MFB: Fixed security issue detailed in CVE-2008-0599

diff --git a/sapi/cgi/cgi_main.c b/sapi/cgi/cgi_main.c
index 257e6fcbb44b4492c1b34f69a6e678c0064c10d5..86efb43b2aeb926293f6f749fdbbf057a18cfa56 100644 (file)
--- a/sapi/cgi/cgi_main.c
+++ b/sapi/cgi/cgi_main.c
@@ -1101,7 +1101,7 @@ static void init_request_info(TSRMLS_D)
                                                ) {
                                                        /* PATH_TRANSLATED = PATH_TRANSLATED - SCRIPT_NAME + PATH_INFO */
                                                        int ptlen = strlen(pt) - strlen(env_script_name);
-                                                       int path_translated_len = ptlen + env_path_info ? strlen(env_path_info) : 0;
+                                                       int path_translated_len = ptlen + (env_path_info ? strlen(env_path_info) : 0);
                                                        char *path_translated = NULL;
 
                                                        path_translated = (char *) emalloc(path_translated_len + 1);