iliaa           Mon Jun  7 09:51:59 2004 EDT

  Modified files:              (Branch: PHP_4_3)
    /php-src    NEWS 
    /php-src/main       SAPI.c 
  Log:
  MFH: Fixed bug #28670 (WWW-Authentication header mangling with PCRE in 
  safe_mode adds extra spaces).
  
  
http://cvs.php.net/diff.php/php-src/NEWS?r1=1.1247.2.676&r2=1.1247.2.677&ty=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.1247.2.676 php-src/NEWS:1.1247.2.677
--- php-src/NEWS:1.1247.2.676   Sun Jun  6 12:21:30 2004
+++ php-src/NEWS        Mon Jun  7 09:51:58 2004
@@ -1,6 +1,8 @@
 PHP 4                                                                      NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 ?? ??? 2004, Version 4.3.8
+- Fixed bug #28670 (WWW-Authentication header mangling with PCRE in safe_mode
+  adds extra spaces). (Ilia)
 - Fixed bug #28649 (Proper glob() return value on Linux when there are no
   matches). (Ilia)
 - Fixed bug #28632 (Prevent open_basedir bypass via MySQL's LOAD DATA LOCAL).
http://cvs.php.net/diff.php/php-src/main/SAPI.c?r1=1.155.2.19&r2=1.155.2.20&ty=u
Index: php-src/main/SAPI.c
diff -u php-src/main/SAPI.c:1.155.2.19 php-src/main/SAPI.c:1.155.2.20
--- php-src/main/SAPI.c:1.155.2.19      Tue May 25 18:13:10 2004
+++ php-src/main/SAPI.c Mon Jun  7 09:51:59 2004
@@ -18,7 +18,7 @@
    +----------------------------------------------------------------------+
 */
 
-/* $Id: SAPI.c,v 1.155.2.19 2004/05/25 22:13:10 sesser Exp $ */
+/* $Id: SAPI.c,v 1.155.2.20 2004/06/07 13:51:59 iliaa Exp $ */
 
 #include <ctype.h>
 #include <sys/stat.h>
@@ -595,6 +595,11 @@
                                        zval *repl_temp;
                                        char *ptr = colon_offset+1;
                                        int ptr_len=0, result_len = 0;
+
+                                       /* skip white space */
+                                       while (isspace(*ptr)) {
+                                               ptr++;
+                                       }
 
                                        myuid = php_getuid();
 

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to