On Mon, 23 Dec 2002, Ilia A. wrote:

IA>>> The current implementation of php_register_variable_ex() improperly handles 
IA>>> situations when the name of the variable passed via GET/POST/COOKIES contains 
IA>>> a '[' or it's urlencoded equivalent. The result is a small memory leak 
IA>>> (number of chars between '[' and '=' +1) and invalid data inside the 
IA>>> GET/POST/COOKIES array.
IA>>> The proposed patch makes php_register_variable_ex aware that [ may not be 
IA>>> terminated and adds handling for such conditions. The end result is that the 
IA>>> code no longer leaks memory & can support variable passed via 
IA>>> GET/POST/COOKIES with '[' in their names.
IA>>> 

[02:21] <ilia> melvyn: +1 it :)
[02:23] <melvyn> ilia: not sure that's gonna help with my karma factor :)
[02:23] <ilia> melvyn: doesn't matter :)

so -ehm +1?
-- 
With kind regards,

Melvyn Sopacua
<?php include("not_reflecting_employers_views.txt"); ?>


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to