Fixed bug #41628 (PHP settings leak between Virtual Hosts in Apache 1.3).

diff --git a/NEWS b/NEWS
index af49dfce799fbe423a9521af5351f51f32821bb4..1fd1724395df09108b4b0c61eb777f4de5962959 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -39,6 +39,8 @@ PHP                                                                        NEWS
   constants). (Dmitry)
 - Fixed bug #41630 (segfault when an invalid color index is present in
   the image data). (Reported by Elliot <wccoder@gmail dot com>) (Pierre)
+- Fixed bug #41628 (PHP settings leak between Virtual Hosts in
+  Apache 1.3). (Scott, manuel at mausz dot at)
 - Fixed bug #41608 (segfault on a weird code with objects and switch()). 
   (Tony)
 - Fixed bug #41600 (url rewriter tags doesn't work with namespaced tags).

diff --git a/sapi/apache/mod_php5.c b/sapi/apache/mod_php5.c
index 344e7050285a39181ba1194a430d32909397edc4..439ef168e7831fd9d0b46601b2867b3b124710b8 100644 (file)
--- a/sapi/apache/mod_php5.c
+++ b/sapi/apache/mod_php5.c
@@ -764,9 +764,15 @@ static void *php_create_dir(pool *p, char *dummy)
  */
 static void *php_merge_dir(pool *p, void *basev, void *addv)
 {
-       /* This function *must* return addv, and not modify basev */
-       zend_hash_merge_ex((HashTable *) addv, (HashTable *) basev, (copy_ctor_func_t) copy_per_dir_entry, sizeof(php_per_dir_entry), (merge_checker_func_t) should_overwrite_per_dir_entry, NULL);
-       return addv;
+       /* This function *must* not modify addv or basev */
+       HashTable *new;
+
+       /* need a copy of addv to merge */
+       new = php_create_dir(p, "php_merge_dir");
+       zend_hash_copy(new, (HashTable *) addv, (copy_ctor_func_t) copy_per_dir_entry, NULL, sizeof(php_per_dir_entry));
+
+       zend_hash_merge_ex(new, (HashTable *) basev, (copy_ctor_func_t) copy_per_dir_entry, sizeof(php_per_dir_entry), (merge_checker_func_t) should_overwrite_per_dir_entry, NULL);
+       return new;
 }
 /* }}} */