File php-5.1.2-mbstring-secfix.patch of Package php
--- ext/mbstring/mbstring.c 2006/02/11 02:26:07 1.224.2.14
+++ ext/mbstring/mbstring.c 2006/03/02 00:37:22 1.224.2.15
@@ -17,7 +17,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: mbstring.c,v 1.224.2.14 2006/02/11 02:26:07 hirokawa Exp $ */
+/* $Id: mbstring.c,v 1.224.2.15 2006/03/02 00:37:22 yohgaki Exp $ */
/*
* PHP 4 Multibyte String module "mbstring"
@@ -3068,7 +3068,12 @@
HashTable ht_headers;
smart_str *s;
extern void mbfl_memory_device_unput(mbfl_memory_device *device);
-
+
+ if (PG(safe_mode) && (ZEND_NUM_ARGS() == 5)) {
+ php_error_docref(NULL TSRMLS_CC, E_WARNING, "SAFE MODE Restriction in effect. The fifth parameter is disabled in SAFE MODE.");
+ RETURN_FALSE;
+ }
+
/* initialize */
mbfl_memory_device_init(&device, 0, 0);
mbfl_string_init(&orig_str);