--- rpms/php/sme8/php-5.3.3-CVE-2011-2202.patch 2011/11/03 22:49:53 1.1 +++ rpms/php/sme8/php-5.3.3-CVE-2011-2202.patch 2011/11/03 22:54:19 1.2 @@ -0,0 +1,25 @@ + +https://bugzilla.redhat.com/show_bug.cgi?id=713194 + +http://svn.php.net/viewvc?view=revision&revision=312103 + +--- php-5.3.3/main/rfc1867.c.cve2202 ++++ php-5.3.3/main/rfc1867.c +@@ -1214,7 +1214,7 @@ filedone: + #endif + + if (!is_anonymous) { +- if (s && s > filename) { ++ if (s && s >= filename) { + safe_php_register_variable(lbuf, s+1, strlen(s+1), NULL, 0 TSRMLS_CC); + } else { + safe_php_register_variable(lbuf, filename, strlen(filename), NULL, 0 TSRMLS_CC); +@@ -1227,7 +1227,7 @@ filedone: + } else { + snprintf(lbuf, llen, "%s[name]", param); + } +- if (s && s > filename) { ++ if (s && s >= filename) { + register_http_post_files_variable(lbuf, s+1, http_post_files, 0 TSRMLS_CC); + } else { + register_http_post_files_variable(lbuf, filename, http_post_files, 0 TSRMLS_CC);