cvs: php-src(PHP_5_1) /ext/standard filestat.c
| From: | Ilia Alshanetsky | Date: | Thu, 10 Aug 2006 21:30:23 +0000 |
| Subject: | cvs: php-src(PHP_5_1) /ext/standard filestat.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-39905@lists.php.net to get a copy of this message | ||
iliaa Thu Aug 10 21:30:23 2006 UTC
Modified files: (Branch: PHP_5_1)
/php-src/ext/standard filestat.c
Log:
MFB: missing safe_mode check
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/filestat.c?r1=1.136.2.8&r2=1.136.2.9&diff_format=u
Index: php-src/ext/standard/filestat.c
diff -u php-src/ext/standard/filestat.c:1.136.2.8 php-src/ext/standard/filestat.c:1.136.2.9
--- php-src/ext/standard/filestat.c:1.136.2.8 Tue Apr 25 08:41:02 2006
+++ php-src/ext/standard/filestat.c Thu Aug 10 21:30:23 2006
@@ -16,7 +16,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: filestat.c,v 1.136.2.8 2006/04/25 08:41:02 tony2001 Exp $ */
+/* $Id: filestat.c,v 1.136.2.9 2006/08/10 21:30:23 iliaa Exp $ */
#include "php.h"
#include "safe_mode.h"
@@ -634,7 +634,7 @@
}
if ((wrapper = php_stream_locate_url_wrapper(filename, &local, 0 TSRMLS_CC)) ==
&php_plain_files_wrapper) {
- if (php_check_open_basedir(local TSRMLS_CC)) {
+ if (php_check_open_basedir(local TSRMLS_CC) || (PG(safe_mode) &&
!php_checkuid_ex(filename, NULL, CHECKUID_ALLOW_FILE_NOT_EXISTS, CHECKUID_NO_ERRORS))) {
RETURN_FALSE;
}
}