Re: Preliminary PHP taint support available

Cristian Rodriguez: > 2007/11/3, Wietse Venema <wietse@porcupine.org>: > > > OK, I have updated the apache2 module SAPI, a > > The CGI sapi. using this tarball > ftp://ftp.porcupine.org/pub/php/php-5.2.3-taint-20071103.tar.gz > > does not compile > > /home/cristian/php5.2.3-tainted/php-5.2.3-taint-20071103/sapi/cgi/cgi_main.c: > In function 'cgi_php_import_environment_variables': > /home/cristian/php5.2.3-tainted/php-5.2.3-taint-20071103/sapi/cgi/cgi_main.c:514: > warning: passing argument 5 of 'sapi_module.input_filter' makes > integer from pointer without a cast > /home/cristian/php5.2.3-tainted/php-5.2.3-taint-20071103/sapi/cgi/cgi_main.c:514: > error: too few arguments to function 'sapi_module.input_filter' > make: *** [sapi/cgi/cgi_main.lo] Error 1 PHP compiles error-free with: $ fetch ftp://ftp.porcupine.org/pub/php/php-5.2.3-taint-20071103.tar.gz $ gzcat php-5.2.3-taint-20071103.tar.gz | tar xf - $ cd php-5.2.3-taint-20071103 $ ./configure $ make $ ls -l sapi/cgi/cgi_main* -rw-r--r-- 1 wietse wheel 54118 Sep 28 20:30 sapi/cgi/cgi_main.c -rw-r--r-- 1 wietse wheel 310 Nov 8 07:01 sapi/cgi/cgi_main.lo -rw-r--r-- 1 wietse wheel 61604 Nov 8 07:01 sapi/cgi/cgi_main.o What commands were you were using? Wietse