/[smeserver]/rpms/php/sme8/php-5.3.3-extrglob.patch
ViewVC logotype

Contents of /rpms/php/sme8/php-5.3.3-extrglob.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (show annotations) (download)
Mon Dec 16 10:46:47 2013 UTC (10 years, 4 months ago) by vip-ire
Branch: MAIN
CVS Tags: php-5_3_3-14_el5_sme, php-5_3_3-17_el5_sme, php-5_3_3-15_el5_sme, php-5_3_3-16_el5_sme, HEAD
* Mon Dec 16 2013 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-14.sme
- Resync with upstream php53, which include:
- add security fix for CVE-2013-6420
- add security fix for CVE-2013-4248
- add upstream reproducer for error_handler (#951075)
- add security fixes for CVE-2006-7243
- add security fixes for CVE-2012-2688, CVE-2012-0831,
  CVE-2011-1398, CVE-2013-1643
- fix segfault in error_handler with
  allow_call_time_pass_reference = Off (#951075)
- fix double free when destroy_zend_class fails (#951076)
- fix possible buffer overflow in pdo_odbc (#869694)
- php script hangs when it exceeds max_execution_time
  when inside an ODBC call (#864954)
- fix zend garbage collector (#892695)
- fix transposed memset arguments in libzip (#953818)
- fix possible segfault in pdo_mysql (#869693)
- fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859369)
- fix stream support in fileinfo (#869697)
- fix setDate when DateTime created from timestamp (#869691)
- fix permission on source files (#869688)
- add php(language) and missing provides (#837044)
-
- fix copy doesn't report failure on partial copy (#951413)

1
2 http://svn.php.net/viewvc?view=revision&revision=305570
3
4 --- php-5.3.2/ext/standard/array.c.r305570
5 +++ php-5.3.2/ext/standard/array.c
6 @@ -1380,10 +1380,10 @@ PHP_FUNCTION(extract)
7
8 case EXTR_OVERWRITE:
9 /* GLOBALS protection */
10 - if (var_exists && var_name_len == sizeof("GLOBALS") && !strcmp(var_name, "GLOBALS")) {
11 + if (var_exists && var_name_len == sizeof("GLOBALS")-1 && !strcmp(var_name, "GLOBALS")) {
12 break;
13 }
14 - if (var_exists && var_name_len == sizeof("this") && !strcmp(var_name, "this") && EG(scope) && EG(scope)->name_length != 0) {
15 + if (var_exists && var_name_len == sizeof("this")-1 && !strcmp(var_name, "this") && EG(scope) && EG(scope)->name_length != 0) {
16 break;
17 }
18 ZVAL_STRINGL(&final_name, var_name, var_name_len, 1);
19 --- php-5.3.2/ext/standard/tests/array/extract_safety.phpt.r305570
20 +++ php-5.3.2/ext/standard/tests/array/extract_safety.phpt
21 @@ -0,0 +1,24 @@
22 +--TEST--
23 +Test extract() for overwrite of GLOBALS
24 +--FILE--
25 +<?php
26 +$str = "John";
27 +debug_zval_dump($GLOBALS["str"]);
28 +
29 +/* Extracting Global Variables */
30 +$splat = array("foo" => "bar");
31 +var_dump(extract(array("GLOBALS" => $splat, EXTR_OVERWRITE)));
32 +
33 +unset ($splat);
34 +
35 +debug_zval_dump($GLOBALS["str"]);
36 +
37 +echo "\nDone";
38 +?>
39 +
40 +--EXPECTF--
41 +string(4) "John" refcount(2)
42 +int(0)
43 +string(4) "John" refcount(2)
44 +
45 +Done

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed