File: CVE-2015-2348.patch

package info (click to toggle)
php5 5.3.3.1-7%2Bsqueeze29
  • links: PTS, VCS
  • area: main
  • in suites: squeeze-lts
  • size: 123,520 kB
  • ctags: 55,742
  • sloc: ansic: 633,963; php: 19,620; sh: 11,344; xml: 5,816; cpp: 2,400; yacc: 1,745; exp: 1,514; makefile: 1,019; pascal: 623; awk: 537; sql: 22
file content (22 lines) | stat: -rw-r--r-- 907 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
From 313ff116fa08918fb3949d51f17eb39d0b950962 Mon Sep 17 00:00:00 2001
From: Stanislav Malyshev <stas@php.net>
Date: Tue, 17 Mar 2015 12:47:58 -0700
Subject: [PATCH] Fix bug #69207 - move_uploaded_file allows nulls in path

---
 ext/standard/basic_functions.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Index: php5-5.3.3.1/ext/standard/basic_functions.c
===================================================================
--- php5-5.3.3.1.orig/ext/standard/basic_functions.c	2016-01-21 15:43:50.000000000 +0100
+++ php5-5.3.3.1/ext/standard/basic_functions.c	2016-01-24 14:16:14.000000000 +0100
@@ -5822,7 +5822,7 @@
 		RETURN_FALSE;
 	}
 
-	if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "ss", &path, &path_len, &new_path, &new_path_len) == FAILURE) {
+	if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "sp", &path, &path_len, &new_path, &new_path_len) == FAILURE) {
 		return;
 	}