helly           Mon Feb 26 22:46:13 2007 UTC

  Modified files:              
    /php-src/ext/spl    spl_directory.c 
  Log:
  - Add missing access check
  
http://cvs.php.net/viewvc.cgi/php-src/ext/spl/spl_directory.c?r1=1.120&r2=1.121&diff_format=u
Index: php-src/ext/spl/spl_directory.c
diff -u php-src/ext/spl/spl_directory.c:1.120 
php-src/ext/spl/spl_directory.c:1.121
--- php-src/ext/spl/spl_directory.c:1.120       Mon Feb 26 22:32:57 2007
+++ php-src/ext/spl/spl_directory.c     Mon Feb 26 22:46:13 2007
@@ -16,7 +16,7 @@
    +----------------------------------------------------------------------+
  */
 
-/* $Id: spl_directory.c,v 1.120 2007/02/26 22:32:57 helly Exp $ */
+/* $Id: spl_directory.c,v 1.121 2007/02/26 22:46:13 helly Exp $ */
 
 #ifdef HAVE_CONFIG_H
 # include "config.h"
@@ -900,6 +900,11 @@
        }
 
        if (VCWD_REALPATH(filename, buff)) {
+#ifdef ZTS
+               if (VCWD_ACCESS(buff, F_OK)) {
+                       RETVAL_FALSE;
+               } else
+#endif
                if (UG(unicode)) {
                        if (php_stream_path_decode(NULL, &path, &path_len, 
buff, strlen(buff), REPORT_ERRORS, FG(default_context)) == SUCCESS) {
                                RETVAL_UNICODEL(path, path_len, 0);

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to