Search
j0ke.net Open Build Service
>
Projects
>
internetx
:
php5
>
php-5.3.29
> php-CVE-2015-4026.patch
Sign Up
|
Log In
Username
Password
Cancel
Overview
Repositories
Revisions
Requests
Users
Advanced
Attributes
Meta
File php-CVE-2015-4026.patch of Package php-5.3.29
Index: ext/pcntl/pcntl.c =================================================================== --- ext/pcntl/pcntl.c.orig 2012-09-12 23:27:16.000000000 +0200 +++ ext/pcntl/pcntl.c 2015-05-21 17:35:31.954895720 +0200 @@ -758,6 +758,10 @@ if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "s|aa", &path, &path_len, &args, &envs) == FAILURE) { return; } + if (strlen(path) != path_len) { + php_error_docref(NULL TSRMLS_CC, E_WARNING, "pcntl_exec() expects parameter 1 to be a valid path"); + return; + } if (ZEND_NUM_ARGS() > 1) { /* Build argument list */
