php/sme8/php-5.3.3-CVE-2012-1172.patch


https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1172

http://git.php.net/?p=php-src.git;a=commitdiff;h=95dcd799fb6fdccbc60d3bba3cd759f6b421ee69

--- php-5.3.3/main/rfc1867.c.cve1172
+++ php-5.3.3/main/rfc1867.c
@@ -1008,6 +1008,10 @@ SAPI_API SAPI_POST_HANDLER_FUNC(rfc1867_
                                        }
                                        tmp++;
                                }
+                               /* Brackets should always be closed */
+                               if(c != 0) {
+                                       skip_upload = 1;
+                               }
                        }
 
                        total_bytes = cancel_upload = 0;
1
2	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1172
3
4	http://git.php.net/?p=php-src.git;a=commitdiff;h=95dcd799fb6fdccbc60d3bba3cd759f6b421ee69
5
6	--- php-5.3.3/main/rfc1867.c.cve1172
7	+++ php-5.3.3/main/rfc1867.c
8	@@ -1008,6 +1008,10 @@ SAPI_API SAPI_POST_HANDLER_FUNC(rfc1867_
9	}
10	tmp++;
11	}
12	+ /* Brackets should always be closed */
13	+ if(c != 0) {
14	+ skip_upload = 1;
15	+ }
16	}
17
18	total_bytes = cancel_upload = 0;