From: Lars Strojny Date: Wed, 30 Jan 2013 23:32:44 +0000 (+0100) Subject: NEWS entry new OpenSSL option [doc] X-Git-Tag: php-5.5.0alpha5~48^2 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=836a2b1131dd007edad24d921dbdf42a8ac10e32;p=php NEWS entry new OpenSSL option [doc] --- diff --git a/NEWS b/NEWS index d3a450e164..2fc746e3fe 100644 --- a/NEWS +++ b/NEWS @@ -47,6 +47,10 @@ PHP NEWS . Fixed bug #63916 (PDO::PARAM_INT casts to 32bit int internally even on 64bit builds in pdo_sqlite). (srgoogleguy, Lars) +- OpenSSL: + . New SSL stream context option to prevent CRIME attack vector. (Daniel Lowrey, + Lars) + 17 Jan 2012, PHP 5.4.11 - Core: diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c index 8b0fe69e42..0e1523853a 100644 --- a/ext/openssl/xp_ssl.c +++ b/ext/openssl/xp_ssl.c @@ -398,7 +398,7 @@ static inline int php_openssl_setup_crypto(php_stream *stream, #if OPENSSL_VERSION_NUMBER >= 0x10000000L { zval **val; - + if (stream->context && SUCCESS == php_stream_context_get_option( stream->context, "ssl", "disable_compression", &val) && zval_is_true(*val)) {