https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1172 http://git.php.net/?p=php-src.git;a=commitdiff;h=95dcd799fb6fdccbc60d3bba3cd759f6b421ee69 --- php-5.3.3/main/rfc1867.c.cve1172 +++ php-5.3.3/main/rfc1867.c @@ -1008,6 +1008,10 @@ SAPI_API SAPI_POST_HANDLER_FUNC(rfc1867_ } tmp++; } + /* Brackets should always be closed */ + if(c != 0) { + skip_upload = 1; + } } total_bytes = cancel_upload = 0;