Bug #50363 [Com]: Invalid parsing in convert.quoted-printable-decode filter
| From: | lserni at gmail dot com | Date: | Wed, 22 May 2019 08:00:46 +0000 |
| Subject: | Bug #50363 [Com]: Invalid parsing in convert.quoted-printable-decode filter | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-220938@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=50363&edit=1
ID: 50363
Comment by: lserni at gmail dot com
Reported by: slusarz at curecanti dot org
Summary: Invalid parsing in convert.quoted-printable-decode
filter
Status: Closed
Type: Bug
Package: Streams related
Operating System: *
PHP Version: 5.*, 6
Assigned To: felipe
Block user comment: N
Private report: N
New Comment:
There apparently is a 8K buffer somewhere in the stream decoder (I'm looking at an obsolete PHP
5.3 now); on hitting exactly the sweet spot (I suspect an off-by-one boundary error), a valid
quoted-printable sequence
es:Cert><xades:CertDigest><ds:DigestMethod Algorithm=3D"http://www.w3.org/2=
001/04/xmlenc#sha256"/><ds:DigestValue>IoxqxvKlcid+Ul8y6xoggwfld+T1sTaesRXv=
Y8sqO1o=3D</ds:DigestValue></xades:CertDigest><xades:IssuerSerialV2>MIGOMIG=
BpH8wfTELMAkGA1UEBhMCSVQxJDAiBgNVBAoMG05hbWlyaWFsIFMucC5BLi8wMjA0NjU3MDQyNj=
EgMB4GA1UECwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMMHU5hbWlyaWFsIENBI=
EZpcm1hIFF1YWxpZmljYXRhAgh4ZkpnSDVI6A=3D=3D</xades:IssuerSerialV2></xades:C=
ert></xades:SigningCertificateV2></xades:SignedSignatureProperties><xades:S=
ignedDataObjectProperties><xades:DataObjectFormat ObjectReference=3D"#null"=
><xades:MimeType>application/octet-stream</xades:MimeType></xades:DataObjec=
tFormat></xades:SignedDataObjectProperties></xades:SignedProperties></xades=
gets an extra LF added, resulting in
....</xades:C
ert>....
(which then becomes "</xades:C ert>", which is invalid XML. That's how I
noticed it).
Previous Comments:
------------------------------------------------------------------------
[2013-11-17 09:38:08] laruence@php.net
Automatic comment on behalf of felipe
Revision: http://git.php.net/?p=php-src.git;a=commit;h=b2780241d7354d9282a88e6bc615eb8b13e2af59
Log: - Fixed bug #50363 (Invalid parsing in convert.quoted-printable-decode filter) Patch by:
slusarz at curecanti dot org
------------------------------------------------------------------------
[2012-07-24 23:41:38] rasmus@php.net
Automatic comment on behalf of felipe
Revision: http://git.php.net/?p=php-src.git;a=commit;h=b2780241d7354d9282a88e6bc615eb8b13e2af59
Log: - Fixed bug #50363 (Invalid parsing in convert.quoted-printable-decode filter) Patch by:
slusarz at curecanti dot org
------------------------------------------------------------------------
[2012-04-18 09:50:33] laruence@php.net
Automatic comment on behalf of felipe
Revision: http://git.php.net/?p=php-src.git;a=commit;h=b2780241d7354d9282a88e6bc615eb8b13e2af59
Log: - Fixed bug #50363 (Invalid parsing in convert.quoted-printable-decode filter) Patch by:
slusarz at curecanti dot org
------------------------------------------------------------------------
[2011-05-25 01:50:29] felipe@php.net
This bug has been fixed in SVN.
Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
Thank you for the report, and for helping us make PHP better.
Thanks for the patch! :)
------------------------------------------------------------------------
[2011-05-25 01:49:29] felipe@php.net
Automatic comment from SVN on behalf of felipe
Revision: http://svn.php.net/viewvc/?view=revision&revision=311407
Log: - Fixed bug #50363 (Invalid parsing in convert.quoted-printable-decode filter)
Patch by: slusarz at curecanti dot org
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=50363
--
Edit this bug report at https://bugs.php.net/bug.php?id=50363&edit=1