MFB: Fixed bug #37265 (Added missing safe_mode & open_basedir checks to

imap_body()).

diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c
index b564d970be5c465a10bed7e640b78043e3237bc9..202389ffe1ffa27b31c740f474c99b64ca3497aa 100644 (file)
--- a/ext/imap/php_imap.c
+++ b/ext/imap/php_imap.c
@@ -763,6 +763,11 @@ static void php_imap_do_open(INTERNAL_FUNCTION_PARAMETERS, int persistent)
                efree(IMAPG(imap_password));
        }
 
+       /* local filename, need to perform open_basedir checks */
+       if (Z_STRVAL_PP(mailbox)[0] != '{' && php_check_open_basedir(Z_STRVAL_PP(mailbox) TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        IMAPG(imap_user)     = estrndup(Z_STRVAL_PP(user), Z_STRLEN_PP(user));
        IMAPG(imap_password) = estrndup(Z_STRVAL_PP(passwd), Z_STRLEN_PP(passwd));