cvs: php-src(PHP_5_2) /ext/session session.c

iliaa Fri Dec 1 00:27:20 2006 UTC Modified files: (Branch: PHP_5_2) /php-src/ext/session session.c Log: Disallow \0 chars inside session.save_path http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.17&r2=1.417.2.8.2.18&diff_format=u Index: php-src/ext/session/session.c diff -u php-src/ext/session/session.c:1.417.2.8.2.17 php-src/ext/session/session.c:1.417.2.8.2.18 --- php-src/ext/session/session.c:1.417.2.8.2.17 Fri Nov 3 14:46:48 2006 +++ php-src/ext/session/session.c Fri Dec 1 00:27:20 2006 @@ -17,7 +17,7 @@ +----------------------------------------------------------------------+ */ -/* $Id: session.c,v 1.417.2.8.2.17 2006/11/03 14:46:48 bjori Exp $ */ +/* $Id: session.c,v 1.417.2.8.2.18 2006/12/01 00:27:20 iliaa Exp $ */ #ifdef HAVE_CONFIG_H #include "config.h" @@ -153,6 +153,10 @@ if (stage == PHP_INI_STAGE_RUNTIME) { char *p; + if (memchr(new_value, '\0', new_value_length) != NULL) { + return FAILURE; + } + if ((p = zend_memrchr(new_value, ';', new_value_length))) { p++; } else {