search

rantoniuk / php52-backports

Automatically exported from code.google.com/p/php52-backports
Other
1 stars 1 forks source link

cgi_main.c - Fixes from PHP.NET and CVE-2012-0831 #29

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
I've found a fix that is included into the security patch (similar code): 
http://git.php.net/?p=php-src.git;a=commitdiff;h=87c038be06b8b0eb721270f98c858fd
701f5d54b

Unfortunately that fix is incomplete and was fixed later by this commit:
http://git.php.net/?p=php-src.git;a=commitdiff;h=d1fd5432e1576865dbeb7650b7c7e0f
a0bd3a4e1

Personally, I have reverted the incomplete fix for cgi_main.c with the revert 
patch that I've attached here, since I see no added value in having those 
changes.

If you do not intend to revert and thus fix it, you could apply the 
fix_bug61043.diff in the security patched version.

Original issue reported on code.google.com by NewEraCr...@gmail.com on 15 Aug 2013 at 2:16

Attachments: