diff options
| author | Anatol Belski <ab@php.net> | 2018-07-03 14:04:22 +0200 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2018-07-16 15:11:56 -0700 |
| commit | f151e048ed27f6f4eef729f3310d053ab5da71d4 (patch) | |
| tree | 4db3d61a69e67850d79a8f8db06c7b8bcac6ec10 | |
| parent | 5ac5f313bd129007c59ac842985bfdb35258f37d (diff) | |
| download | php-git-f151e048ed27f6f4eef729f3310d053ab5da71d4.tar.gz | |
Fixed bug #76459 windows linkinfo lacks openbasedir check
| -rw-r--r-- | ext/standard/link_win32.c | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/ext/standard/link_win32.c b/ext/standard/link_win32.c index 13ee88dfad..0068a3edb1 100644 --- a/ext/standard/link_win32.c +++ b/ext/standard/link_win32.c @@ -87,6 +87,7 @@ PHP_FUNCTION(readlink) PHP_FUNCTION(linkinfo) { char *link; + char *dirname; size_t link_len; zend_stat_t sb; int ret; @@ -95,12 +96,22 @@ PHP_FUNCTION(linkinfo) return; } + dirname = estrndup(link, link_len); + php_dirname(dirname, link_len); + + if (php_check_open_basedir(dirname)) { + efree(dirname); + RETURN_FALSE; + } + ret = VCWD_STAT(link, &sb); if (ret == -1) { php_error_docref(NULL, E_WARNING, "%s", strerror(errno)); + efree(dirname); RETURN_LONG(Z_L(-1)); } + efree(dirname); RETURN_LONG((zend_long) sb.st_dev); } /* }}} */ |