File php-CVE-2016-5385.patch of Package php7.5285

Index: php-7.0.7/sapi/cli/php_cli_server.c
===================================================================
--- php-7.0.7.orig/sapi/cli/php_cli_server.c	2016-05-25 15:13:20.000000000 +0200
+++ php-7.0.7/sapi/cli/php_cli_server.c	2016-10-31 11:49:34.440496950 +0100
@@ -603,6 +603,9 @@ static int sapi_cli_server_register_entr
 				key[i] = toupper(key[i]);
 			}
 		}
+		if (!strcasecmp(key, "proxy"))
+			spprintf(&real_key, 0, "%s_X_%s", "HTTP", key);
+		else
 		spprintf(&real_key, 0, "%s_%s", "HTTP", key);
 		if (strcmp(key, "CONTENT_TYPE") == 0 || strcmp(key, "CONTENT_LENGTH") == 0) {
 			sapi_cli_server_register_variable(track_vars_array, key, *entry);
openSUSE Build Service is sponsored by