ID:               49814
 Comment by:       mcdmaster at auone dot jp
 Reported By:      hello at iwamot dot com
 Status:           Open
 Bug Type:         Strings related
 Operating System: *
 PHP Version:      5.3.0
 New Comment:

Sorry but this issue is the same as bug #49785, isn't it?


Previous Comments:
------------------------------------------------------------------------

[2009-10-08 14:15:55] hello at iwamot dot com

Description:
------------
PHP 5 ChangelLog says "Fixed htmlentities/htmlspecialchars not to
accept partial multibyte sequences."
http://www.php.net/ChangeLog-5.php#5.2.5

But it has not been fixed in reality. Please correct the log, or
investigate my patch.
http://iwamot.com/misc/html.c.patch.20091008

Reproduce code:
---------------
// Shift_JIS
echo htmlspecialchars("\x80",  ENT_QUOTES, 'Shift_JIS') . "!\n";
echo htmlspecialchars("\x81/", ENT_QUOTES, 'Shift_JIS') . "!\n";
// EUC-JP
echo htmlspecialchars("\x80",  ENT_QUOTES, 'EUC-JP')    . "!\n";
echo htmlspecialchars("\xA1/", ENT_QUOTES, 'EUC-JP')    . "!\n";

Expected result:
----------------
returning empty string (as well as my patch):

!
!
!
!

or sanitizing:

!
/!
!
/!

Actual result:
--------------
_!
_/!
_!
_/!

("_" means an invalid byte)


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=49814&edit=1

Reply via email to