[php-src] PR #23856: `php_ftp_fopen_connect()`: Confirm no extra commands are smuggled in
| From: | DanielEScherzer | Date: | Wed, 23 Sep 2026 01:28:35 +0000 |
| Subject: | [php-src] PR #23856: `php_ftp_fopen_connect()`: Confirm no extra commands are smuggled in | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-38733@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23856
Author: DanielEScherzer
Add a debug-only assertion that the parsed resource path has no remaining "\r\n"
substrings which would separate commands. Intended as a hardening measure - at the moment all
supported parsing backends handle included "\r\n" properly.