# HG changeset patch # User Craig Mohrman # Date 1439995518 25200 # Node ID df74c4f80d704d2714413ffc8933b9fac4aeecef # Parent 17cca748f77856f63a1570e73d142f72d59a2e24 21501705 patch 360 breaks php 5.3 diff -r 17cca748f778 -r df74c4f80d70 components/php-5_3/php-sapi/patches/360_php_20804391.patch --- a/components/php-5_3/php-sapi/patches/360_php_20804391.patch Tue Aug 18 23:37:58 2015 -0700 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,34 +0,0 @@ -CVE-2015-2348 -Community BUG: -https://bugs.php.net/bug.php?id=69207 -Community CODE: -http://git.php.net/?p=php-src.git;a=commit;h=1291d6bbee93b6109eb07e8f7916ff1b7fcc13e1 -Below is the community patch. - - -From 1291d6bbee93b6109eb07e8f7916ff1b7fcc13e1 Mon Sep 17 00:00:00 2001 -From: Stanislav Malyshev -Date: Tue, 17 Mar 2015 12:47:58 -0700 -Subject: [PATCH] Fix bug #69207 - move_uploaded_file allows nulls in path - ---- - NEWS | 3 +++ - ext/standard/basic_functions.c | 2 +- - 2 files changed, 4 insertions(+), 1 deletion(-) - -diff --git a/ext/standard/basic_functions.c b/ext/standard/basic_functions.c -index 9a9df30..c3e2230 100644 ---- a/ext/standard/basic_functions.c -+++ b/ext/standard/basic_functions.c -@@ -5775,7 +5775,7 @@ PHP_FUNCTION(move_uploaded_file) - RETURN_FALSE; - } - -- if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "ss", &path, &path_len, &new_path, &new_path_len) == FAILURE) { -+ if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "sp", &path, &path_len, &new_path, &new_path_len) == FAILURE) { - return; - } - --- -2.1.4 -