Attachment 914870 Details for Bug 1116532 – PHP 5.3 infoleak vulnerability patch

PHP 5.3 infoleak vulnerability patch

file_1116532.txt (text/plain), 1.65 KB, created by Loganaden Velvindron on 2014-07-05 21:24:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Loganaden Velvindron

Created: 2014-07-05 21:24:30 UTC

Size: 1.65 KB

patch

obsolete

>diff --git a/ext/standard/info.c b/ext/standard/info.c
>index 631ab34..7f2e9a9 100644
>--- a/ext/standard/info.c
>+++ b/ext/standard/info.c
>@@ -972,16 +972,16 @@ PHPAPI void php_print_info(int flag TSRMLS_DC)
> 
> 		php_info_print_table_start();
> 		php_info_print_table_header(2, "Variable", "Value");
>-		if (zend_hash_find(&EG(symbol_table), "PHP_SELF", sizeof("PHP_SELF"), (void **) &data) != FAILURE) {
>+		if (zend_hash_find(&EG(symbol_table), "PHP_SELF", sizeof("PHP_SELF"), (void **) &data) != FAILURE && Z_TYPE_PP(data) == IS_STRING) {
> 			php_info_print_table_row(2, "PHP_SELF", Z_STRVAL_PP(data));
> 		}
>-		if (zend_hash_find(&EG(symbol_table), "PHP_AUTH_TYPE", sizeof("PHP_AUTH_TYPE"), (void **) &data) != FAILURE) {
>+		if (zend_hash_find(&EG(symbol_table), "PHP_AUTH_TYPE", sizeof("PHP_AUTH_TYPE"), (void **) &data) != FAILURE && Z_TYPE_PP(data) == IS_STRING) {
> 			php_info_print_table_row(2, "PHP_AUTH_TYPE", Z_STRVAL_PP(data));
> 		}
>-		if (zend_hash_find(&EG(symbol_table), "PHP_AUTH_USER", sizeof("PHP_AUTH_USER"), (void **) &data) != FAILURE) {
>+		if (zend_hash_find(&EG(symbol_table), "PHP_AUTH_USER", sizeof("PHP_AUTH_USER"), (void **) &data) != FAILURE && Z_TYPE_PP(data) == IS_STRING) {
> 			php_info_print_table_row(2, "PHP_AUTH_USER", Z_STRVAL_PP(data));
> 		}
>-		if (zend_hash_find(&EG(symbol_table), "PHP_AUTH_PW", sizeof("PHP_AUTH_PW"), (void **) &data) != FAILURE) {
>+		if (zend_hash_find(&EG(symbol_table), "PHP_AUTH_PW", sizeof("PHP_AUTH_PW"), (void **) &data) != FAILURE && Z_TYPE_PP(data) == IS_STRING) {
> 			php_info_print_table_row(2, "PHP_AUTH_PW", Z_STRVAL_PP(data));
> 		}
> 		php_print_gpcse_array("_REQUEST", sizeof("_REQUEST")-1 TSRMLS_CC);

Actions: View

Attachments on bug 1116532: 914870