Re: com php-src: Fix bug #73192: ext/standard/tests/url/bug73192.phpt ext/standard/tests/url/parse_url_basic_001.phpt
ext/standard/tests/url/parse_url_basic_002.phpt ext/standard/tests/url/parse_url_basic_003.phpt ext/standard/tests/url/parse_url_basic_004.phpt
ext/standard/tests/url/parse_url_basic_005.phpt ext/standard/tests/url/parse_url_basic_006.phpt ext/standard/tests/url/parse_url_basic_007.phpt
ext/standard/tests/url/parse_url_basic_008.phpt
| From: | Nikita Popov | Date: | Thu, 10 Nov 2016 12:01:32 +0000 |
| Subject: | Re: com php-src: Fix bug #73192: ext/standard/tests/url/bug73192.phpt ext/standard/tests/url/parse_url_basic_001.phpt ext/standard/tests/url/parse_url_basic_002.phpt ext/standard/tests/url/parse_url_basic_003.phpt ext/standard/tests/url/parse_url_basic_004.phpt ext/standard/tests/url/parse_url_basic_005.phpt ext/standard/tests/url/parse_url_basic_006.phpt ext/standard/tests/url/parse_url_basic_007.phpt ext/standard/tests/url/parse_url_basic_008.phpt |
||
| References: | 1 2 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-95484@lists.php.net to get a copy of this message | ||
On Thu, Nov 10, 2016 at 9:56 AM, Remi Collet <remi@php.net> wrote:
> Le 08/10/2016 à 01:04, Nikita Popov a écrit :
> > Commit: b061fa909de77085d3822a89ab901b934d0362c4
> > Author: Nikita Popov <nikic@php.net> Sat, 8 Oct 2016
> 01:04:22 +0200
> > Parents: bc3a0b82b82e54dabe688dcc37f8ada92771da0f
> > Branches: PHP-5.6 PHP-7.0 PHP-7.1 master
> >
> > Link:
> > http://git.php.net/?p=php-src.git;a=commitdiff;h=
> b061fa909de77085d3822a89ab901b934d0362c4
> >
> > Log:
> > Fix bug #73192
>
> Please notice that this change breaks (at least) pecl/ssh2 extension.
>
> Having to fix tests should have be an alarm...
>
The bug has been classified as a security issue. The previous attempt to
fix this restricted the character set allowed in passwords, which caused a
lot of fallout (see #71822). If there's a way to fix the sec bug while
keeping BC, that would be ideal, but I don't see how this can be done.
Nikita