[prev in list] [next in list] [prev in thread] [next in thread] 

List:       php-cvs
Subject:    [PHP-CVS] cvs: php-src(PHP_5_3) /sapi/cgi cgi_main.c
From:       "Ilia Alshanetsky" <iliaa () php ! net>
Date:       2008-02-28 0:51:56
Message-ID: cvsiliaa1204159916 () cvsserver
[Download RAW message or body]

iliaa		Thu Feb 28 00:51:56 2008 UTC

  Modified files:              (Branch: PHP_5_3)
    /php-src/sapi/cgi	cgi_main.c 
  Log:
  
  MFB:  Fixed security issue detailed in CVE-2008-0599
  
http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u
                
Index: php-src/sapi/cgi/cgi_main.c
diff -u php-src/sapi/cgi/cgi_main.c:1.267.2.15.2.50.2.12 \
                php-src/sapi/cgi/cgi_main.c:1.267.2.15.2.50.2.13
--- php-src/sapi/cgi/cgi_main.c:1.267.2.15.2.50.2.12	Fri Feb 15 14:45:42 2008
+++ php-src/sapi/cgi/cgi_main.c	Thu Feb 28 00:51:56 2008
@@ -21,7 +21,7 @@
    +----------------------------------------------------------------------+
 */
 
-/* $Id: cgi_main.c,v 1.267.2.15.2.50.2.12 2008/02/15 14:45:42 dmitry Exp $ */
+/* $Id: cgi_main.c,v 1.267.2.15.2.50.2.13 2008/02/28 00:51:56 iliaa Exp $ */
 
 #include "php.h"
 #include "php_globals.h"
@@ -1101,7 +1101,7 @@
 						) {
 							/* PATH_TRANSLATED = PATH_TRANSLATED - SCRIPT_NAME + PATH_INFO */
 							int ptlen = strlen(pt) - strlen(env_script_name);
-							int path_translated_len = ptlen + env_path_info ? strlen(env_path_info) : 0;
+							int path_translated_len = ptlen + (env_path_info ? strlen(env_path_info) : \
0);  char *path_translated = NULL;
 
 							path_translated = (char *) emalloc(path_translated_len + 1);

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[prev in list] [next in list] [prev in thread] [next in thread]