archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-18 23:18:56 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

MFB51: Fixed possible crash in apache_getenv()/apache_setenv() on invalid

Browse source 
parameters.
This commit is contained in:
Ilia Alshanetsky 2006-01-02 22:19:53 +00:00
parent 61d12ef9ec
commit 331253e7e6
1 changed files with 14 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

18
sapi/apache2handler/php_functions.c
View file

@ -264,9 +264,12 @@ PHP_FUNCTION(apache_setenv)
ctx = SG(server_context); ctx = SG(server_context);
r = ctx->r; r = ctx->r;
if (arg_count == 3 && Z_STRVAL_PP(walk_to_top)) { if (arg_count == 3) {
while(r->prev) { convert_to_boolean_ex(walk_to_top);
r = r->prev; if (Z_LVAL_PP(walk_to_top)) {
while(r->prev) {
r = r->prev;
}
} }
} }
@ -300,9 +303,12 @@ PHP_FUNCTION(apache_getenv)
ctx = SG(server_context); ctx = SG(server_context);
r = ctx->r; r = ctx->r;
if (arg_count == 2 && Z_STRVAL_PP(walk_to_top)) { if (arg_count == 2) {
while(r->prev) { convert_to_boolean_ex(walk_to_top);
r = r->prev; if (Z_LVAL_PP(walk_to_top)) {
while(r->prev) {
r = r->prev;
}
} }
} }