[php-src] PR #25102: Fix GH-25093: Phar::webPhar() redirect reads past the request URI
| From: | lazerg | Date: | Sat, 31 Oct 2026 17:32:51 +0000 |
| Subject: | [php-src] PR #25102: Fix GH-25093: Phar::webPhar() redirect reads past the request URI | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40150@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25102
Author: lazerg
On non-CGI SAPIs the 301 redirect for a direct request cut the request URI at
strstr(path_info, basename) + fname_len, but fname_len is the length of
the full phar path, not of its basename. That pointer lands past the end of the URI (or in the wrong
place when a rewrite callback returns /), so it now advances by the basename length
like the code that builds pt already does.
Fixes #25093