Re: Security patch from 4.3.8 to 4.3.9
| From: | Curt Zirzow | Date: | Thu, 14 Oct 2004 15:02:44 +0000 |
| Subject: | Re: Security patch from 4.3.8 to 4.3.9 | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-199482@lists.php.net to get a copy of this message | ||
* Thus wrote Federico Petronio:
>...
>
> Well.. that's why I prefer patching to upgrading.
>
> Looking in the CVS I found this, but I am not sure if that is ALL the
> change needed to fix the security bug.
>
>
> http://cvs.php.net/diff.php/php-src/main/php_variables.c?r1=1.45.2.6&r2=1.45.2.7&ty=u
>
I'd strongly discourage applying random patches on files. A fix for
a file may be due to a result of another change elsewhere, which
could potentially cause more problems.
Curt
--
Quoth the Raven, "Nevermore."