php/php-5.2.11-BID_36555.patch

14 lines
439 B
Diff
Raw Normal View History

--- php/php-src/branches/PHP_5_2/ext/standard/file.c 2009/09/25 01:53:02 288706
+++ php/php-src/branches/PHP_5_2/ext/standard/file.c 2009/09/29 14:14:02 288945
@@ -838,6 +838,10 @@
convert_to_string_ex(arg1);
convert_to_string_ex(arg2);
+ if (PG(safe_mode) &&(!php_checkuid(Z_STRVAL_PP(arg1), NULL, CHECKUID_ALLOW_ONLY_DIR))) {
+ RETURN_FALSE;
+ }
+
if (php_check_open_basedir(Z_STRVAL_PP(arg1) TSRMLS_CC)) {
RETURN_FALSE;
}