php/archived-php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2026-03-26 17:22:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Disallow \0 chars inside session.save_path

Browse Source
This commit is contained in:
Ilia Alshanetsky
2006-12-01 00:27:20 +00:00
parent c42d25dc33
commit 5f3e233ea7
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ext/session/session.c
View File

@@ -153,6 +153,10 @@ static PHP_INI_MH(OnUpdateSaveDir)
if (stage == PHP_INI_STAGE_RUNTIME) {
char *p;
if (memchr(new_value, '\0', new_value_length) != NULL) {
return FAILURE;
}
if ((p = zend_memrchr(new_value, ';', new_value_length))) {
p++;
} else {