Bug #61000 [PATCH]: Exceeding max nesting level doesn't delete numerical vars

From: Date: Wed, 08 Feb 2012 06:08:12 +0000
Subject: Bug #61000 [PATCH]: Exceeding max nesting level doesn't delete numerical vars
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-167280@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=61000&edit=1

 ID:                 61000
 Patch added by:     laruence@php.net
 Reported by:        cataphract@php.net
 Summary:            Exceeding max nesting level doesn't delete numerical
                     vars
 Status:             Open
 Type:               Bug
 Package:            Scripting Engine problem
 Operating System:   Irrelevant
 PHP Version:        trunk-SVN-2012-02-07 (snap)
 Block user comment: N
 Private report:     N

 New Comment:

The following patch has been added/updated:

Patch Name: bug61000.patch
Revision:   1328681292
URL:        https://bugs.php.net/patch-display.php?bug=61000&patch=bug61000.patch&revision=1328681292


Previous Comments:
------------------------------------------------------------------------
[2012-02-07 09:45:58] cataphract@php.net

Description:
------------
Exceeding the max nesting level doesn't delete numerical vars, while it deletes the
non-numerical ones. php_register_variable_ex inappropriately uses zend_hash_del.

(Found out by Stefan Esser, who points this can be used, together with max_input_vars, to determine
whether PHP is a 32-bit or 64-bit process)

Test script:
---------------
With max nesting level=2:

http://nebm.ist.utl.pt/phpinfo?1[a][]=foo&1[a][b][c]=bar



Expected result:
----------------
_GET is empty

Actual result:
--------------
_GET["1"] =
Array
(
    [a] => Array
        (
            [0] => foo
        )

)


------------------------------------------------------------------------



-- 
Edit this bug report at https://bugs.php.net/bug.php?id=61000&edit=1

Thread (5 messages)

« previous php.bugs (#167280) next »