function for this very purpose called php_basenam

Re: [PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /main rfc1867.c

2005-01-21 Thread Ilia Alshanetsky
Uhm yes. The purpose of the code is to trim characters from the filename that could be interpreted as a path consequently leading to all sorts of interesting vulnerabilities. Given that we have a function for this very purpose called php_basename() it would only seem logic to use it, instead of

Re: [PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /main rfc1867.c

2005-01-21 Thread Moriyoshi Koizumi
On 2005/01/21, at 2:57, Ilia Alshanetsky wrote: iliaa Thu Jan 20 12:57:42 2005 EDT Modified files: (Branch: PHP_4_3) /php-src NEWS /php-src/main rfc1867.c /php-src/ext/standard string.c Log: MFH: Fixed bug #31398 (When magic_guotes_gpc are enabled filenames

[PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /main rfc1867.c

2005-01-20 Thread Ilia Alshanetsky
iliaa Thu Jan 20 12:57:42 2005 EDT Modified files: (Branch: PHP_4_3) /php-srcNEWS /php-src/main rfc1867.c /php-src/ext/standard string.c Log: MFH: Fixed bug #31398 (When magic_guotes_gpc are enabled filenames with ' get cutoff).

[PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c

2005-01-18 Thread Ilia Alshanetsky
iliaa Tue Jan 18 10:51:25 2005 EDT Modified files: (Branch: PHP_4_3) /php-srcNEWS /php-src/ext/standard string.c Log: MFH: Fixed bug #31479 (Fixed crash in chunk_split(), when chunklen > strlen). http://cvs.php.net/diff.php/php-src/NEWS?r1=1.1

[PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c

2004-10-17 Thread Ilia Alshanetsky
iliaa Sun Oct 17 14:41:30 2004 EDT Modified files: (Branch: PHP_4_3) /php-srcNEWS /php-src/ext/standard string.c Log: MFH: Fixed a bug in addslashes() handling of the '\0' character. http://cvs.php.net/diff.php/php-src/NEWS?r1=1.1247.2.739&r2=

[PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c

2004-07-06 Thread Ilia Alshanetsky
iliaa Tue Jul 6 18:16:47 2004 EDT Modified files: (Branch: PHP_4_3) /php-srcNEWS /php-src/ext/standard string.c Log: MFH: Fixed bug #29034 (wordwrap() returns a boolean when passed empty string). http://cvs.php.net/diff.php/php-src/NEWS?r1=

[PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c /ext/standard/tests/strings bug28386.phpt

2004-05-13 Thread Ilia Alshanetsky
iliaa Thu May 13 13:44:33 2004 EDT Added files: (Branch: PHP_4_3) /php-src/ext/standard/tests/strings bug28386.phpt Modified files: /php-src/ext/standard string.c /php-srcNEWS Log: MFH: Fixed bug #28386 (wordwrap() wraps lin

[PHP-CVS] cvs: php-src(PHP_4_3) / NEWS /ext/standard string.c

2003-09-26 Thread Sara Golemon
pollita Fri Sep 26 14:00:01 2003 EDT Modified files: (Branch: PHP_4_3) /php-src/ext/standard string.c /php-srcNEWS Log: MFH BugFix# 25671 subarray corruption in str_replace Index: php-src/ext/standard/string.c diff -u php-src/ext/standard/string.c: