File php-5.1.2-CVE-2006-1017-real-fix.patch of Package php

Overview Repositories Revisions Requests Users Attributes Meta

File php-5.1.2-CVE-2006-1017-real-fix.patch of Package php

--- ext/imap/php_imap.c
+++ ext/imap/php_imap.c
@@ -761,6 +761,13 @@
 		efree(IMAPG(imap_password));
 	}
 
+	/* local filename, need to perform open_basedir and safe_mode checks */
+	if (Z_STRVAL_PP(mailbox)[0] != '{' &&
+			(php_check_open_basedir(Z_STRVAL_PP(mailbox) TSRMLS_CC) ||
+			(PG(safe_mode) && !php_checkuid(Z_STRVAL_PP(mailbox), NULL, CHECKUID_CHECK_FILE_AND_DIR)))) {
+		RETURN_FALSE;
+	}
+
 	IMAPG(imap_user)     = estrndup(Z_STRVAL_PP(user), Z_STRLEN_PP(user));
 	IMAPG(imap_password) = estrndup(Z_STRVAL_PP(passwd), Z_STRLEN_PP(passwd));
 
@@ -817,6 +824,14 @@
 		}
 		imap_le_struct->flags = cl_flags;	
 	}
+
+	/* local filename, need to perform open_basedir and safe_mode checks */
+	if (Z_STRVAL_PP(mailbox)[0] != '{' &&
+			(php_check_open_basedir(Z_STRVAL_PP(mailbox) TSRMLS_CC) ||
+			(PG(safe_mode) && !php_checkuid(Z_STRVAL_PP(mailbox), NULL, CHECKUID_CHECK_FILE_AND_DIR)))) {
+		RETURN_FALSE;
+	}
+
 	imap_stream = mail_open(imap_le_struct->imap_stream, Z_STRVAL_PP(mailbox), flags);
 	if (imap_stream == NIL) {
 		php_error_docref(NULL TSRMLS_CC, E_WARNING, "Couldn't re-open stream");

Places

File php-5.1.2-CVE-2006-1017-real-fix.patch of Package php

Places