From: Antony Dovgal <tony2001@php.net>
Date: Sun, 9 Jan 2005 17:58:16 +0000 (+0000)
Subject: MFH: fix bug #31454
X-Git-Tag: php-5.0.4RC1~375
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=7f223f76c63a1dad7d5d5cd4341be15c938462b7;p=php

MFH: fix bug #31454
---

diff --git a/ext/session/session.c b/ext/session/session.c
index a41fe8ccb1..b766c54279 100644
--- a/ext/session/session.c
+++ b/ext/session/session.c
@@ -1358,12 +1358,22 @@ PHP_FUNCTION(session_set_save_handler)
 	zval **args[6];
 	int i;
 	ps_user *mdata;
+	char *name;
 
 	if (ZEND_NUM_ARGS() != 6 || zend_get_parameters_array_ex(6, args) == FAILURE)
 		WRONG_PARAM_COUNT;
 	
 	if (PS(session_status) != php_session_none) 
 		RETURN_FALSE;
+
+	for (i = 0; i < 6; i++) {
+		if (!zend_is_callable(*args[i], 0, &name)) {
+			php_error_docref(NULL TSRMLS_CC, E_WARNING, "Argument %d is not a valid callback", i+1);
+			efree(name);
+			RETURN_FALSE;
+		}
+		efree(name);
+	}
 	
 	zend_alter_ini_entry("session.save_handler", sizeof("session.save_handler"), "user", sizeof("user")-1, PHP_INI_USER, PHP_INI_STAGE_RUNTIME);