Re: Proposed fix for bug #21149
| From: | Melvyn Sopacua | Date: | Tue, 24 Dec 2002 01:25:05 +0000 |
| Subject: | Re: Proposed fix for bug #21149 | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-92802@lists.php.net to get a copy of this message | ||
On Mon, 23 Dec 2002, Ilia A. wrote:
IA>>> The current implementation of php_register_variable_ex() improperly handles
IA>>> situations when the name of the variable passed via GET/POST/COOKIES contains
IA>>> a '[' or it's urlencoded equivalent. The result is a small memory leak
IA>>>
IA>>> (number of chars between '[' and '=' +1) and invalid data inside
IA>>> the
IA>>> GET/POST/COOKIES array.
IA>>> The proposed patch makes php_register_variable_ex aware that [ may not be
IA>>> terminated and adds handling for such conditions. The end result is that the
IA>>> code no longer leaks memory & can support variable passed via
IA>>> GET/POST/COOKIES with '[' in their names.
IA>>>
[02:21] <ilia> melvyn: +1 it :)
[02:23] <melvyn> ilia: not sure that's gonna help with my karma factor :)
[02:23] <ilia> melvyn: doesn't matter :)
so -ehm +1?
--
With kind regards,
Melvyn Sopacua
<?php include("not_reflecting_employers_views.txt"); ?>