mirror of
https://github.com/php/php-src.git
synced 2026-04-29 19:23:22 +02:00
GLOBALS protection for extract() function.
This commit is contained in:
@@ -1459,6 +1459,10 @@ PHP_FUNCTION(extract)
|
||||
/* break omitted intentionally */
|
||||
|
||||
case EXTR_OVERWRITE:
|
||||
if (var_exists && !strcmp(var_name, "GLOBALS")) {
|
||||
break;
|
||||
}
|
||||
|
||||
ZVAL_TEXTL(&final_name, var_name, var_name_len, 1);
|
||||
break;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user