Re: Fixing bug #68063
| From: | Stanislav Malyshev | Date: | Tue, 12 Jan 2016 23:03:19 +0000 |
| Subject: | Re: Fixing bug #68063 | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-90578@lists.php.net to get a copy of this message | ||
Hi!
> I've disallowed empty session ID, but it wasn't a
> appropriate fix.
>
> https://bugs.php.net/bug.php?id=68063
Could you explain a bit more about the part where there are empty IDs
generated? You say it "is browser's cookie handling" - could you explain
more about it?
> I made appropriate patch for this issue. It should be
> applied from PHP 5.5 to master. I attached patch to
> the bug report. Could you apply it from PHP 5.5? Or
> shall I commit it from 5.6? then cherry pick?
Is that a security issue? If so, please explain how. If not, it should
be 5.6+.
--
Stas Malyshev
smalyshev@gmail.com