Bug #61043 [Ctl->Csd]: Regression in magic_quotes_gpc fix (CVE-2012-0831)

From:	cataphract@php.net	Date:	Wed, 21 Mar 2012 21:18:29 +0000
Subject:	Bug #61043 [Ctl->Csd]: Regression in magic_quotes_gpc fix (CVE-2012-0831)
References:	1	Groups:	php.bugs
Request:	Send a blank email to php-bugs+get-168703@lists.php.net to get a copy of this message

Edit report at https://bugs.php.net/bug.php?id=61043&edit=1

 ID:                 61043
 Updated by:         cataphract@php.net
 Reported by:        ondrej@php.net
 Summary:            Regression in magic_quotes_gpc fix (CVE-2012-0831)
-Status:             Critical
+Status:             Closed
 Type:               Bug
 Package:            Variables related
 PHP Version:        5.3SVN-2012-02-10 (SVN)
 Assigned To:        johannes
 Block user comment: N
 Private report:     N

 New Comment:

This bug has been fixed in SVN.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.

I took the liberty of committing it.


Previous Comments:
------------------------------------------------------------------------
[2012-03-21 21:13:53] ondrej@sury.org@php.net

Automatic comment on behalf of ondrej@sury.org
Revision: http://git.php.net/?p=php-src.git;a=commit;h=d1fd5432e1576865dbeb7650b7c7e0fa0bd3a4e1
Log: Fixed bug #61043 (Regression in magic_quotes_gpc fix for CVE-2012-0831)

------------------------------------------------------------------------
[2012-03-21 21:13:52] cataphract@php.net

Automatic comment on behalf of cataphract
Revision: http://git.php.net/?p=php-src.git;a=commit;h=2d2995f343629b80649fb09ce37e7e0750d2af4a
Log: Fixed bug #61043: Regression in magic_quotes_gpc fix (CVE-2012-0831)

------------------------------------------------------------------------
[2012-03-09 08:23:57] ondrej@php.net

Nope, r323016 is the commit which broke it.

Please look at the patch and look at the broken code before jumping to 
conclusions.

------------------------------------------------------------------------
[2012-03-08 13:17:17] johannes@php.net

I think this was fixed in r323016. Please verify.

------------------------------------------------------------------------
[2012-03-05 22:46:30] pajoye@php.net

Johannes, can you check this please?

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=61043


-- 
Edit this bug report at https://bugs.php.net/bug.php?id=61043&edit=1


   

Thread (9 messages)

• ondrej@php.netFri, 10 Feb 2012 12:43:45 +0000
  • ondrej@php.netFri, 10 Feb 2012 12:44:17 +0000Bug #61043 [PATCH]: Regression in magic_quotes_gpc fix (CVE-2012-0831)
  • ondrej@php.netFri, 10 Feb 2012 13:19:41 +0000Bug #61043 [Com]: Regression in magic_quotes_gpc fix (CVE-2012-0831)
  • sbeattie@php.netMon, 13 Feb 2012 18:37:04 +0000Bug #61043 [Com]: Regression in magic_quotes_gpc fix (CVE-2012-0831)
  • pajoye@php.netMon, 05 Mar 2012 22:46:30 +0000Bug #61043 [Opn->Ctl]: Regression in magic_quotes_gpc fix (CVE-2012-0831)
  • johannes@php.netThu, 08 Mar 2012 13:17:17 +0000Bug #61043 [Ctl->Fbk]: Regression in magic_quotes_gpc fix (CVE-2012-0831)
  • ondrej@php.netFri, 09 Mar 2012 08:23:57 +0000Bug #61043 [Fbk]: Regression in magic_quotes_gpc fix (CVE-2012-0831)
  • ondrej@php.netFri, 09 Mar 2012 13:09:55 +0000Bug #61043 [Fbk->Ctl]: Regression in magic_quotes_gpc fix (CVE-2012-0831)
  • cataphract@php.netWed, 21 Mar 2012 21:18:29 +0000Bug #61043 [Ctl->Csd]: Regression in magic_quotes_gpc fix (CVE-2012-0831)