cvs: php-src(PHP_5_2) / NEWS /ext/session session.c

tony2001 Wed Apr 4 19:52:20 2007 UTC Modified files: (Branch: PHP_5_2) /php-src NEWS /php-src/ext/session session.c Log: MFH: fix #40998 (long session array keys are truncated) http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.623&r2=1.2027.2.547.2.624&diff_format=u Index: php-src/NEWS diff -u php-src/NEWS:1.2027.2.547.2.623 php-src/NEWS:1.2027.2.547.2.624 --- php-src/NEWS:1.2027.2.547.2.623 Tue Apr 3 20:21:20 2007 +++ php-src/NEWS Wed Apr 4 19:52:19 2007 @@ -37,6 +37,7 @@ - Fixed zend_llist_remove_tail (Michael Wallner, Dmitry) - Fixed a thread safety issue in gd gif read code (Nuno, Roman Nemecek) - Fixed CVE-2007-1001, GD wbmp used with invalid image size (Pierre) +- Fixed bug #40998 (long session array keys are truncated). (Tony) - Fixed bug #40921 (php_default_post_reader crashes when post_max_size is exceeded). (trickie at gmail dot com, Ilia) - Fixed bug #40915 (addcslashes unexpected behavior with binary input). (Tony) http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.32&r2=1.417.2.8.2.33&diff_format=u Index: php-src/ext/session/session.c diff -u php-src/ext/session/session.c:1.417.2.8.2.32 php-src/ext/session/session.c:1.417.2.8.2.33 --- php-src/ext/session/session.c:1.417.2.8.2.32 Wed Mar 14 19:37:07 2007 +++ php-src/ext/session/session.c Wed Apr 4 19:52:19 2007 @@ -17,7 +17,7 @@ +----------------------------------------------------------------------+ */ -/* $Id: session.c,v 1.417.2.8.2.32 2007/03/14 19:37:07 iliaa Exp $ */ +/* $Id: session.c,v 1.417.2.8.2.33 2007/04/04 19:52:19 tony2001 Exp $ */ #ifdef HAVE_CONFIG_H #include "config.h" @@ -523,7 +523,7 @@ PHP_VAR_SERIALIZE_INIT(var_hash); PS_ENCODE_LOOP( - smart_str_appendl(&buf, key, (unsigned char) key_length); + smart_str_appendl(&buf, key, key_length); if (memchr(key, PS_DELIMITER, key_length)) { PHP_VAR_SERIALIZE_DESTROY(var_hash); smart_str_free(&buf);