Re: [APC-DEV] 3.0.17

From: Date: Tue, 25 Mar 2008 10:09:27 +0000
Subject: Re: [APC-DEV] 3.0.17
References: 1 2  Groups: php.apc.dev 
Request: Send a blank email to php-apc-dev+get-110@lists.php.net to get a copy of this message
Ok, packaging up 3.0.17 now. I should have been paying more attention to strcpy-related issues. The patch that caused this was: http://cvs.php.net/viewvc.cgi/pecl/apc/apc.c?sortby=date&view=diff&r1=3.12&r2=3.13 Just remember to always use strlcpy instead of strcpy. Grepping through the code there are no other strcpy() calls, so I think we are ok now. -Rasmus Brian Shire wrote:
Nothing from me.... Thanks, -shire On Mar 24, 2008, at 10:45 PM, Rasmus Lerdorf wrote:
Anyone have anything they want to squeeze into 3.0.17? We need a quick release to address CVE-2008-1488 -Rasmus -- APC Development Mailing List (http://pecl.php.net/APC) To unsubscribe, visit: http://www.php.net/unsub.php


« previous php.apc.dev (#110) next »