iliaa           Thu Jul  8 13:07:22 2004 EDT

  Modified files:              
    /php-src/ext/standard       array.c 
  Log:
  Fixed bug #29049 (array sorting via user function/method does not validate 
  it).
  
  
  
http://cvs.php.net/diff.php/php-src/ext/standard/array.c?r1=1.261&r2=1.262&ty=u
Index: php-src/ext/standard/array.c
diff -u php-src/ext/standard/array.c:1.261 php-src/ext/standard/array.c:1.262
--- php-src/ext/standard/array.c:1.261  Tue May  4 11:03:48 2004
+++ php-src/ext/standard/array.c        Thu Jul  8 13:07:22 2004
@@ -21,7 +21,7 @@
    +----------------------------------------------------------------------+
 */
 
-/* $Id: array.c,v 1.261 2004/05/04 15:03:48 wez Exp $ */
+/* $Id: array.c,v 1.262 2004/07/08 17:07:22 iliaa Exp $ */
 
 #include "php.h"
 #include "php_ini.h"
@@ -569,6 +569,14 @@
        }
 }
 
+/* check is comparison function is valid */
+#define PHP_ARRAY_CMP_FUNC_CHECK(func_name)    \
+       if (!zend_is_callable(*func_name, 0, NULL)) {   \
+               php_error_docref(NULL TSRMLS_CC, E_WARNING, "Invalid comparison 
function.");    \
+               BG(user_compare_func_name) = old_compare_func;  \
+               RETURN_FALSE;   \
+       }       \
+
 /* {{{ proto bool usort(array array_arg, string cmp_function)
    Sort an array by values using a user-defined comparison function */
 PHP_FUNCTION(usort)
@@ -590,6 +598,9 @@
                BG(user_compare_func_name) = old_compare_func;
                RETURN_FALSE;
        }
+
+       PHP_ARRAY_CMP_FUNC_CHECK(BG(user_compare_func_name))
+       
        if (zend_hash_sort(target_hash, zend_qsort, array_user_compare, 1 TSRMLS_CC) 
== FAILURE) {
                BG(user_compare_func_name) = old_compare_func;
                RETURN_FALSE;
@@ -619,6 +630,9 @@
                BG(user_compare_func_name) = old_compare_func;
                RETURN_FALSE;
        }
+
+       PHP_ARRAY_CMP_FUNC_CHECK(BG(user_compare_func_name))
+
        if (zend_hash_sort(target_hash, zend_qsort, array_user_compare, 0 TSRMLS_CC) 
== FAILURE) {
                BG(user_compare_func_name) = old_compare_func;
                RETURN_FALSE;
@@ -694,6 +708,9 @@
                BG(user_compare_func_name) = old_compare_func;
                RETURN_FALSE;
        }
+
+       PHP_ARRAY_CMP_FUNC_CHECK(BG(user_compare_func_name))
+
        if (zend_hash_sort(target_hash, zend_qsort, array_user_key_compare, 0 
TSRMLS_CC) == FAILURE) {
                BG(user_compare_func_name) = old_compare_func;
                RETURN_FALSE;

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to