archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 21:48:51 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fixed handling of session variable serialization on certain prefix characters. Reported by Stefan Esser

Browse source
This commit is contained in:
Ilia Alshanetsky 2010-04-26 18:35:54 +00:00
parent 78f43a53f7
commit 3c78ad763e
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
ext/session/session.c
View file

@ -770,7 +770,7 @@ PS_SERIALIZER_ENCODE_FUNC(php) /* {{{ */
PS_ENCODE_LOOP( PS_ENCODE_LOOP(
smart_str_appendl(&buf, key, key_length); smart_str_appendl(&buf, key, key_length);
if (memchr(key, PS_DELIMITER, key_length)) { if (memchr(key, PS_DELIMITER, key_length) || memchr(key, PS_UNDEF_MARKER, key_length)) {
PHP_VAR_SERIALIZE_DESTROY(var_hash); PHP_VAR_SERIALIZE_DESTROY(var_hash);
smart_str_free(&buf); smart_str_free(&buf);
return FAILURE; return FAILURE;