[php-src] PR #24656: Fix GH-24640: tcadb handler allows injecting Tokyo Cabinet parameters via "#"
| From: | lazerg | Date: | Sat, 24 Oct 2026 16:14:52 +0000 |
| Subject: | [php-src] PR #24656: Fix GH-24640: tcadb handler allows injecting Tokyo Cabinet parameters via "#" | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39829@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24656
Author: lazerg
tcadbopen() splits its name on
# and treats everything after the first one as tuning
parameters, so a dba_open() path containing # opened a different file than
the one PHP's lock layer used, with extra parameters like bnum applied. Tokyo
Cabinet has no way to escape #, so the tcadb handler now rejects such paths.
Fixes #24640