#35225 [Opn->Fbk]: Wrong fopen mode used in GD safe-mode checks
| From: | tony2001@php.net | Date: | Tue, 15 Nov 2005 09:52:27 +0000 |
| Subject: | #35225 [Opn->Fbk]: Wrong fopen mode used in GD safe-mode checks | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-88194@lists.php.net to get a copy of this message | ||
ID: 35225
Updated by: tony2001@php.net
Reported By: virus at tgu dot ru
-Status: Open
+Status: Feedback
Bug Type: GD related
PHP Version: 4CVS-2005-11-15 (snap)
New Comment:
Please try using this CVS snapshot:
http://snaps.php.net/php4-STABLE-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php4-win32-STABLE-latest.zip
Should be in the next snapshot.
Previous Comments:
------------------------------------------------------------------------
[2005-11-15 10:49:08] virus at tgu dot ru
Description:
------------
Bug #35071 doesn't seem to be fixed in CVS.
(We still have !php_checkuid(filename, "rb+",
CHECKUID_CHECK_FILE_AND_DIR) in php_gd.h)
Bug #35060 is still reproduceable.
Reproduce code:
---------------
<?php
// safe_mode is enabled
$img_out=imagecreatetruecolor(200,200);
imagejpeg($img_out,'files/thingy/test.jpg',100);
imagedestroy($img_out);
?>
Expected result:
----------------
new image created "files/thingy/test.jpg"
Actual result:
--------------
Warning: imagejpeg(): Unable to access files/thingy/test.jpg in
/home/moron/www/test.php on line 3
Warning: imagejpeg(): Invalid filename 'files/thingy/test.jpg' in
/home/moron/www/test.php on line 3
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=35225&edit=1