CVE-2007-1285 fix for 4.x
| From: | Stanislav Malyshev | Date: | Mon, 21 May 2007 19:04:17 +0000 |
| Subject: | CVE-2007-1285 fix for 4.x | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-29633@lists.php.net to get a copy of this message | ||
The attached patch fixes CVE-2007-1285 (nesting variables in input
crash) for 4.x branch - release notes say it's fixed but in fact it
never was.
Objections?
--
Stanislav Malyshev, Zend Products Engineer
stas@zend.com http://www.zend.com/