From 32fb34e2d1640b50ede5b8a7915ae761605f7a3c Mon Sep 17 00:00:00 2001 From: Stanislav Malyshev Date: Fri, 2 Mar 2007 21:58:05 +0000 Subject: limit nesting level of input variables --- main/php_variables.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'main/php_variables.c') diff --git a/main/php_variables.c b/main/php_variables.c index 9754b4f347..32acb140e9 100644 --- a/main/php_variables.c +++ b/main/php_variables.c @@ -119,10 +119,16 @@ PHPAPI void php_register_variable_ex(char *var, zval *val, zval *track_vars_arra index_len = var_len; if (is_array) { + int nest_level = 0; while (1) { char *index_s; int new_idx_len = 0; + if(++nest_level > PG(max_nesting_level)) { + /* too many levels of nesting */ + php_error_docref(NULL TSRMLS_CC, E_ERROR, "Input variable nesting level more than allowed %d (change max_input_nesting_level in php.ini to increase the limit)", PG(max_input_nesting_level)); + } + ip++; index_s = ip; if (isspace(*ip)) { -- cgit v1.2.1